Kilim GamesDRAFT — NOT YET IN FORCE. This policy is a working draft prepared from the game's technical design. It must be reviewed and approved by the owner and by a qualified lawyer (KVKK / GDPR) before the app is released. Items in [square brackets] are placeholders the owner must fill in.
Privacy Policy
Kilim Games makes mobile games. This policy covers kilimgames.com and every Kilim Games app. Rules that apply to all of them are in sections 1 and 3–6; each app has its own section with the data that app processes. Today there is one app: Tetherline (section 2).
1. Who is responsible
Kilim Games is the brand under which [legal name of owner / company] publishes games; that person or company is the data controller for kilimgames.com and all Kilim Games apps: [postal address], [country]. Contact: support@kilimgames.com [placeholder address — to be confirmed]. [If required: EU representative under GDPR Art. 27 — name and address, or a statement that the app is not distributed in the EU.]
2. Tetherline (iPhone app)
This section applies only to the Tetherline app and its game server.
Tetherline is a single-player game that works fully offline. We do not ask for your name, email address, phone number or a password, and you do not need an account to play. This section explains the limited data the game and its service providers do process, why, for how long, and how you can delete it.
2.1 Data that stays on your device
Your progress (save file, backups of it, settings, the station you build) is stored only on your iPhone. It never contains login secrets. It can be included in your own iCloud or computer device backup, which is controlled by Apple and you, not by us. Notifications are local notifications scheduled by the app itself; they are off unless you allow them, and no notification server is involved.
2.2 Identifiers we create
- Player ID — a random identifier (UUID) created on first launch. It is not derived from your device or Apple ID. It is used as your customer ID at RevenueCat (purchases) and, when our server is enabled, as your anonymous account ID.
- Device credential — a random device ID and a random secret, kept in the iOS Keychain on this device only (not synced). If our server is enabled, it receives the secret once and stores only a one-way hash of it.
- Age band — an age range (for example “16–17” or “18+”, or “unknown”) obtained from Apple's age-range feature where available, or from an optional, neutral age question. We never ask for or store your date of birth.
We do not set your Player ID as a user ID in Firebase Analytics or Crashlytics, and we do not collect your name, email, contacts, photos or precise location.
2.3 Service providers and what they receive
| Provider | Purpose | Data |
|---|---|---|
| Google Firebase Analytics | Understanding how the game is played (e.g. where players quit, balance of difficulty), measuring ad and purchase revenue in aggregate. | Gameplay events (e.g. run start/end, sector reached, purchases made, ads watched, consent status), an app-instance ID generated by Firebase, device model, iOS version, app version, approximate country derived by Google from the IP address. Consent-mode defaults are “denied” for ad storage and ad personalisation; in regions where consent is required, analytics storage is also denied until you decide. |
| Google Firebase Crashlytics | Finding and fixing crashes. | Crash reports (stack traces, device model, iOS version, app version, free memory/disk, a Crashlytics installation ID). No user identifier is attached. |
| Google Firebase Remote Config | Adjusting game balance and switching features on or off without an app update. | A Firebase installation ID, app version, country/language for targeting. |
| Google AdMob + User Messaging Platform (UMP) | Optional rewarded video ads and collecting your consent where the law requires it. | Device and ad-request information, IP address, and the advertising identifier (IDFA) only if you allow tracking. See section 2.5. |
| RevenueCat | Processing in-app purchases and restoring them. | Your Player ID, purchase history (product, price, currency, date, store transaction IDs), device and app version information. Payment itself is handled by Apple; we never see your card or Apple ID details. |
| Meta (Facebook) SDK | Measuring whether our ads on Meta platforms lead to installs. | Automatic app events only: install, app open, purchase. The advertising identifier is collected only if you allow tracking; otherwise only aggregated measurement (Aggregated Event Measurement, SKAdNetwork) is used. No custom events and no ads are shown through Meta. |
| Apple | App Store payments, age range, Game Center (when available), SKAdNetwork / AdAttributionKit. | Governed by Apple's own privacy policy. We receive purchase confirmations and, if you use Game Center, a Game Center player identifier and signature to verify it. |
| Cloudflare | Hosting this website and the static game configuration; network protection in front of our server. | IP address and request metadata, processed transiently to deliver and protect the service. |
| Sentry | Recording errors on our server (server only, not the app). | Error messages and stack traces with identifiers redacted; personal data sending is disabled. |
| [VPS hosting provider, country] | Running our game server and database. | The server data listed in section 2.4. |
2.4 Our game server (tetherline-api.kilimgames.com)
The game never needs our server to be played. When the server is enabled, it is used only for the features below; the list will be updated before any new feature (such as cloud save or leaderboards) is switched on.
- Anonymous account: Player ID, a hash of your device secret, creation and last-seen dates, age band.
- Purchase events: a copy of RevenueCat purchase events (product, price, currency, date, refund status), so that purchases are matched to your anonymous account. We never store the raw event payload.
- One-time reward record: to make sure the Starter Pack bonus is granted only once per Apple purchase, we keep a record linking the store's original transaction ID to the date the bonus was granted. After deletion, only the transaction ID and date remain, with no link to you (to prevent repeated claims by deleting and restoring).
- Deletion log: a pseudonymous record (a keyed hash of your former account ID and the deletion steps) so that we can re-apply deletions if we ever restore a backup.
- Later features (only when enabled and announced): cloud save, Game Center account linking and leaderboards with a generated display name (not free text). Leaderboard entries of players under 18 are not shown on public lists.
Your IP address is used only for rate limiting while a request is processed. We do not store IP addresses or your country on our server. Server application logs are kept for 14 days.
2.5 Ads, consent and tracking (ATT)
- No ad SDK is started when you first open the game. After your second run, where required by law (e.g. EEA, UK, Switzerland) Google's consent form is shown, then a short explanation, then Apple's “Allow tracking” system prompt.
- If you choose Ask App Not to Track, your advertising identifier (IDFA) is never read; AdMob, Firebase, RevenueCat and Meta do not track you, and Meta receives only aggregated measurement.
- Allowing tracking unlocks nothing. Ads are only rewarded videos you choose to watch.
- If your age band is under 18, only non-personalised ads are requested.
- You can change tracking permission at any time in iOS Settings → Privacy & Security → Tracking, and your ad consent choice from the game's settings [owner: confirm menu name of the UMP privacy options entry].
2.6 Age and children
Tetherline is rated 13+ on the App Store and is not directed at children; it is not in the Kids category. Where the law requires it (for example in some US states and Brazil), we use Apple's Declared Age Range feature; otherwise the game may ask an optional, neutral age question. For players under 18: ads are non-personalised, purchase offers are not shown as pop-ups, a monthly spending limit applies in the game, and leaderboard entries are hidden from public lists. Additional age-verification details Apple may return (such as verification method or parental-control status) are used only on the device and are never sent to our server. If you believe a child under 13 has used the game, contact us and we will delete the related data.
2.7 How long we keep data
| Data | Retention |
|---|---|
| Save file and settings on your device | Until you delete the app or use “Delete my data” |
| Anonymous server account not seen for 13 months | Deleted automatically |
| Purchase event copies on our server | 25 months; events that cannot be matched to an account lose their RevenueCat user ID after 30 days |
| One-time reward record | As long as the product is on sale; unlinked from you on deletion |
| Pseudonymous deletion log | 3 years |
| Server application logs | 14 days |
| Server database backups | Up to 35 days (rolling) |
| Cloud save snapshots (when enabled) | 7 days, one per day |
| Daily / weekly leaderboard entries (when enabled) | 90 / 400 days |
| Firebase Analytics event data | [owner: retention setting chosen in Firebase, e.g. 2 or 14 months] |
| Crashlytics, AdMob, RevenueCat, Meta | According to each provider's retention policy [owner: list values] |
2.8 Deleting your data
In the game, open Settings → “Delete my data”. Full instructions are on the data deletion page. In short:
- Local progress is deleted immediately and the game starts fresh with a new Player ID.
- The server part is queued, even offline, and sent when you are next online. Once received, the server deletes your account data and asks RevenueCat to delete your customer record within 24 hours. Firebase Analytics data on the device is reset.
- Not covered: purchases recorded by Apple (you can restore them), copies in backups (overwritten within 35 days), the pseudonymous deletion log, and the unlinked one-time reward record described above.
- If our server is not active, or for data held by Google or Meta, email support@kilimgames.com and we will handle the request manually.
3. Your rights
Depending on where you live (for example under the Turkish KVKK Art. 11 or the EU/UK GDPR), you may have the right to know whether your data is processed, access it and get a copy, correct it, delete it, object to or restrict processing, withdraw consent, and complain to a supervisory authority (in Türkiye: the Personal Data Protection Authority, KVKK). Because we do not know your name or email, we may ask you to send the request from the app or to prove control of the device so we can find your data. Contact: support@kilimgames.com.
Legal bases [lawyer to confirm]: performance of the service (game, purchases, deletion), legitimate interest (crash reporting, fraud prevention for one-time rewards, security), consent (personalised ads, tracking, analytics storage where consent is required), legal obligation (purchase records, age-related obligations).
4. International transfers
Our providers may process data outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or equivalent safeguards (including the notification required under KVKK Art. 9 as amended in 2024). [Lawyer to confirm the transfer mechanism per provider and the VERBİS obligation.]
5. This website
kilimgames.com, including the Tetherline pages and the static game configuration under /tetherline/cfg/, uses no cookies, no analytics and no third-party scripts or fonts. Cloudflare processes your IP address to deliver the pages and protect the site.
6. Changes and contact
We will update this page before any change in what data is processed (for example when cloud save or leaderboards launch) and show the date of the change above. Questions: support@kilimgames.com.