Catchyard · Privacy Policy
In short. Catchyard has no accounts. We don't ask for your name, email, phone number or location. Your game progress is backed up on our server under a device identifier. The game shows ads; ad networks process your phone's advertising ID and some device information under their own policies. We don't sell your data.
1. Scope
This policy covers Catchyard: Space Rocket Game (Android package dev.zippex.catchyard) and the catchyard.zippex.dev server it connects to. Applicable law: Turkey's Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
2. Data controller
| Name | YESEY Kurumsal Hizmetler |
|---|---|
| Address | Şenlikköy Mah. Yeşilköy Halkalı Cad. No: 93/2 Bakırköy / İstanbul, Türkiye |
| catchyard@zippex.dev |
3. Data we collect
| Data | Why | Where, how long |
|---|---|---|
| Device identifier (the ID Android gives the app). Only a one-way hash (SHA-256) is stored on the server. | To recognise you without an account, back up your save and move it to a new phone. | Our server; while you use the game. |
| Player code (CY-XXXXXX) and session token (stored hashed) | To verify the save belongs to you. The code is shown in Settings. | Our server; while you use the game. |
| Game save: progress, in-game money, upgrades, settings | Cloud backup, so progress isn't lost when you change phones. | Our server; while you use the game. |
| Platform (Android/iOS), app version, last-seen and created time | To deliver updates to the right version and debug problems. | Our server; while you use the game. |
| In-game events: session length, level attempts and results, ads watched, purchases made with in-game money | To improve the game: which levels are hard, where players stop, whether ads are annoying. Contains no name or contact details. | Our server; at most 2 years. |
| Country (derived from the IP address, IP not stored), phone language, device model, Android version | To see where and on which devices the game is played; language and compatibility decisions. | Our server; while you use the game. |
| Purchase record: product, store, order number, receipt (hashed), status | To verify real-money purchases (e.g. no-ads, skins) and grant them; refunds and accounting. | Our server; for the legal retention period (10 years). |
| IP address | Rate limiting against abuse. Not stored; kept hashed in a one-minute counter. | Server; at most 1 minute. The hosting provider's access logs may keep it briefly. |
We never see payment details (cards etc.); payments are handled by Google Play / the App Store.
4. Ads and third parties
The game shows banner, interstitial and rewarded ads. Rewarded ads only open when you tap the button. Ads are served by Google AdMob; through AdMob mediation these networks may also serve ads: InMobi, Pangle, Unity Ads, Liftoff (Vungle), Yandex Ads, Start.io. They process your phone's advertising ID, IP address (approximate location), device information and ad interactions to show and measure ads and prevent fraud, under their own policies.
In the EEA and UK the game shows Google's consent form on first launch; you can refuse personalised ads. You can reset or delete your advertising ID in your phone's settings.
Policies: Google · InMobi · Pangle · Unity · Liftoff · Yandex · Start.io
Our server is hosted in Turkey. Ad networks may process data in other countries.
5. Legal basis
Providing the game and cloud backup: performance of contract. Security and abuse prevention: legitimate interest. Personalised ads (EEA/UK): consent. Purchase records: legal obligation.
6. Your rights and deleting your data
To access, correct or delete your data, email catchyard@zippex.dev with your player code (in Settings), or use the data deletion page. We handle requests within 30 days; your save and device record are deleted from the server. Purchase records are kept for the legal period. Uninstalling the app deletes the data on your phone.
7. Children
The game is not directed at children under 13 and we do not knowingly collect data from them. Ads are limited to content suitable for teens (max "T").
8. Security
The connection between the game and the server is encrypted (HTTPS). Device IDs and tokens are stored hashed.
9. Changes
If we change this policy we'll update this page and its effective date, and announce important changes in the game.