Privacy Policy

Last updated: 1 October 2026

This Privacy Policy explains how Doğancan Çelik ("we", "us", "our") processes personal data in connection with the mobile game Inkleap: Stick Runner (the "App") and this website (the "Site"). It applies to users worldwide. Section 12 contains additional information for the European Economic Area (EEA), the United Kingdom, Switzerland, Türkiye, the United States and Brazil.

1. Who is responsible for your data

Doğancan Çelik, an individual developer based in Türkiye, is the controller of the personal data described in this policy (the "data controller" under the EU and UK General Data Protection Regulation ("GDPR") and the "veri sorumlusu" under Türkiye's Law No. 6698 on the Protection of Personal Data ("KVKK")). You can reach us at dogancannncelik@gmail.com. Some of our service providers, such as Google, also act as independent controllers for certain processing (see section 5).

2. The data we process

2.1 Data kept on your device

The App saves your game progress, in-game coins and items, settings (such as music, sound effects, vibration and language) and technical counters (for example, how many runs you have finished since the last advertisement) in the App's private storage on your device. Apart from the game statistics described in section 2.2, this data is not sent to us. It is deleted when you delete the App or reset your progress in the App's settings, and it may be included in backups that your device makes according to your device settings.

2.2 Game statistics (Firebase Authentication and Cloud Firestore)

The App keeps a copy of your game statistics on our servers, which Google provides through Google Firebase. To do so, it signs in to Firebase Authentication in the background with a random player ID, without asking you for any information, and stores the following in Cloud Firestore, linked to that player ID:

• the random player ID, and the dates on which it was created and last used;
• your totals: runs played, distance run, time played, lines drawn, hazards you got past (holes, spikes, rocks and arrows), coins collected in runs, and buildings and places completed in the village;
• coins earned, by where they came from (such as runs, rewarded ads, missions, achievements, daily rewards and purchases), coins spent, by what they paid for, and your current coin balance;
• your best distances of all time, of the day and of the week; for each game mode and event, your best result, stars and number of plays; your village progress and the number of items you own;
• the App's version, the platform and operating system version, the App's language, the region set on your device (for example "TR") and the day on which the App first sent statistics.

We use this data to understand how the game is played and to balance its economy and difficulty; to offer features based on it, such as leaderboards and moving your progress to a new device, which we may add in future versions; and to keep these features secure. We do not use it for advertising or to track you across apps or websites. Firebase Authentication also processes your IP address and technical information about your device and the App (the user agent) to keep the sign-in secure and prevent abuse.

Cloud Firestore stores your game statistics in the European Union (Belgium and the Netherlands); Firebase Authentication processes the player ID in the United States (section 6). You can delete your game statistics and player ID at any time in the App under Settings → "Delete my data"; an internet connection is needed. Your progress, coins and purchases on your device stay as they are. The next time you open the App, it starts a new copy under a new player ID, without the deleted history.

2.3 Advertising (Google AdMob)

The App is free to play and funded by advertising. We use Google AdMob, provided by Google Ireland Limited for users in the EEA, the UK and Switzerland and by Google LLC for users elsewhere ("Google"). When the App requests or shows an ad, Google's software in the App processes:

• device and advertising identifiers: on iOS, the Identifier for Advertisers (IDFA) only if you allow tracking in Apple's prompt, and an identifier specific to our apps (IDFV); on Android, the Android advertising ID and the app set ID;
• your IP address and the approximate location derived from it (such as country or city);
• device and app information, such as device model, operating system and version, language, time zone, screen size, network type and App version;
• ad interaction data: which ads were requested, shown, watched to the end, tapped or closed, with the related times;
• diagnostic data about the performance of the advertising software.

Google uses this data to deliver ads, to limit how often you see the same ad, to measure ad performance, to prevent fraud and abuse and, where you have consented or where consent is not required, to personalize ads to your interests. With your consent, the third-party advertising partners listed in the consent form ("List of partners") may also process this data for these purposes. Rewarded ads are shown only when you choose to watch one, for example to continue a run or to double a reward. Interstitial ads may appear between runs; the "No Ads" purchase and the "All Skins" bundle remove them. We ask Google to show only ads suitable for a general audience (content rated up to "PG"). More information: How Google uses information from apps that use its services and the Google Privacy Policy.

2.4 Analytics (Google Analytics for Firebase)

We use Google Analytics for Firebase, provided by Google, to understand how players use the App so that we can improve it. It processes:

• a random identifier created for the App on your device (app instance ID);
• events describing how the App is used, such as sessions and screens viewed, runs played and their results (mode, distance, duration, coins earned), coins earned and spent, items unlocked and equipped, village and upgrade progress, settings changed, use of the share feature, visits to the in-game store, in-app purchase attempts (product, result, price and currency), completed in-app purchases and refunds (product, price, currency and the store's transaction identifier, passed on by Adapty, see section 2.6), the drawing lessons of the first runs and the introductions of the home screen, and rewarded and interstitial ad events;
• general attributes calculated in the App that do not identify you, such as whether a purchase has been made, bands of best distance and number of runs, and the App's language;
• device and app information (device model, operating system, language, App version) and your approximate location (country or region) derived from your IP address. Google Analytics does not log or store IP addresses.

Where the law requires consent, Analytics stores or reads data on your device only with your consent (see section 3); without consent it receives only information that does not contain identifiers.

2.5 Crash reports (Firebase Crashlytics)

If the App crashes or encounters a serious error, Firebase Crashlytics, provided by Google, collects a crash report: technical traces of the error, the state of the device at the time (device model, operating system version, available memory and storage, orientation), the App version and a random Crashlytics installation identifier. We use crash reports only to find and fix errors.

2.6 In-app purchases (Apple, Google and Adapty)

Purchases are made through the Apple App Store or Google Play and are processed by Apple or Google under their own terms and privacy policies. We never receive your name, payment card details or billing address. To confirm, deliver and restore your purchases we use Adapty, provided by Adapty Tech Inc. (United States), which processes:

• a random Adapty profile identifier;
• purchase information received from the store: product, price, currency, store country, transaction and purchase identifiers, purchase date, and refund or cancellation status;
• device and app information: platform, operating system version, App version, language and time zone.

We have configured Adapty not to collect your IP address or advertising identifiers. See the Adapty Privacy Policy.

Where Analytics may keep its identifier on your device (see section 3), the App gives Adapty that identifier (the app instance ID), and Adapty passes each completed purchase and refund (product, price, currency and the store's transaction identifier) to Google Analytics for Firebase, so that purchases appear in our analytics (section 2.4). Without that, Adapty passes nothing on.

2.7 Communications

If you contact us, for example by e-mail, we process your e-mail address, your message and any information you choose to include (such as screenshots or details about your device) to answer you and to keep a record of our communication.

2.8 This website

The Site has no user accounts and uses no cookies, analytics or advertising. It is hosted on Google Firebase Hosting. When you visit it, the hosting provider processes your IP address and technical information about your request (such as browser type, time and the page requested) in server logs, to deliver the Site and protect it against abuse.

2.9 What the App does not collect

The App does not ask for access to your location, contacts, photos, camera or microphone, and it does not collect such data. When you use the share feature, the image and text you share go directly to the app or service you choose in your device's share menu; we do not receive them. We do not intend to collect special categories of personal data, such as data about health, religion or ethnic origin.

3. Your consent choices

• EEA, UK and Switzerland: the App asks for your consent through Google's consent form, a consent management platform certified under the IAB Transparency & Consent Framework, before personalized ads are shown and before advertising or analytics technologies store or read information on your device. New players see this form after their first run. You can change or withdraw your consent at any time in the App under Settings → "Privacy options". Without consent, Google may show limited or non-personalized ads.
• iOS, all regions: the App asks, through Apple's App Tracking Transparency prompt, for permission to track your activity across apps and websites owned by other companies. You can change this at any time in the iOS Settings app under Privacy & Security → Tracking.
• Android: you can delete or reset your advertising ID, or opt out of personalized ads, in your device settings (usually under Settings → Google → Ads, or Settings → Privacy → Ads).
• Google: you can manage ad personalization for your Google account in My Ad Center.
• Deleting the App stops all further collection of data by the App.

Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Why we use your data and our legal bases

The table below lists our purposes and, for users in the EEA, the UK and Switzerland, the legal bases under Article 6 GDPR (and the corresponding provisions of UK and Swiss law). Legal bases under Türkiye's KVKK are in section 12.2.

Where we rely on legitimate interests, we have weighed them against your interests and rights, and you can object at any time (section 9). You are not required by law or by contract to provide personal data. If you refuse consent, you can still play the whole game; only personalized ads and some analytics are turned off.

With your consent, Google and its advertising partners may use data to build a profile of your interests in order to personalize ads. This does not produce legal effects concerning you or similarly significantly affect you. We do not make decisions based solely on automated processing that produce such effects.

5. Who receives your data

• Google (AdMob, Firebase Analytics, Firebase Crashlytics, Firebase Authentication, Cloud Firestore, Firebase Hosting): as our service provider (processor) for the Firebase services and for hosting. For advertising, Google also acts as an independent controller and processes data under its own privacy policy.
• Advertising partners listed in the consent form: only with your consent where consent is required.
• Adapty Tech Inc.: our service provider (processor) for in-app purchases.
• Apple and Google as app stores: independent controllers for payments. They give us transaction information and statistics that do not identify you.
• Professional advisers, such as lawyers and accountants, bound by confidentiality, where needed.
• Authorities, courts and other parties where the law requires it, or where needed to protect rights, safety and security.
• A buyer or successor if the App or our business is transferred, for example through a sale or merger. Your data will remain protected by this policy.

We do not sell personal data for money. Under some US state laws, allowing advertising partners to use identifiers for targeted advertising may be treated as a "sale" or "sharing" of personal information; section 12.3 explains your choices.

6. International transfers

Our service providers process data in the United States and in other countries whose data protection laws may differ from those of your country. For example, Firebase Authentication processes data only in the United States, while Cloud Firestore stores your game statistics in the European Union (Belgium and the Netherlands). When personal data is transferred out of the EEA, the UK, Switzerland or Türkiye, the transfer is based on appropriate safeguards: adequacy decisions (including the EU–US Data Privacy Framework for certified recipients such as Google LLC), the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents, and, for Türkiye, the transfer mechanisms in Article 9 of the KVKK, such as standard contracts. You can ask us for information about these safeguards.

7. How long we keep data

At the end of these periods, data is deleted or irreversibly anonymized.

8. Security

We use technical and organizational measures appropriate to the risk. Data travels over encrypted connections (HTTPS/TLS), game data on your device stays in the App's private storage, the copy of your game statistics on our servers can be read and changed only with the player ID held by the App on your device, access to our service accounts is restricted and protected, and we choose service providers with recognized security programs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have the right to access your personal data; have it corrected; have it deleted; restrict its processing; receive it in a portable format; object to its processing, including processing based on legitimate interests; withdraw your consent at any time; not be subject to decisions based solely on automated processing that significantly affect you; and lodge a complaint with a data protection authority.

To exercise your rights, write to dogancannncelik@gmail.com. We will respond within the time limits set by applicable law (for example, one month in the EEA and the UK, 30 days in Türkiye and 45 days in California), which may be extended where the law allows. Requests are free of charge unless they are manifestly unfounded or excessive.

Because the App does not ask who you are, the data held by us and our service providers is linked to random identifiers, not to your name. We may therefore be unable to find which data relates to you, and we may ask for information to verify a request. We will ask only for what is needed and use it only to handle your request. Deleting the App deletes its data on your device, and resetting your advertising ID breaks the link to earlier advertising data. You can delete your game statistics and player ID yourself at any time in the App under Settings → "Delete my data" (section 2.2).

10. Children

The App is not directed to children under 13, or under the minimum age for consenting to the processing of personal data in their country (which may be up to 16 in the EEA). We do not knowingly collect personal data from children below these ages. The App requests only ads suitable for a general audience. If you are a parent or guardian and believe that your child has provided personal data through the App, contact us and we will delete it where we can identify it.

11. Changes to this policy

We may update this policy when our practices or the law change. We will publish the updated policy on this page and change the date at the top. If the changes are material, we will let you know in the App or on the Site and, where the law requires it, ask for your consent again.

12. Information for specific regions

12.1 EEA, United Kingdom and Switzerland

You can lodge a complaint with a supervisory authority, in particular in the country where you live or work: in the EEA, your national data protection authority; in the UK, the Information Commissioner's Office; in Switzerland, the Federal Data Protection and Information Commissioner. We would appreciate the chance to address your concerns first, so please contact us before you do.

12.2 Türkiye (information notice under the KVKK)

• Data controller: Doğancan Çelik, dogancannncelik@gmail.com.
• Purposes: as described in sections 2 and 4.
• Legal grounds (KVKK Article 5): the performance of a contract (5(2)(c)) for providing the game and purchases; compliance with legal obligations (5(2)(ç)); the establishment, exercise or protection of a right (5(2)(e)); our legitimate interests, provided your fundamental rights and freedoms are not harmed (5(2)(f)), for security, crash reports, game statistics and non-personalized advertising; and your explicit consent (5(1)) for personalized advertising and tracking, and for analytics where consent is required.
• Method of collection: automatically, by electronic means, through the App and our service providers' software, and through the channels you use to contact us.
• Transfers: to the recipients listed in section 5, in Türkiye and abroad, in accordance with KVKK Articles 8 and 9.
• Your rights (KVKK Article 11): to learn whether your personal data is processed; to request information about it; to learn the purpose of the processing and whether data is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request its correction if it is incomplete or inaccurate; to request its deletion or destruction under Article 7; to request that corrections, deletions and destructions be notified to the third parties to whom it was transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage from unlawful processing.
• How to apply: in writing, by registered e-mail (KEP), with a secure electronic or mobile signature, or by e-mail to dogancannncelik@gmail.com, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. We reply within 30 days at the latest, free of charge unless a cost arises under the tariff set by the Personal Data Protection Board. You may also complain to the Personal Data Protection Board.

12.3 United States

Notice at collection. In the past 12 months we have collected the following categories of personal information, from you through your device and from our service providers: identifiers (device and advertising identifiers, IP address, app instance, player and profile identifiers); commercial information (records of in-app purchases); internet or other electronic network activity (use of the App, game statistics and interactions with ads); approximate geolocation derived from IP addresses; and inferences about your interests drawn by advertising partners. We do not collect sensitive personal information and do not collect precise geolocation. We use this information for the purposes in section 4 and keep it as described in section 7.

Disclosures. We disclose these categories to service providers for business purposes (hosting, storing game statistics, analytics, crash reporting and purchase processing) and to advertising partners. Allowing advertising partners to use identifiers and activity data for cross-context behavioral advertising may be considered a "sale" or "sharing" under the California Consumer Privacy Act (CCPA) or "targeted advertising" under other state laws. We do not sell or share personal information for any other purpose, and we do not knowingly sell or share personal information of consumers under 16.

Your rights. Depending on your state, you may have the right to know and access the personal information we hold about you, to delete it, to correct it, to obtain a copy in a portable format, and to opt out of its sale, sharing or use for targeted advertising. We will not discriminate against you for exercising these rights. You can use an authorized agent, subject to verification.

How to opt out. On iOS, deny or turn off tracking for the App (iOS Settings → Privacy & Security → Tracking). On Android, delete your advertising ID or opt out of personalized ads in your device settings. Where the App shows "Privacy options" in its settings, you can also opt out there. To submit any other request, write to dogancannncelik@gmail.com.

Appeals. If we decline your request, you may appeal by replying to our decision with the word "Appeal". If we deny your appeal, you may contact the Attorney General of your state.

California "Shine the Light". We do not share personal information with third parties for their own direct marketing purposes as defined in California Civil Code § 1798.83.

12.4 Brazil

Under the Lei Geral de Proteção de Dados (LGPD), our legal bases correspond to those in section 4, and you have the rights set out in Article 18 LGPD, including confirmation of processing, access, correction, anonymization, blocking or deletion, portability, information about sharing, and withdrawal of consent. You may also petition the National Data Protection Authority (ANPD).

12.5 Other countries

If you live elsewhere, we process your data as described in this policy and respect the rights that your local law gives you. Contact us to exercise them.

13. Contact