KVKK Privacy Notice
This notice explains how Rise of Banners processes personal data and transfers it abroad under Article 10 of Turkish Personal Data Protection Law No. 6698. The controller is Rise of Banners operator Halil Çağrı Akkuzu. Contact: [email protected].
1. Data and collection methods
We process your lord name, email address, password hash and language preference when you register. Google sign in also processes your Google identifier and email address. While you play, we process game, profile, message, support, session, IP, browser, request-log, device information (desktop/mobile, browser/app mode, and general device type), and security data. If enabled, we process your push endpoint and keys. Our third-party product-analytics provider, PostHog (United States), processes in-game behavioral events linked to your account identifier (including event name, route pattern, session, device context, and internal account, player, village, or conversation identifiers), browser click and page-view interactions, an approximate location derived from your IP address, and, where enabled, screen session recordings. The custom event data we send never includes email addresses, usernames, village names, banner tags, message text, free text, coordinates, or tokens; however, your IP address, and any text visible on your screen during a session recording, is separately processed by PostHog.
We collect this data through registration and support forms, the game client, browser cookies, server logs, and automatically or partly automatically while you use the service.
2. Purposes and legal grounds
We use data to create and operate accounts, provide the game, secure accounts and sessions, send required emails, answer support requests, prevent abuse, fulfil legal obligations, and establish or protect legal claims.
Processing relies on contract formation or performance, legal obligation, and legitimate interests that do not override your fundamental rights. Analytics is product analysis carried out through our third-party provider, PostHog, to improve the service; this processing falls within the international transfer described in section 3. We do not sell analytics data or use it for ad targeting.
3. International transfers and explicit consent
The service uses providers established abroad. Account and game data may be hosted by DigitalOcean in Germany. Resend may process email addresses in the United States. Cloudflare may process IP and connection-security data in the United States. Google processes Google identifiers and email addresses in the United States only when you choose Google sign in. When Sentry is enabled, error and performance data is processed without user identifiers, IP addresses, cookies, request bodies, or query parameters. For product analytics and session recording, PostHog processes your behavioral data linked to your account identifier, your IP address, and, where enabled, your screen session recordings, on its servers located in the United States (us.i.posthog.com).
We obtain separate explicit consent for these transfers at registration and record its date and notice version. The transfer is technically required to provide the service. You cannot create an account without it. You may withdraw consent by deleting your account or contacting [email protected].
4. Retention and rights
Account and game data are retained while your account is active. After deletion, direct identifiers are removed and records needed for world integrity or dispute management may be anonymised. Your analytics record in PostHog is not automatically deleted or anonymized when your account is deleted; your PostHog account identifier (distinct id) may remain independently of the account tombstone process and is subject to PostHog's standard platform-wide retention period. If you would like this record deleted separately, you may request it through [email protected]; we will also forward the request to PostHog. Support records are kept for up to three years.
You may exercise your Article 11 rights, including access, correction, erasure, recipient information, objection to automated outcomes, and compensation requests, through [email protected]. We respond within 30 days without charge.