Türkçe

Privacy Policy

How personal data is handled in the ZINK! app and on this website.

Controllers

Mustafa Erhan Kaya and Tuna Ertürk are joint controllers. For privacy, support and personal data requests: erhankaya3470@gmail.com.

Last updated: 21 September 2026.

You may send requests concerning either controller to this shared contact address.

Data we process

Purposes and legal bases

Necessary account and game processing supports the performance of our contract with you. Essential security and abuse prevention rely on legitimate interests balanced against your rights; mandatory records support legal obligations. Optional analytics and crash reporting rely on consent. Data is obtained electronically through your actions in the app, technical communications and messages you send us.

Your choices

Analytics and crash reporting start switched off. You can change each choice separately in Privacy and data under Settings. Refusing does not prevent you from playing. Withdrawing consent does not affect earlier lawful processing; you can also request deletion of records already sent.

The first App Store release is ad-free. It does not show automatic or rewarded ads, and ZC cannot be earned by watching ads in this release.

Service providers

These providers may process data outside your country, including in the United States and Europe. Hosting the database in Frankfurt does not mean every processing activity occurs only in Germany. International transfers are assessed according to the service involved and applicable data protection requirements. Contact us for information about providers and the transfer safeguards applicable to your request.

Supabase privacy · Firebase privacy · Resend privacy · Vercel privacy · Google privacy

RevenueCat privacy

Retention and deletion

Account and progress data are retained to provide the service while your account is open. Once account deletion completes, your sign-in account is removed and your display name and profile content are cleared. Some score, transaction, deletion and security records may remain under an account identifier; we do not describe these as fully anonymous. You may also exercise deletion and other rights regarding these records.

Analytics retention depends on the Google Analytics property’s retention settings and report type. Crashlytics starts removing crash traces and associated identifiers from live and backup systems after 90 days. Support correspondence is retained as needed to resolve your request and meet relevant legal obligations. Retention criteria include the service purpose, security need, request status and applicable legal periods.

Raw purchase notifications are removed after processing or account deletion, with a server task also clearing raw records older than 24 hours. Transaction identifiers and limited accounting records may remain for refunds and duplicate-delivery prevention; we do not describe all retained records as anonymous. Technical cleanup windows are not the legal retention period for all records. Account deletion does not initiate a money refund; Apple handles store payments and money refunds. Contact our support address for deletion requests involving Google or RevenueCat records.

Account deletion clears the account link, free text and unnecessary technical details from in-app feedback and question reports. Personal text in username reports is cleared when the deleted account is the reporter or the reported player. Decision records and row identifiers remain for moderation integrity. Personal fields in resolved reports become eligible for daily cleanup after 90 days. Deletion records do not retain a free-text reason, sign-in provider or app version; the request-correlation digest is removed by the daily task after 365 days.

Verified round records are retained to protect ranking integrity and correct the scoring effect of faulty questions; minimum transaction identifiers are retained for refunds and duplicate ZC delivery prevention. Retention is reassessed when these purposes no longer apply. Support emails and provider-system records are separate from this in-app cleanup; send related requests to our shared support address.

Delete your account

In the app, use Settings → Account → Delete account. If you cannot access the app, request deletion by email through our account deletion page. Uninstalling the app does not delete your server account.

Your rights

Depending on applicable law, you may ask whether we process your data, request information and access, correct it, request erasure, object, restrict processing, port your data or withdraw consent. Contact the address above. We may need to verify your identity safely, but will never ask for your password or one-time codes. We assess requests within applicable legal time limits.

You may complain to the Turkish Personal Data Protection Authority or the competent data protection authority in the EU/EEA.

Children and this website

The service is intended for a general audience and is not specifically directed at children. Parents and legal guardians can contact us about a child’s information. Where parental consent is required, a parent or guardian must provide it; an app store age rating does not replace that requirement.

The website’s sample game runs in your browser and does not send answers or scores to a server. The site uses no advertising/analytics cookies, third-party analytics scripts or remotely loaded fonts. The hosting provider processes technical connection information to serve and protect the site.

Earlier test versions

If you used earlier TestFlight versions with advertising, Google AdMob and UMP may have processed approximate location inferred from IP addresses, device identifiers, ad interactions and diagnostics for ad delivery, measurement and security. Contact us about requests concerning those historical records. The first App Store release does not offer these advertising features.

Changes

The current policy is published here. We provide appropriate notice of material changes and request new consent where new processing requires it.