Privacy Policy

Last updated: October 1, 2026

This Privacy Policy describes how TARK OYUN YAZILIM ANONIM SIRKETI ("Company", "We", "Us", or "Our"), located in Istanbul, Turkey, collects, uses, and shares information when You use BOMBANANA! (the "Application" or "Service").

By using the Service, You agree to this Privacy Policy. Where applicable law requires consent (for example, for advertising identifiers used for tracking), We will request that consent separately (including through Apple's App Tracking Transparency prompt on iOS).

If You have questions, contact Us at: ufuk@leftostudios.com

1. What this policy covers

This policy applies to the BOMBANANA! game on platforms where We make it available (including iOS, Android, and other builds We distribute). It covers information collected by Us and by third-party service providers whose code We include in the Application.

2. Information We collect

We do not require You to create an account or provide a name, email address, or phone number to play. We may still collect the categories below automatically or when You choose to send feedback.

2.1 Information You provide

• Feedback / bug reports. If You use the in-app feedback or bug-report form, We collect the text You submit and related diagnostic context (for example, game state, device/hardware summary, and recent error logs) so We can investigate issues and improve the Service.

2.2 Information collected automatically

• Device and technical data. Device model, operating system and version, CPU/GPU and related hardware details, language/locale settings, app version, and similar technical information.
• Identifiers. Device-level identifiers used for diagnostics and/or attribution, which may include:
  • a device unique identifier used by Our crash/diagnostics tooling;
  • on iOS: Identifier for Vendors (IDFV) and, only if You grant tracking permission, Identifier for Advertisers (IDFA);
  • on Android: Google Advertising ID (where available and permitted).
• IP address and approximate location. IP address may be processed to help secure the Service, diagnose issues, and infer coarse location (such as country/city). We do not collect precise GPS location for these purposes.
• Usage and gameplay diagnostics. App launches/sessions, crash and error reports, performance/session signals, and limited gameplay/session context needed to debug problems (for example, scene/mode or network role tags). This is for reliability and support, not for building advertising profiles by Us.
• Advertising / attribution data. Install and session events, campaign/attribution data, and related advertising measurement signals used to understand which marketing channels bring users to the app (see Adjust below).

2.3 Platform providers

When You download or play through Apple, Google, Steam, or other platforms, those platforms may process payment, account, and store data under their own policies. We do not receive Your full payment card details from those stores.

3. How We use information

We use the information above to:

• Provide and maintain the Service (including online features, stability, and security);
• Diagnose crashes and bugs, measure technical performance, and improve gameplay/reliability;
• Respond to feedback and bug reports You submit;
• Measure marketing and advertising performance (install attribution, campaign effectiveness) via Our attribution partner;
• Comply with law, enforce terms, and protect Users, Our rights, and the Service;
• Analyze aggregated or de-identified trends to improve the product.

We do not sell Your Personal Data.

4. Tracking (Apple App Tracking Transparency)

On iOS, "tracking" means linking data from Our app about You or Your device with data from other companies' apps, websites, or offline properties for targeted advertising or advertising measurement, or sharing such data with a data broker.

BOMBANANA! uses an attribution SDK (Adjust) that may engage in advertising measurement. Where Apple requires it, We show the App Tracking Transparency prompt before accessing the advertising identifier (IDFA) for those purposes.

• If You allow tracking, Adjust may receive IDFA (and related consented signals) for attribution.
• If You deny tracking, We will not access IDFA for tracking; Adjust may still process limited, non-IDFA signals permitted by Apple (for example probabilistic / SKAdNetwork-related measurement where applicable).

You can change this later in iOS Settings → Privacy & Security → Tracking.

5. Third-party service providers

We share information with processors who help Us run the Service, only as needed for their role:

5.1 Sentry (error monitoring & diagnostics)

We use Sentry to collect crash reports, error logs, performance/session diagnostics, device/technical data, IP-derived coarse location, and (when You submit them) feedback/bug-report contents and related diagnostic context.

• Purpose: App functionality, reliability, support, and product improvement.
• Not used by Us for advertising tracking.
• Sentry privacy information: https://sentry.io/privacy/

5.2 Adjust (attribution / advertising measurement)

We use Adjust on mobile builds to measure installs, sessions, and marketing campaign performance. Adjust may process device identifiers (including IDFA with ATT permission / advertising IDs on Android), attribution and advertising measurement data, and related usage signals.

• Purpose: Analytics and advertising measurement / attribution (including third-party advertising measurement).
• This activity may constitute tracking under Apple's definition when linked with third-party advertising data.
• Adjust privacy information: https://www.adjust.com/terms/privacy-policy/

5.3 Other disclosures

We may also disclose information:

• to affiliates, if any, under this policy;
• in connection with a merger, acquisition, or asset sale;
• to authorities when required by law or valid legal process;
• to protect the Company, Users, or the public against fraud, security threats, or illegal activity;
• with Your consent, where required.

6. Legal bases (EEA/UK and similar laws)

Where required, We process Personal Data on these bases:

• Contract / service delivery — to provide the game and requested features;
• Legitimate interests — security, fraud prevention, crash diagnosis, product improvement (balanced against Your rights);
• Consent — where required (including ATT / advertising identifier for tracking, and certain marketing uses if We later add them);
• Legal obligation — when the law requires Us to process or retain data.

7. Retention

We keep Personal Data only as long as needed for the purposes above:

• Crash, error, and diagnostic data (Sentry): typically up to 24 months, unless needed longer for an ongoing investigation, security, or legal reason;
• Attribution / analytics data (Adjust): according to Adjust's retention settings and Our campaign measurement needs, generally up to 24 months;
• Feedback / bug reports: up to 24 months, or longer if needed to resolve an open issue or legal claim;
• Backups: residual copies may remain in encrypted backups for a limited period and are not used for normal operations.

We may delete or anonymize data sooner when it is no longer needed. Anonymized / aggregated data may be kept longer.

8. International transfers

Your information may be processed in Turkey and in other countries where We or Our providers (including Sentry and Adjust) operate. Those countries may have different data-protection laws. Where required, We use appropriate safeguards for international transfers.

9. Your rights

Depending on where You live, You may have rights to:

• access, correct, or delete Personal Data;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent (withdrawal does not affect prior lawful processing);
• data portability;
• lodge a complaint with a supervisory authority.

To exercise these rights, email ufuk@leftostudios.com. We may need to verify Your request. Some data is held only as device/diagnostic identifiers and may be limited in how it can be matched to a person.

On iOS, You can also control tracking permission in system settings (see Section 4).

10. Children's privacy

The Service is not directed to children under 16, and We do not knowingly collect Personal Data from anyone under 16. If You believe a child has provided Personal Data, contact Us and We will take steps to delete it.

Where local law sets a higher digital-consent age, We follow that higher age for consent-based processing.

11. Security

We use reasonable technical and organizational measures to protect Personal Data. No method of transmission or storage is 100% secure.

12. Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date. Material changes may also be communicated in-app or by other reasonable means. Continued use of the Service after the effective date means You accept the updated policy, except where applicable law requires additional consent.

13. Contact

TARK OYUN YAZILIM ANONIM SIRKETI
Istanbul, Turkey
Email: ufuk@leftostudios.com