Privacy Policy

Effective date: 2026-10-02

Siege Mail (the "game") is developed by Musa Özçelik ("we"). This policy explains what data is processed when you play, why, and your rights. Musa Özçelik is the data controller under the EU General Data Protection Regulation (GDPR) and Turkey's Law No. 6698 (KVKK).

Data we collect

• Guest account ID: a random ID is created when you first open the game. We don't ask for your name, email or phone number.
• Username: the name assigned to you or chosen by you. It is visible to your opponents and in replays you share.
• Game data: matches, trap and raid moves, replays, level, experience, in-game currencies, upgrades and Campaign progress.
• Language and time zone: to show text in your language and to avoid sending notifications at night.
• Notification token and device platform: only if you allow notifications, so we can send alerts such as "your turn".
• Technical logs: IP address and request time are kept briefly for server security and abuse prevention (rate limiting).
• Purchase history: if you make an in-app purchase, the product, store and transaction ID (so the reward is granted once). Your payment details stay with the App Store or Google Play and never reach us.
• Advertising data (mobile app only): Google AdMob processes your device/advertising ID, approximate location derived from IP address, ad interactions and technical diagnostics to show and measure ads and prevent fraud. For personalized ads you are asked for permission (App Tracking Transparency on iOS, a consent form in the EU, UK and Turkey); if you decline, non-personalized ads are shown.

We don't collect precise location, contacts, photos or microphone data. You can change your ad consent anytime in Settings → Ad privacy choices.

Why we use data

• To run the game: recognize your account, match players, validate moves and store replays (performance of a contract).
• To send notifications: only with your consent (you can withdraw it anytime in your device settings).
• To verify purchases and rewarded ads: so rewards are granted only for real purchases or completed ads, and only once (performance of a contract).
• To show ads: to keep the game free (consent for personalized ads; legitimate interest otherwise).
• Security and fair play: preventing cheating and abuse (legitimate interest).

Who we share data with

We don't sell your data. We use these service providers to run the game:

• Google Firebase Cloud Messaging: delivering notifications to your device.
• Google AdMob: showing ads and verifying rewarded ads. How Google uses data: https://policies.google.com/technologies/partner-sites
• RevenueCat: validating and recording in-app purchases (your player ID and purchase details).
• Cloudflare: domain and secure connections (network traffic passes through it).
• Our server hosting provider: game server and database.

These providers process data only on our behalf to provide the service. Some may be located outside Turkey (e.g. in the EU or US); transfers are limited to what the service requires.

Retention

Account data is kept until your account is deleted. Technical logs are deleted automatically after a short period. Shared replay links are no longer linked to your identity once your account is deleted.

Your rights and account deletion

You have the right to access, correct and delete your data and to object to processing.

• You can delete your account in the app: Settings → Delete account. Your account, progress and notification registrations are permanently deleted; ongoing matches are forfeited.
• If you can't access the app, email musastrage@gmail.com with your username and we will complete your request within 30 days.

Children

The game is not directed at children under 13 and we don't knowingly collect data from them.

Changes

If we update this policy we will change the effective date and announce significant changes in the game.

Contact

Musa Özçelik — musastrage@gmail.com