Cargo Tilt — Privacy Policy
Effective date: 20 September 2026
1. Who we are
Cargo Tilt ("the game") is published by Ege Yıldızlı, Esenlik Sk. No 3-2 D. 6, Uskudar, 34700 Istanbul, Turkiye ("we"). We are the data controller for the processing described here. Contact: [email protected].
2. The short version
- You do not need an account and we never ask for your name, email, phone number, contacts, photos or precise location.
- Your progress is saved on your device.
- The game is supported by ads and optional purchases. Our advertising and analytics partners (Google) receive device identifiers and usage data as described below. Where the law requires it, this happens only with your consent, and you can change your choice at any time.
- The game is not directed to children.
3. What is processed, why, and on what legal basis
| Data | Source | Purpose | Recipient | Legal basis (GDPR / UK GDPR) |
|---|---|---|---|---|
| Advertising identifier (IDFA on iOS — only if you allow tracking; Advertising ID on Android), IP address, approximate location derived from IP, ad interactions | Your device, via Google Mobile Ads SDK | Showing ads, limiting ad frequency, measuring ads, preventing fraud; personalised ads only with consent | Google (AdMob) and its advertising partners | Consent (Art. 6(1)(a)); fraud prevention: legitimate interests (Art. 6(1)(f)) |
| App-instance identifier, Firebase installation identifier, device model, OS version, language, country, gameplay events (e.g. level started/won, settings used) | Your device, via Firebase Analytics / Remote Config | Understanding how levels are played, balancing difficulty, delivering configuration values | Google (Firebase) | Consent where required; otherwise legitimate interests |
| Crash logs, installation UUID, device state at the time of a crash | Your device, via Firebase Crashlytics | Finding and fixing crashes | Google (Firebase) | Legitimate interests |
| Purchase events (product, price, currency, time) and purchase receipts | Apple App Store / Google Play, and your device | Delivering what you bought, restoring purchases, revenue statistics | Apple / Google (as independent controllers for payment); Google (Firebase) for statistics | Performance of a contract (Art. 6(1)(b)); legitimate interests |
| Game progress and settings | Your device | Running the game | Nobody — stays on your device (and in your own device backup, if enabled) | Performance of a contract |
| Messages you send to our support email | You | Answering you | Our email provider | Legitimate interests |
We never receive your payment card details; payments are handled entirely by Apple or Google.
4. Consent and your choices
- EEA, UK and Switzerland: before the first ad, a Google consent form (UMP) asks for your choices. You can reopen it at any time from Settings → Privacy options.
- iOS: Apple's App Tracking Transparency prompt asks whether the game may track you. If you decline, the game works exactly the same; you see non-personalised ads and rewarded ads give the same reward.
- Android: you can reset or delete your Advertising ID in the device settings.
- Delete my data: Settings → Delete my data erases local progress and resets the analytics and advertising identifiers used by the game.
- Uninstalling the game removes all locally stored data.
5. Sharing and international transfers
We do not sell personal data. Data is shared only with the service providers and partners listed in section 3. Google processes data on servers worldwide, including in the United States. Where data leaves the EEA/UK, the transfer relies on the EU–US Data Privacy Framework and/or Standard Contractual Clauses offered by Google. For users in Türkiye, transfers abroad are carried out in accordance with Article 9 of Law No. 6698 (KVKK).
6. Retention
Analytics data is retained by Firebase for up to 14 months; crash data for up to 90 days; ad-serving logs according to Google's retention policies. Support emails are deleted within 24 months of the last message. Local game data stays until you delete it or uninstall the game.
7. Children
Cargo Tilt is a general-audience game. It is not directed to children under 13 (or the higher age of digital consent in your country) and is not part of Apple's Kids category or Google Play's Families programme. We do not knowingly collect personal data from children. If you believe a child has provided data, contact [email protected] and we will have it deleted.
8. Your rights
- EEA / UK (GDPR, UK GDPR): access, rectification, erasure, restriction, portability, objection, withdrawal of consent at any time, and the right to complain to your data-protection authority.
- Türkiye (KVKK Art. 11): to learn whether your data is processed, request information, learn the purpose and recipients (in Türkiye or abroad), request correction, erasure or destruction, object to results arising from automated analysis, and claim compensation for unlawful processing. Applications: [email protected] or Esenlik Sk. No 3-2 D. 6, Uskudar, 34700 Istanbul, Turkiye; we answer within 30 days. [VERBIS REGISTRATION — if required]
- California and other US states: we do not sell personal information for money; sharing for cross-context behavioural advertising can be refused through the choices in section 4.
Because we hold no account for you, we can usually identify your data only by device identifiers. Data deletion request: email [email protected] with your app-instance ID (shown in Settings → About) and we will request deletion from our providers within 30 days.
9. Security
All network traffic of the SDKs is encrypted in transit. We keep no server-side database of players.
10. Changes
We will post changes here and update the effective date. Material changes are also announced in the game's update notes.
11. Contact
Ege Yıldızlı · Esenlik Sk. No 3-2 D. 6, Uskudar, 34700 Istanbul, Turkiye · [email protected] · [EU/UK REPRESENTATIVE — if required]