Privacy Policy
This policy explains in plain language what information we collect while you play Cadde, why, and how we protect it. For the formal notice under Turkish data protection law, see the KVKK Privacy Notice.
1. Information we collect
| Information | Where from | Why |
|---|---|---|
| Email address | Sign-up form or Google | To create and verify your account, log in and reset your password |
| Password | Sign-up form | Logging in. We never store your password in readable form; only an irreversible salted hash (scrypt) is kept. |
| Google ID | Google login | To match your account with that provider. We don't take your friend list or posts. |
| Age group and parental permission | First character screen | To apply age-appropriate protection rules |
| Game data | The game | Your character, name, xCoin/gems, items, home, friendships, likes, quest and season progress |
| Chat and report records | The game | Delivering chat to other players; safety reviews when something is reported |
| Private messages | The game | Delivering the messages you send to friends and in chat rooms and couple chat; safety reviews when something is reported |
| Guide information | The game | Your guide application text, the guide–student link, students' level and weekly active time, rewards given to guides |
| Active time | The game | Hourly gem rewards, guide rewards and preventing abuse |
| Technical information | Connection | IP address and connection times; to prevent abuse and attacks (e.g. too many failed login attempts) |
We don't ask for device permissions such as location, contacts, camera or microphone. Photos you take with the in-game "Camera" are saved only to your own device and are not sent to us. We don't ask for your real name, phone number or ID; don't share them with anyone in the game either.
2. Who we share your information with
- Other players: your character, nickname, profile card, level and chat messages. Your email and real identity are never shown to any player.
- Your guide: if you are linked to a guide, your guide sees your nickname, character, level, whether you are online, which place you are in and your active time that week. You can leave your guide at any time; after that they can't see this information.
- Service providers: companies that provide server hosting and email delivery, only to provide the service and bound by contract.
- Google: only if you choose to log in with Google, to verify the login.
- Competent authorities: only when required by law.
We don't sell your information and don't give it to third parties for advertising.
3. Transfers abroad
Some of the service providers we use (e.g. email delivery, Google login) may have servers outside Türkiye. These transfers are made in line with Article 9 of the KVKK (with standard contracts and the required notifications).
4. How long we keep it
- Account and game data: as long as your account is open. If you delete your account, it is permanently deleted within 30 days.
- Accounts with an unverified email: like verified accounts, as long as the account is open.
- Guest accounts: you can play as a guest for 10 minutes; if you don't sign up within 7 days after that, the guest account is deleted together with its game data.
- Security records (IP, login attempts): at most 2 years (including obligations under Law No. 5651).
- Purchase records: 10 years, as required by tax law.
5. Security
Passwords are salted and hashed; only hashes of session and email link keys are stored; connections are encrypted (HTTPS); login attempts are limited. No system is 100% secure; if a breach happens, we will inform you and the Personal Data Protection Board as the law requires.
6. Children's privacy
We don't allow children under 13 to create accounts. Players aged 13–17 play with parental permission and benefit from extra protections. Parents who find that a child under 13 has created an account can ask for it to be deleted by writing to [email protected].
7. Your rights
To access, correct or delete your information and to use your other rights under Article 11 of the KVKK, you can use the application channels in the Privacy Notice. You can delete your account directly in the game.
8. Marketing emails
News and offer emails are only sent if you gave separate permission when signing up (Law No. 6563). You can withdraw your permission at any time with the link in every email or by writing to [email protected]. Required account and security emails (verification, password reset) are independent of this permission.
9. Contact
[COMPANY NAME] · [COMPANY ADDRESS] · [email protected]