Square Siege – Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes the data practices of Square Siege ("Game," "Service," "Application," or "we") developed and operated by Mehmet BAŞCI ("Developer," "we," "us," or "our").

This Policy applies to:

• Personal information collected through the Game on mobile devices (iOS and Android);
• Information collected from interactions within the Game, including gameplay, chat, and in-app purchases;
• Information collected through third-party services integrated into the Game (Firebase, AdMob, etc.).

1.1. Age Restrictions and Children's Privacy

Square Siege is intended for users aged 13 years and older. We do NOT knowingly collect personal information from children under 13 years of age (or 16 in some jurisdictions such as the European Union). If you are a parent or guardian and believe we have inadvertently collected personal information from a child under the applicable age threshold, please contact us immediately at 24voltapp@gmail.com. Upon verification, we will delete such information as quickly as possible.

1.2. Compliance with Laws

This Privacy Policy is designed to comply with applicable data protection and privacy laws worldwide, including but not limited to: General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA / CPRA), Personal Information Protection Law (KVKK – Türkiye), and other applicable local data protection regulations.

2. Information We Collect

We collect different types of information to provide, maintain, improve, and secure the Game.

A. Information You Provide

• Account Registration Information: When you create an account, we may collect your display name, email address, profile picture (if provided via third-party authentication), and a unique User ID. For Guest Accounts, we generate a temporary anonymous identifier.
• User-Generated Content (Chat Messages): When you use in-game chat, we process the message content, sender/recipient IDs, and timestamps.
  Retention Note: Messages related to an active game are deleted from our primary database when the game session ends. Exception: If a user is reported for violating our Terms of Use, the associated chat session is encrypted and securely archived for investigation and legal purposes.
• Customer Support Communications: When you contact us, we collect your email address, message content, and necessary account/device information.

B. Information Collected Automatically

• Device, Security, and Technical Information:
  • Device Information: Device Model, Operating System, Language, Time Zone, Screen Resolution.
  • Network Information: Connection type (Wi-Fi, cellular), IP Address.
• IP Address: Your IP address is processed for two distinct purposes: (1) For Legal Compliance, where it is encrypted and securely archived, and (2) For Anti-Fraud Measures, where it is used as one component in creating a Device Fingerprint.
• Device Identifiers for Anti-Fraud: To prevent abuse (e.g., creating multiple accounts to farm rewards), we create a Device Fingerprint by combining technical attributes of your device (IP address, User Agent, etc.). This is processed based on our Legitimate Interest to maintain a fair environment.
• Advertising ID (GAID/IDFA): We collect your Advertising ID for two purposes: (1) for Anti-Fraud measures, and (2) for Advertising purposes (shared with AdMob). Collection for personalized advertising is subject to your explicit consent via the Consent Manager.
• Game Usage Data: Gameplay data (scores, match history, win rates), session data, and social interactions (friends list).

2.1. Device Permissions Requested

To provide specific features, we may request access to certain permissions on your device. You can manage these permissions at any time via your device settings:

• Notifications: To send you game updates, reward reminders, and security alerts.
• Internet / Network State: Required for full game functionality (multiplayer connection, ads, anti-cheat, server verification).
• Storage / Photos (Optional): If you choose to upload a custom profile picture, we request read access to your photo library.

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide and Maintain the Service: To create accounts, enable gameplay, save progress, and provide support.
• Improve and Personalize the Game: To analyze usage and optimize the user experience.
• Advertising and Monetization: To display ads via Google AdMob and measure their performance.
• Security, Safety, and Compliance: To detect cheating, enforce our rules, moderate content, and comply with legal obligations.
  Important: Even after you exercise your Right to Erasure, we retain anonymized Device Fingerprints and legally mandated, encrypted archives (such as IP logs) based on our Legitimate Interest to prevent fraud and our Legal Obligation. These records are disassociated from your deleted personal account.
• Analytics: To understand user behavior in an aggregated and anonymized form (via Google Firebase).

4. Legal Bases for Processing (GDPR)

We process your data based on:

• Contract Performance: To provide the game service to you.
• Explicit Consent: For personalized advertising and optional tracking.
• Legitimate Interests: For analytics, security, anti-cheat, and fraud prevention.
• Legal Obligation: To comply with lawful requests from authorities.

5. Advertising & Consent Management

We have integrated Google's User Messaging Platform (UMP) SDK, a certified Consent Management Platform (CMP) compliant with GDPR and Google Consent Mode v2.

• Consent: For users in applicable regions (EEA/UK), a consent dialog is shown upon first launch. You can accept, reject, or manage options granularly.
• Manage Choices: Your consent choices can be reviewed and changed at any time via the Game Settings menu (Settings > Privacy > Privacy Options).
• Opt-Out: Opting out of personalized advertising will result in non-personalized (contextual) ads.

6. How We Share Your Information

We do NOT sell your personal information for monetary value. We share data only with trusted partners to operate the game:

6.1. Third-Party Service Providers

• Google Firebase (Analytics, Auth, Database): Used for backend services. Privacy Policy
• Google AdMob: Used for displaying advertisements. AdMob may collect device IDs and location data. Google Ad Privacy
• Google Play Services / Apple Game Center: Used for authentication and achievements.

7. Data Security, International Transfers, and Retention

• Security: We use encryption (HTTPS/TLS), access controls, and pseudonymization (hashing) to protect your data.
• Transfers: Our services are hosted on Google Cloud Platform, primarily in the europe-west1 (Belgium) region. Data may be transferred internationally under standard contractual clauses.
• Retention:
  • Account Data: Retained while your account is active.
  • Encrypted IP Logs: Retained for up to 2 years for legal compliance.
  • Device Fingerprints: Retained for up to 2 years to prevent fraud.
  • Chat Logs (Reported): Retained for up to 1 year for investigation.

8. Your Privacy Rights

Depending on your location, you have the following rights:

• Right of Access: Request a copy of your data.
• Right to Erasure (Delete Account): Request permanent deletion of your personal account.
• Right to Restriction: Limit how we process your data.
• Right to Object: Object to processing based on legitimate interests.

8.1. Account Deletion Methods (Exercising Your Rights)

You can delete your account and associated data through the following methods:

• In-App Deletion: Go to Settings > Account > Delete Account within the game. This will initiate the deletion process immediately.
• Web Request: If you cannot access the app, submit a deletion request via email to 24voltapp@gmail.com with the subject "Account Deletion Request".
• Effect of Deletion: Your personal profile (Name, Email, Inventory) will be deleted. Your match history will be anonymized. Note: Anti-fraud data (Device Fingerprint) will be retained to prevent ban evasion.

9. US State Privacy Rights (CCPA/CPRA/VCDPA)

For residents of California, Virginia, and other US states:

• No Sale of Data: We do not sell your personal information for money.
• Sharing for Advertising: We may "share" identifiers (like Advertising ID) with Google AdMob for cross-context behavioral advertising.
• Right to Opt-Out: You can opt-out of this sharing by adjusting your device's privacy settings (e.g., "Ask App Not to Track" on iOS, "Delete Advertising ID" on Android) or via the privacy options in the game settings.

10. Changes to This Policy

We may update this Policy periodically. We will notify you of material changes through the App or our website.

11. Contact Information

Data Controller / Developer: Mehmet BAŞCI
Email: 24voltapp@gmail.com
Website: www.24voltapp.com