Turkish Data Protection (KVKK) Notice
Under Turkish Law No. 6698, the data controller is Ahmet ÇINAR; Polimelo is the brand name. This is an information notice, not a consent declaration. Reading it, having an account or checking a general box does not mean you consent to all processing and transfers.
Publisher and data requests
Ahmet ÇINAR · Polimelo · Türkiye
Support and data-request email: [email protected]
In-game Support1. Collection methods and scope
Data are collected electronically, automatically or partly automatically, through the web/portal client, account/sign-in forms, Google sign-in provider, game API, cookies/IndexedDB/local storage, security SDK, editor and support/feedback screens. Identity/contact, account/session, gameplay/progress/solution/reward, community content, support, feedback, technical and security categories are detailed in the Privacy Policy.
2. Purposes and legal grounds
The grounds below apply only where the operation actually meets the stated requirements. Having an account does not make every data field necessary for a contract. Children and country-specific rules require separate consideration. Processing and international transfer are distinct legal operations.
| Purpose/scope | KVKK ground |
|---|---|
| Requested game/account service: session, progress, daily puzzle validation and rewards | Art. 5(2)(c), only insofar as directly related and necessary to establish/perform a contract. Valid-contract/capacity requirements must also be met. |
| Security, abuse prevention and minimal operational records; evaluation of voluntarily submitted level responses | Art. 5(2)(f) for necessary legitimate interests that do not impair fundamental rights/freedoms; minimisation and balancing are required. Feedback is not mandatory. |
| Protecting anonymous level statistics against fake/repeated contributions (keyed account hash kept for at most two weeks); aggregate statistics from progress records | Legitimate interest, Art. 5(2)(f). Weekly totals contain no identity; only authorised administrators see them and they are not matched with other records. Can be turned off in Settings. |
| Handle support and data requests, disputes/infringements | As applicable: necessary contractual processing under Art. 5(2)(c), legal obligations under 5(2)(ç), or establishment/exercise/protection of rights under 5(2)(e). This does not permit retaining every ticket field indefinitely. |
| Available community, level publication and visible ranking features | Art. 5(2)(c) for the necessary part of a requested feature; other visibility/reuse requires an appropriate separate ground and scope. Online availability does not authorise all uses. |
| Future optional analytics/diagnostics | Separate, specific, informed and freely given consent under Art. 5(1), where required. These three services are disabled for the initial release; this notice does not collect consent. |
3. Recipients and international transfers
Google/Firebase and Cloudflare infrastructure are used for service delivery/security; the relevant CrazyGames/GameDistribution portal and advertising partners in portal editions; and, if activated, Resend and recipient mail services for support email. Authorised administrators/support persons have task-limited access. Data may be disclosed to competent authorities where legally required. Other players can see publicly presented names/tags/scores or level content.
Processing outside Türkiye requires a separately valid transfer condition under KVKK Art. 9. A general mandatory consent checkbox does not replace safeguards for an ongoing cloud service. This draft does not treat actual transfer contracts/safeguards as verified; provider/service-specific information completed before release will also be reflected in the Privacy Policy’s transfer section.
4. Rights under KVKK Art. 11
You may learn whether data are processed, request information, learn the purpose and whether use matches it, know domestic/overseas recipients, request correction of incomplete/inaccurate data and erasure/destruction when legal conditions apply, request notification of corrections/erasure to recipients, object to adverse results from exclusively automated analysis, and seek compensation for damage from unlawful processing.
5. Requests and response times
You can submit a data request through in-game Support. You may also use an email address previously supplied to us and recorded in our system to contact the data-request mailbox. Other valid written/electronic methods and required request particulars are governed by the Turkish Application Procedures Communiqué; a postal/registered-electronic-mail address not yet published must not be assumed to exist.
Describe your request and the relevant account. A formal KVKK application requires the particulars prescribed by the Communiqué, such as name, appropriate identifying information, service address, request and, depending on the method, signature. We do not routinely ask every player for identity documents; necessary verification is handled securely and proportionately. Knowing someone’s email is not sufficient to delete their account.
A valid request receives a reasoned response as soon as possible and within 30 days. This is not a promise that physical erasure from every backup finishes in 30 days. Requests are generally free; only actual costs permitted by the Communiqué may apply. If a response is inadequate, a request is refused or there is no timely response, you may complain to the Turkish Board within statutory time limits and procedures.