Privacy Policy

Last Updated: 3 October 2026

1. Who We Are

Critsy is a mobile game developed and published by Mehmet Alper Alp, an individual developer based in Türkiye.

In this Privacy Policy, “Critsy,” “Developer,” “I,” “me,” and “my” refer to Mehmet Alper Alp.

Privacy and support contact:
hello@alperxalp.com

This Privacy Policy applies to:

the Critsy mobile game for iOS and Android;
the Critsy website;
communications with Critsy support; and
services directly associated with operating Critsy.

I am the data controller for personal data processed for purposes determined by me in connection with Critsy.

2. Data Critsy Processes

Critsy processes only the information reasonably necessary to operate, secure, improve and monetize the game.

2.1 Game Account and Identifiers

Critsy currently uses Firebase Authentication to automatically create a technical anonymous account for each player.

This may include:

a Firebase user identifier;
Firebase installation identifiers;
app-generated identifiers;
session information;
connection information;
app version;
operating system information; and
technical information required to maintain the game account.

An anonymous Firebase account does not require you to provide an email address, password, real name or phone number.

The term “anonymous account” means that Critsy does not require conventional identifying information when the account is created. It does not mean that all technical information associated with the account is legally anonymous.

2.2 Game Progress and Game Data

Critsy may process information necessary to save and synchronize your game experience, including:

completed levels;
level results;
scores and stars;
in-game currency balances;
inventory;
purchased or earned entitlements;
cosmetic and avatar choices;
game settings and preferences;
gameplay timestamps;
achievement or progression information; and
server-verified gameplay and economy records.

Some information is stored locally on your device. Information required for cloud synchronization, economy integrity, purchase verification or other server-backed features may also be processed through Firebase and Google Cloud services.

2.3 Purchases and Subscriptions

Purchases are processed by the Apple App Store or Google Play.

Critsy does not receive or store your full payment card details.

To provide and verify purchases, Critsy may process:

product identifiers;
transaction identifiers;
purchase tokens or receipts;
subscription status;
purchase and expiration dates;
restoration information; and
information required to verify whether a purchase is valid.

This information is used to provide purchased items or benefits, restore eligible purchases, manage subscriptions and entitlements, prevent duplicate transactions and detect invalid or fraudulent purchase attempts.

Apple and Google separately process payment and store-account information under their own privacy policies and terms.

2.4 Analytics

Critsy uses Google Analytics for Firebase to understand how the game is used and to improve gameplay and technical performance.

Analytics information may include:

app sessions;
level starts and completions;
level results;
gameplay events;
feature usage;
in-game transactions;
advertising interactions;
general device and app information;
app or installation identifiers; and
country or general geographic information derived from technical information such as IP address.

Analytics information is used to understand aggregate game usage, identify problems, improve balancing and features, and evaluate the performance of Critsy.

Where applicable law requires consent for analytics storage or similar technologies, such processing is subject to the required consent choices.

2.5 Crash and Diagnostic Information

Critsy uses Firebase Crashlytics to identify crashes, errors and technical problems.

Crash and diagnostic information may include:

crash reports;
stack traces;
error information;
app version;
operating system version;
device model;
device state;
technical identifiers;
timestamps; and
other diagnostic information related to a crash or error.

This information is used only to maintain, troubleshoot, secure and improve Critsy.

2.6 Security and App Integrity

Critsy uses technologies such as Firebase App Check and platform integrity or attestation services provided by Apple and Google.

These services may process technical information about the application, device and app installation to determine whether requests originate from a legitimate copy of Critsy and to help prevent unauthorized access, abuse, tampering and fraud.

2.7 Game Configuration

Critsy may use Firebase Remote Config and related backend services to provide configuration information such as gameplay parameters, feature settings and service configuration.

Technical identifiers and application information may be processed as necessary to provide these services.

2.8 Advertising

Critsy uses Google AdMob / Google Mobile Ads to display advertising.

Depending on your device, location, consent choices and applicable law, advertising services may process information such as:

IP address;
approximate location derived from IP address;
device and app information;
advertising identifiers where permitted;
app or installation identifiers;
ad impressions;
ad clicks and interactions;
diagnostic information; and
information used to detect invalid traffic and advertising fraud.

Critsy may display personalized or non-personalized advertising depending on applicable law, device settings and your consent choices.

Where consent is legally required for personalized advertising, advertising storage or related processing, Critsy uses an appropriate consent mechanism before that processing occurs.

For users in regions where Google requires a certified consent management platform, Critsy uses Google's consent-management mechanisms through the User Messaging Platform (UMP) or another compliant mechanism.

If you do not consent to personalized advertising where a choice is available, you may still receive non-personalized or limited advertising where permitted.

On Apple devices, Critsy follows Apple's App Tracking Transparency requirements whenever permission is required for tracking.

Advertising choices can also be affected by operating-system privacy settings.

2.9 Notifications

If you enable notifications, Critsy may process notification settings and technical information necessary to provide gameplay reminders or other game-related notifications.

You can disable notifications at any time through your device settings.

2.10 Support Communications

If you contact Critsy support, I may process:

your email address;
your message;
technical or account information you voluntarily provide; and
information reasonably necessary to investigate and respond to your request.

Please do not send passwords, complete payment card information or unnecessary identity documents.

2.11 Critsy Website

The Critsy website is hosted using Wix.

When you visit the website, Wix and related website services may process technical information such as:

IP address;
browser and device information;
timestamps;
security and server logs; and
cookies or similar technologies necessary to operate and secure the website.

If you use the website contact form, the contact information and message you submit are processed for the purpose of responding to you.

Optional analytics, advertising or other non-essential website technologies are used only in accordance with applicable consent requirements.

3. Why Critsy Processes Data

Depending on the information and applicable law, Critsy processes information for the following purposes:

providing and operating the game;
creating and maintaining the technical game account;
saving and synchronizing game progress;
providing purchased products and subscriptions;
restoring eligible purchases;
maintaining in-game balances and entitlements;
preventing fraud and abuse;
protecting the integrity and security of the game;
diagnosing crashes and technical problems;
improving gameplay and performance;
measuring game usage;
providing advertising;
complying with legal obligations;
handling support requests; and
establishing, exercising or defending legal rights.

Where applicable, processing may rely on performance of a service relationship or contract, legitimate interests, compliance with legal obligations or your consent.

Where consent is required, consent is requested separately. Merely downloading or using Critsy does not by itself constitute consent to processing that legally requires consent.

You may withdraw consent for consent-based processing through the relevant privacy controls where available. Withdrawal does not affect processing that was lawful before the withdrawal.

4. Advertising and Privacy Choices

Critsy may provide privacy or consent controls depending on your location.

These controls may allow you to:

consent to or refuse personalized advertising;
review advertising vendors;
modify previously selected consent choices; or
exercise privacy choices required by applicable law.

Where required, Critsy provides access to privacy options after the initial consent decision so that choices can be reviewed or changed.

Device-level advertising or tracking choices can also be managed through iOS or Android privacy settings.

Critsy does not require you to consent to personalized advertising in order to play the game.

I do not sell personal information for monetary consideration.

Certain advertising-related transfers may be treated as a “sale” or “sharing” under the laws of some jurisdictions. Where such laws apply, the applicable consent or opt-out mechanisms are provided.

5. Service Providers and Data Recipients

Critsy relies on third-party services necessary to operate the game.

These may include:

Google / Firebase / Google Cloud

Used for services including:

Firebase Authentication;
Cloud Firestore;
Cloud Functions;
Firebase App Check;
Google Analytics for Firebase;
Firebase Crashlytics;
Firebase Remote Config; and
related cloud infrastructure.

Google AdMob

Used for:

advertising;
advertising measurement;
consent management;
fraud and invalid-traffic prevention; and
related advertising services.

Apple

Used for:

App Store distribution;
in-app purchases and subscriptions;
purchase verification;
device or application integrity services; and
Apple platform functionality.

Google Play

Used for:

Google Play distribution;
in-app purchases and subscriptions;
purchase verification; and
Android platform or application integrity services.

Wix

Used to host and operate the Critsy website and its related website functionality.

These providers may process information on my behalf or, for certain activities, act independently under their own privacy policies and legal obligations.

When a service provider processes Critsy user data on my behalf, it is expected to provide data protection consistent with this Privacy Policy, applicable law and applicable Apple and Google platform requirements.

Data may also be disclosed where reasonably necessary to:

comply with applicable law or a valid legal request;
protect users, Critsy or third parties;
investigate fraud, abuse or security incidents; or
establish, exercise or defend legal claims.

6. International Data Processing

Critsy is operated by a developer based in Türkiye, while some service providers operate infrastructure in other countries.

As a result, information may be processed or stored outside Türkiye and, depending on your location, outside your country of residence.

For example, Google and Firebase services may use infrastructure located in the United States and other countries.

International transfers are handled subject to applicable data-protection requirements and the contractual, organizational and technical safeguards applicable to the relevant service provider and processing activity.

Where applicable law requires a specific international-transfer mechanism, the relevant lawful transfer mechanism and safeguards must apply to that transfer.

7. Data Retention

Critsy does not intentionally retain personal data longer than reasonably necessary for the purpose for which it is processed.

Game Account and Progress

Game-account information, game progress, balances and related server-side records are generally retained while the Critsy account remains active.

When the account is deleted, developer-controlled account and game information associated with that account is deleted or de-identified unless limited retention is necessary for a legitimate legal, security, fraud-prevention or transaction-related reason.

Purchase Information

Purchase verification and transaction records may be retained for as long as reasonably necessary to:

verify or restore purchases;
maintain purchased entitlements;
prevent duplicate or fraudulent transactions;
respond to payment disputes; or
comply with applicable legal obligations.

Payment records maintained independently by Apple or Google are controlled by those companies.

Analytics and Diagnostics

Analytics, crash reports, installation identifiers, service logs and related technical information are subject to the retention settings and deletion processes of the relevant Firebase, Google and platform services.

These records may be deleted or de-identified automatically after the applicable retention period.

Support

Support correspondence is retained only for as long as reasonably necessary to resolve the request, maintain relevant support records and establish or defend legal rights.

Backups

Information removed from active systems may remain temporarily in encrypted backups, security logs or provider systems until the normal deletion or backup-rotation process is completed.

8. Account and Data Deletion

Critsy automatically creates a technical anonymous game account.

You may request deletion of this account and its associated developer-controlled game data.

Deleting Your Account in Critsy

Critsy provides a Delete Account option from the game's Settings interface.

When account deletion is successfully completed:

the Firebase Authentication account is scheduled for deletion;
associated server-side game data under the Developer's control is deleted or de-identified as applicable;
game progress associated with that account becomes unavailable; and
relevant local game data may be reset.

Deletion is permanent and deleted progress may not be recoverable.

Requesting Deletion Outside the App

If you cannot access Critsy, you may use the Account Deletion page on the Critsy website or contact:

hello@alperxalp.com

Because Critsy uses anonymous accounts, an email address does not automatically identify your game account.

You may therefore be asked to provide the minimum technical information reasonably necessary to identify the correct account, such as the Critsy Player ID or another account identifier displayed by the game.

You will never be asked to provide your Apple ID password, Google password or full payment card information.

Information That May Be Retained

A limited amount of information may remain where retention is reasonably necessary for:

legal obligations;
security;
fraud or abuse prevention;
purchase verification;
transaction disputes; or
establishing or defending legal claims.

Where possible, retained information is separated from the deleted account or de-identified when the original account association is no longer necessary.

Store Purchases and Subscriptions

Deleting your Critsy account does not automatically cancel an Apple App Store or Google Play subscription.

Subscription cancellation must be managed through the relevant store.

Deleting Critsy also does not delete transaction records independently maintained by Apple or Google.

Uninstalling Critsy

Uninstalling the game does not by itself constitute an account-deletion request and does not automatically cancel an active subscription.

9. Your Privacy Rights

Your privacy rights depend on the laws applicable to you.

Depending on your jurisdiction, you may have the right to:

learn whether your personal data is processed;
obtain information about personal data being processed;
access your personal data;
request correction of inaccurate information;
request deletion or destruction of data;
request restriction of certain processing;
object to certain processing;
request data portability where applicable;
withdraw consent for consent-based processing;
object to certain automated processing where applicable; and
lodge a complaint with the relevant data-protection authority.

Users whose personal data is subject to Türkiye's Law No. 6698 on the Protection of Personal Data may exercise the applicable rights provided under that law.

Users protected by the GDPR, UK GDPR or other applicable privacy laws may exercise the applicable rights provided by those laws.

To submit a privacy request, contact:

hello@alperxalp.com

I may request limited information reasonably necessary to verify the request and connect it with the relevant Critsy account.

Privacy requests are handled within the time period required by applicable law.

10. Children's Privacy

Critsy is a general-audience game.

Critsy does not require players to provide a real name, postal address or phone number in order to play.

Where a user is known or required to be treated as a child under applicable law or platform requirements, Critsy does not knowingly use that user's data for personalized advertising where such use is prohibited.

Age-related consent, parental-permission, advertising and data-processing requirements are applied where required by applicable law and the relevant app-store rules.

A parent or legal guardian who believes that Critsy has processed a child's personal information in a manner that should not have occurred may contact:

hello@alperxalp.com

After appropriate verification, applicable requests relating to the child's information will be handled as required by law.

An App Store or Google Play age rating does not itself constitute parental consent to personal-data processing.

11. Security

Critsy and its service providers use reasonable technical and organizational safeguards designed to protect information.

These measures include, where applicable:

encrypted network communications;
authenticated access;
access-control mechanisms;
Firebase security controls;
app-integrity verification;
restricted backend access; and
security monitoring.

No internet-connected service or storage system can guarantee absolute security.

12. Third-Party Privacy Policies

Apple, Google, Firebase, AdMob, Wix and other platform or infrastructure providers may process certain information under their own privacy policies and terms.

Their independent processing is governed by the terms and privacy notices applicable to those services.

Critsy's Privacy Policy does not replace the privacy policies of Apple, Google, Wix or other independent service providers.

13. Changes to This Privacy Policy

This Privacy Policy may be updated when Critsy's features, data practices, service providers or legal requirements change.

The latest version will be published on the Critsy website.

If a change materially affects the way personal data is processed, additional notice or renewed consent will be provided where required by applicable law.

The effective date at the beginning of this Privacy Policy identifies the current version.

14. Contact

For privacy questions, data requests, account-deletion requests or other privacy-related matters, contact:

Mehmet Alper Alp
Developer of Critsy
Türkiye
Email: hello@alperxalp.com

Critsy