KVKK Privacy Notice
This notice explains how Rise of Banners processes personal data and transfers it abroad under Article 10 of Turkish Personal Data Protection Law No. 6698. The controller is Rise of Banners operator Halil Çağrı Akkuzu. Contact: [email protected].
1. Data and collection methods
We process your lord name, email address, password hash and language preference when you register. Google sign in also processes your Google identifier and email address. While you play, we process game, profile, message, support, session, IP, browser, request-log and security data. If enabled, we process your push endpoint and keys.
We collect this data through registration and support forms, the game client, browser cookies, server logs, and automatically or partly automatically while you use the service.
2. Purposes and legal grounds
We use data to create and operate accounts, provide the game, secure accounts and sessions, send required emails, answer support requests, prevent abuse, fulfil legal obligations, and establish or protect legal claims.
Processing relies on contract formation or performance, legal obligation, and legitimate interests that do not override your fundamental rights. We do not use optional marketing or advertising tracking.
3. International transfers and explicit consent
The service uses providers established abroad. Account and game data may be hosted by DigitalOcean in Germany. Resend may process email addresses in the United States. Cloudflare may process IP and connection-security data in the United States. Google processes Google identifiers and email addresses in the United States only when you choose Google sign in. When Sentry is enabled, error and performance data is processed without user identifiers, IP addresses, cookies, request bodies, or query parameters.
We obtain separate explicit consent for these transfers at registration and record its date and notice version. The transfer is technically required to provide the service. You cannot create an account without it. You may withdraw consent by deleting your account or contacting [email protected].
4. Retention and rights
Account and game data are retained while your account is active. After deletion, direct identifiers are removed and records needed for world integrity or dispute management may be anonymised. Support records are kept for up to three years. Raw analytics events are kept for up to 90 days, while anonymous aggregate statistics may be retained longer.
You may exercise your Article 11 rights, including access, correction, erasure, recipient information, objection to automated outcomes, and compensation requests, through [email protected]. We respond within 30 days without charge.