Privacy Policy

Last updated: 8 October 2026

This policy explains what personal data is processed when you play Equality Hunter (the "Game"), why it is processed, who receives it, how long it is kept and how you can exercise your rights. The Game does not ask for your name, email address or phone number. We collect what we need to run the Game, keep your progress and purchases safe, and keep the Game free with optional ads.

Who is responsible for your data

The data controller is Ömer Can Yücel, an individual developer based in Istanbul, Türkiye, who publishes games under the name OCY Games ("we", "us"). You can reach us at support@ocygames.com about anything in this policy.

What data we process

• Player account: when you first open the Game, Firebase Authentication creates an anonymous account for you. Its random identifier is your player ID, which you can see and copy in Settings → Player ID.
• Game data on our server: your nickname (a random name such as "Blue Hunter 482" until you change it), your friend code, coins, lives, items, upgrades, themes, daily streak, VIP status, best result per level, personal records, the games you submit (the moves you made, the score and the rewards), your friends list and the life gifts you send and receive. We use this data to run the in-game economy, check that scores are genuine and make leaderboards and friends work.
• What other players can see: your nickname, scores, times and records appear on leaderboards and in the Hall of Fame (for some records, together with the equation you built). Your friends see your nickname, your level scores and stars, and your name on the life gifts you send them. Leaderboard data that the Game downloads also contains each entry's player ID. Please do not use your real name or other personal details as your nickname.
• Optional sign-in: where the Game offers it, you can link your account to Game Center, Google Play Games, Google or Apple so that your progress can be restored. Firebase Authentication then receives an identifier from that service and, for Google and Apple, the email address and name that the service shares. We never receive your password.
• Purchases: purchases are processed by Apple (App Store) or Google (Google Play). The Game passes your player ID to the store with each purchase, and our server receives the store receipt (product, transaction identifiers, purchase time and, for VIP, the subscription end date) and checks it with Apple or Google before crediting your account. We never see your payment card or bank details.
• Rewarded ads: when you choose to watch a video, Google AdMob (and in Russia and Belarus, Yandex) receives information from your device to show and measure the ad. See "Ads" below. When a video is completed, AdMob sends our server a signed confirmation containing your player ID, the ad unit, the reward and a transaction identifier, and we store it so the reward can be granted once.
• Analytics and crash reports (only with your consent): if you allow analytics, Firebase Analytics records how the Game is used (for example levels started and finished, equations scored, ads offered and watched, purchases, coins earned and spent, notification opens) together with device model, operating system, app version, language and an approximate location (country or region) derived from your IP address. Firebase Crashlytics records crash reports (technical details of the error and of the device state at the time of the crash). Analytics data is linked to an app instance identifier, not to your player ID. Firebase Performance Monitoring measures how well the Game runs (for example start-up time, screen rendering and how long server requests take) together with device model, operating system and app version.
• Notifications: reminders such as "your lives are full" or "your streak is at risk" are scheduled on your device and are not sent through our server. If you allow notifications, your device also joins a Firebase Cloud Messaging topic so we can announce new levels. Firebase assigns your device a messaging token for this, and our server does not store it.
• Technical data: Firebase services (Remote Config, Analytics, Crashlytics, Performance Monitoring, Cloud Messaging) use a Firebase installation identifier. When the Game talks to our server, Google Cloud records technical logs such as your IP address, the time and type of request and any error. Our server logs may also contain your player ID when a request fails.
• Support emails: if you email us, we receive your email address, your message and anything you attach. Mail to support@ocygames.com is forwarded to us by Cloudflare. The "Report a translation error" link prefills the app version and your language settings.
• Data that stays on your device: your settings, your privacy choices, a copy of your progress and the hour you usually play (used only to time the daily reminder) are stored on your device and are not sent to us.

We do not collect your precise location, contacts, photos or microphone data, and we do not ask for special categories of personal data.

Ads

The Game is free and shows only optional rewarded video ads: you decide to watch a video in exchange for a reward that is shown before you start. There are no banner or forced ads. VIP subscribers receive the rewards without watching.

• Google AdMob serves the ads. On first launch, the Game's own privacy screen asks whether you want personalized ads. In the European Economic Area, the United Kingdom and Switzerland, Google's consent form is also shown. Without your consent, ads are requested as non-personalized.
• Non-personalized ads still use some data, such as your IP address, device type, operating system and language, to deliver the ad, limit how often you see it, measure it and prevent fraud.
• Advertising identifier: on iOS, the Game asks for Apple's tracking permission only if you turn on personalized ads, and your advertising identifier is used only if you allow it. On Android, the ads SDK can read your device's advertising ID, which you can reset or delete in your device settings. With personalized ads off, it is not used to personalize ads.
• Russia and Belarus: AdMob does not serve ads there, so for players in these countries ads may be delivered by Yandex Ads through AdMob mediation. Yandex then processes the same kind of device and ad data under its own privacy policy. Yandex is not used for players in other countries.
• Ad content is limited to material suitable for teenagers (rating "T" or lower).

You can change your choices at any time in Settings → Privacy & ads and, where available, in Settings → Ad privacy choices. Google acts as an independent controller for its ad services; see how Google uses information from apps that use its services.

Purposes and legal bases

We rely on the following legal bases under the EU and UK General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK):

• Providing the Game: your player account, saving progress, the in-game economy, leaderboards, the Hall of Fame, friends, life gifts, optional sign-in and granting what you bought or earned. This is necessary to perform our agreement with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• Verifying purchases and keeping purchase records: performance of the agreement and our legal obligations, for example under tax and accounting law (GDPR Art. 6(1)(b) and (c); KVKK Art. 5(2)(c) and (ç)).
• Security, anti-cheat and fraud prevention: checking submitted games by replaying them, verifying rewarded ad views and purchases, and keeping server logs. This is our legitimate interest in a fair and secure game (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• Non-personalized rewarded ads: our legitimate interest in keeping the Game free, and the fact that you ask to watch each video (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)). Where the law requires consent to store or read information on your device, Google's consent form asks for it.
• Personalized ads and iOS tracking: your consent (GDPR Art. 6(1)(a); explicit consent under KVKK Art. 5(1)).
• Analytics and crash reports: your consent (GDPR Art. 6(1)(a); explicit consent under KVKK Art. 5(1)). They are off until you allow them.
• Notifications: your permission in the device's notification settings, which you can withdraw at any time.
• Answering your messages and requests: our legitimate interest in supporting players, and our legal obligation when you exercise your data protection rights (GDPR Art. 6(1)(c) and (f); KVKK Art. 5(2)(ç) and (f)).

You can withdraw consent at any time in the Game. Withdrawal does not affect processing that took place before it. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

Who receives your data

We do not sell your personal data. We share it only with the following parties:

• Google (Firebase and Google Cloud): hosts our server and database and provides Authentication, Analytics, Crashlytics, Performance Monitoring, Remote Config and Cloud Messaging. Google processes this data on our behalf as our service provider.
• Google AdMob: serves and measures rewarded ads and confirms completed views to our server.
• Yandex: serves rewarded ads to players in Russia and Belarus only.
• Apple and Google as app stores: process purchases and subscriptions, and provide optional sign-in (Game Center, Sign in with Apple, Google Play Games, Google Sign-In). Our server contacts them to verify purchases.
• Cloudflare: forwards emails sent to support@ocygames.com and hosts our website.
• Other players: see your nickname, scores and records as described above.
• Authorities: only when the law requires us to disclose data.

International transfers

Our game server and database run on Google Cloud in the European Union. Firebase services and Google's ad services may process data in the United States and other countries. For transfers from the European Economic Area or the United Kingdom to countries without an adequacy decision, we rely on Google's certification under the EU-US Data Privacy Framework and on the European Commission's standard contractual clauses. For transfers from Türkiye, we rely on the transfer mechanisms of KVKK Article 9, such as standard contracts, and, where no other mechanism is available, on your explicit consent for occasional transfers. For players in Russia and Belarus, Yandex processes ad data under its own terms, which may include processing in Russia.

How long we keep data

• Player account and game data: as long as your player account exists. Because the Game does not ask for your email address, we cannot tell whether you have stopped playing. If you no longer play, please delete your account (see below).
• Purchase records: after your account is deleted, we keep the store transaction record (product, date and store transaction identifiers) without your nickname or game data for as long as tax and accounting law requires, and to prevent the same purchase from being redeemed twice.
• Analytics data: up to 14 months, then deleted automatically by Firebase.
• Crash reports: up to 90 days.
• Server logs: up to 30 days.
• Support emails: as long as needed to answer you and handle any follow-up, then deleted.
• Data on your device: until you uninstall the Game or clear its data.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, to object to processing based on legitimate interest, and to withdraw your consent at any time. Under KVKK Article 11 you have the right to learn whether your data is processed and request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties in Türkiye or abroad to whom it is transferred, to request its correction, deletion or destruction and the notification of these to third parties, to object to a result against you arising exclusively from automated analysis, and to claim compensation for damage caused by unlawful processing.

How to exercise them:

• In the Game: change your personalized ads and analytics choices in Settings → Privacy & ads; where available, change Google's ad consent in Settings → Ad privacy choices; turn notifications on or off in Settings → Notifications; change your nickname in Settings → Nickname.
• On your device: on iOS, manage tracking in Settings → Privacy & Security → Tracking; on Android, reset or delete your advertising ID in the device's Google or privacy settings. You can also turn off notifications in your device settings.
• By email: write to support@ocygames.com and include your player ID (Settings → Player ID, tap to copy). Without it we cannot find your data, because we do not know your name or email address. We may ask for additional information to confirm that the request comes from the account owner.

We answer free of charge within one month under the GDPR (extendable by two months for complex requests, in which case we will tell you) and within 30 days under KVKK. You also have the right to complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu); in the EU or UK, the authority of the country where you live or work.

Deleting your account

You can delete your account in the Game under Settings → Delete my account. Alternatively, email support@ocygames.com with the subject "Delete my account" and your player ID, and we will complete your request within 30 days. Deletion removes your player profile, game history, friends list, gift inbox, friend code, leaderboard and Hall of Fame entries and your Firebase account, and removes you from your friends' lists. Coins, items, VIP time and progress cannot be restored after deletion. Purchase records are kept as described above. Analytics data is not linked to your player ID, so it is not deleted with the account but expires automatically after the period stated above. Uninstalling the Game does not delete the data on our server.

Children

The Game is rated for ages 12 and up and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you are under the age at which you can consent to data processing in your country (between 13 and 16 in the European Union), please ask a parent or guardian before allowing personalized ads or analytics. Purchases are subject to the parental controls of the App Store and Google Play. If you believe a child under 13 has given us personal data, contact us and we will delete it.

Security

Data is sent between the Game and our server over encrypted connections. The Game does not access our database directly; every request goes through our server, which first checks your sign-in token. Purchases and ad rewards are verified with Apple, Google and AdMob before anything is granted. No system is perfectly secure, but we take reasonable measures to protect your data.

Changes to this policy

We will update this page when the Game or our practices change, and the date at the top will show the latest version. We will announce important changes in the Game and, where a change requires your consent, we will ask for it again.

Contact

For any question about this policy or your data, write to support@ocygames.com.