Privacy Policy
Last updated: 14 November 2026
This policy explains what personal data we process when you play Veil & Vendetta: Merge Drama ("the game") on Android or iOS, or visit this website, why we do it, and the rights you have. It is also our information notice under the Turkish Personal Data Protection Law No. 6698 (KVKK), and it covers the EU and UK General Data Protection Regulation (GDPR) and the Philippine Data Privacy Act of 2012.
- Who we are
- Data we process and why
- Ads and analytics
- Who receives data
- International transfers
- How long we keep data
- Your rights
- Deleting your account
- Children
- Security
- Changes
- Contact
1. Who we are
The data controller is AppVision Yazılım Hizmetleri Limited Şirketi, Maslak Mah. AOS 55. Sk. 42 Maslak A Blok No: 2 İç Kapı No: 25, 34398 Sarıyer, İstanbul, Türkiye ("we", "us"). For privacy questions write to privacy@veilvendetta.com.
2. Data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Game data on your device: your progress, story choices, items, currencies and settings. | Running the game. This data is saved on your device. | Contract (GDPR art. 6(1)(b); KVKK art. 5(2)(c)). |
| Player account: a random sign-in secret created on your device, the player account ID our server assigns to it, a random identifier for your copy of the app, your country (worked out from your network connection), your platform, app version and game content version, the days you played and the test groups you are in. | Connecting the game to our server; keeping game time, events and new episodes on schedule; delivering content updates; linking your purchases to your account; trying out changes to the game with groups of players. | Contract; legitimate interests in improving the game (GDPR art. 6(1)(f); KVKK art. 5(2)(f)). |
| Purchases: product, order and transaction IDs, the purchase token the app store gives the game, purchase time and status, and the player account ID the game sends to the store with the purchase. Payments are handled by the app store; we never see your card details. | Checking that a purchase is genuine, delivering what you bought, preventing fraud, keeping legally required records, and choosing which offers and rewarded videos the game shows (for example, players who bought something recently are not offered videos). | Contract; legal obligation (GDPR art. 6(1)(c); KVKK art. 5(2)(ç)); legitimate interests for fraud prevention and offers. |
| Advertising data: see section 3. | Showing reward videos that keep the game free. | See section 3. |
| Game analytics: what happens in the game (screens and windows opened, orders served, story tasks and days completed, items merged, currencies earned and spent, story videos started and finished, offers and reward videos shown and what they earned, the steps of a purchase, your answer to the notification question), together with a random identifier for your copy of the app, your player account ID, device and app information and an approximate location (country or region) derived from your IP address. Nothing you type is included. | Understanding how the game is played so we can balance it, fix problems and improve it, and measuring how reward videos and our advertising campaigns perform. | See section 3. |
| Crash and performance reports: when the game crashes or stops responding, what went wrong and where in the game, the device model, operating system version, memory and storage state, app and game content version, story day, test groups and a random installation identifier. | Finding and fixing errors. | Legitimate interests (GDPR art. 6(1)(f); KVKK art. 5(2)(f)). |
| Notifications: your device's notification token and whether you allowed notifications. Reminders such as "energy full" are scheduled on your device itself. | Telling you when a new episode or story day is ready, when an event is ending or when your energy is full. You can turn notifications off at any time in your device settings. | Your permission in the device's notification settings (GDPR art. 6(1)(a); KVKK art. 5(1)); legitimate interests for storing the token. |
| Technical data: IP address, device and operating system type, app version and request times recorded in our server logs. | Operating the service, keeping it secure, preventing abuse and fixing errors. | Legitimate interests. |
| Support messages: your e-mail address and what you write to us, by e-mail, in our help portal or in the game (Settings → Help & Feedback). When you contact us from the game, our server tells our support desk your player account ID, app version, device model, story day and test groups, so we can find your account and understand the problem. | Answering you and handling your requests. | Legitimate interests; contract where the request concerns the game. |
| Website visits: this website sets no cookies and runs no analytics. Our hosting provider processes your IP address to deliver the pages and protect the site. | Delivering and securing the website. | Legitimate interests. |
We collect this data electronically through the game, our servers, the website and e-mail. We do not use it for automated decisions that have legal or similarly significant effects on you.
3. Ads and analytics
Veil & Vendetta is free to play. Its only ads are videos you choose to watch for a reward, such as extra energy or a free speed-up; there are no banners and no full-screen ads that interrupt play. The videos are served by our advertising partner, an ad network.
To show and measure these videos, the ad network's software in the game processes your device's advertising identifier (on Android the advertising ID; on iPhone and iPad only if you allow tracking), your IP address, device and app information, and how you interact with ads. The ad network uses this to deliver ads, limit how often you see them, measure them and prevent fraud and, where you agree, to personalise them, under its own privacy terms.
- EEA, UK and Switzerland, and other places whose law asks for it: before any ad loads, the game shows a consent form (a consent management platform certified under the IAB Transparency and Consent Framework). Without your consent you see only limited, non-personalised ads. You can change your choice at any time in the game under Settings → Privacy choices.
- iPhone and iPad: your advertising identifier can be read only if you allow tracking when the game asks through Apple's App Tracking Transparency prompt. You can change your answer in iOS Settings → Privacy & Security → Tracking.
- Android: you can reset or delete your advertising ID in your device settings.
Legal basis: your consent for personalised ads and, where the law requires it, for reading identifiers from your device (GDPR art. 6(1)(a); KVKK art. 5(1)); our legitimate interest in funding the game for non-personalised ads, frequency limits and fraud prevention (GDPR art. 6(1)(f); KVKK art. 5(2)(f)).
To learn how the game is played, the game sends the usage events described in section 2 to our own servers and to our analytics provider, which processes them on our behalf. The events are linked to a random identifier for your copy of the app and to your player account ID, not to your name. Whether they may also be used for advertising (measuring our campaigns and personalising ads) follows your choices above: without your consent in the consent form they are not used for ads, and on iPhone and iPad the advertising identifier is read only if you allow tracking.
Legal basis for analytics: our legitimate interest in understanding and improving the game (GDPR art. 6(1)(f); KVKK art. 5(2)(f)); your consent where the data is used for advertising.
4. Who receives data
- Service providers that run infrastructure and tools for us, only on our instructions: server and database hosting, content delivery, game analytics, crash reporting, notification delivery, e-mail and customer support software.
- The app store you got the game from, which distributes it and processes payments under its own privacy policy.
- Our advertising partner (an ad network), which serves the reward videos described in section 3.
- Advertising platforms on which we advertise the game, which receive app events (installs, purchases and progress in the game) with the advertising data described in section 3, to measure and improve our campaigns, as your choices there allow.
- Authorities and courts, when the law requires it or to establish, exercise or defend legal claims.
We do not sell your personal data for money. Where you allow personalised ads, advertising data is shared with our advertising partner for that purpose, which some US state laws call "sharing" for cross-context behavioural advertising; you can stop it with the choices in section 3 and on our privacy choices page.
5. International transfers
Some providers process data outside Türkiye, the Philippines and the European Economic Area, for example in the United States. Such transfers rely on the safeguards the law provides, such as standard contractual clauses under Chapter V of the GDPR and article 9 of the KVKK, and on contracts that require the same level of protection as the Philippine Data Privacy Act.
6. How long we keep data
- Player account and the data on our servers linked to it: while your account exists. After you ask us to delete it, we erase it within 30 days.
- Purchase records: as long as tax and commercial law requires (up to 10 years).
- Server logs: up to 30 days, unless we need them longer to investigate a security incident.
- Game analytics: up to 14 months, then deleted or kept only as totals that no longer identify you.
- Crash and performance reports: up to 90 days.
- Notification token: until it stops working or your account is deleted.
- Advertising data: kept by the ad network under its own retention rules; we only receive totals, not data about you.
- Support messages: up to 3 years after the matter is closed.
7. Your rights
Under the GDPR you may ask for access to your data, correction, erasure, restriction of processing and a portable copy, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time.
Under article 11 of the KVKK you may ask whether your data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; request correction of incomplete or inaccurate data and the deletion or destruction of data; ask that these corrections or deletions be notified to those third parties; object to a result against you that arises solely from automated analysis; and claim compensation for damage caused by unlawful processing.
Under the Philippine Data Privacy Act you have the right to be informed, to access, to object, to erasure or blocking, to damages, to data portability and to correction, and you may lodge a complaint with the National Privacy Commission.
If you live in a US state with a consumer privacy law, our privacy choices page explains how to opt out of targeted advertising and how to ask for access, correction or deletion.
To use these rights, e-mail privacy@veilvendetta.com or write to our postal address. Please include your player ID (shown in the game under Settings → Help & Feedback), because guest accounts contain no name or contact details. We may ask for information to confirm the request comes from you. We answer free of charge within 30 days. You may also complain to the Turkish Personal Data Protection Authority (KVKK) or to the data protection authority where you live.
8. Deleting your account
You can ask us to delete your player account and the data linked to it from the game (Settings → Help & Feedback), in our help portal or by e-mail. The account deletion page explains each way and what is deleted.
9. Children
Veil & Vendetta is made for adults (18 and over) and is not directed at children. We do not knowingly collect personal data from children under 13 (or the higher age set by the law of your country). If you believe a child has given us personal data, contact us and we will delete it.
10. Security
Data travels between the game and our servers over encrypted connections (HTTPS), requests to our servers are signed, and access to our systems is limited to the people who need it. No system is perfectly secure, but we work to protect your data and will inform you and the authorities of a breach when the law requires it.
11. Changes
We will post any change on this page with a new date. If a change significantly affects how we use your data, we will also tell you in the game.
12. Contact
AppVision Yazılım Hizmetleri Limited Şirketi
Maslak Mah. AOS 55. Sk. 42 Maslak A Blok No: 2 İç Kapı No: 25
34398 Sarıyer, İstanbul, Türkiye
privacy@veilvendetta.com