Privacy policy

Last updated: 2026-10-26

This policy explains what personal data Numblr (the "game") processes, why, and what choices you have. Questions or requests: [email protected].

Who is responsible

The game is published by Bahadır Arslan, an individual developer based in Türkiye, who is the data controller. Contact: [email protected].

What we process

  • Account. When you start, the game creates an anonymous player with a random ID. You may choose a nickname. If you link a Google or Apple account to keep your progress, we store that provider's account identifier for sign-in.
  • Gameplay. Games, guesses, scores, streaks, and, if you use them, friend codes, friendships and groups. Your nickname and results can be shown to your friends, group members and on leaderboards.
  • Contact form. Name, email address and your message, used to answer you.
  • Error reports. If the app or server fails, technical details (app version, device model and OS, error trace) are sent to Sentry. We do not send names or emails in these reports.
  • Product analytics. Pseudonymous events about how the game is used (for example a round started or finished), tied to your random player ID, to improve the game.
  • Advertising. The game shows ads through Google AdMob. AdMob may process your device's advertising identifier and similar data. On iOS, the app asks for your permission before tracking, and you can change it any time in system settings. Personalised ads depend on your choice.
  • Notifications. If you allow push notifications, a notification token is used to send them. You can turn them off in system settings.
  • Purchases. If purchases are offered, Apple or Google process payment and a subscription service helps us confirm your purchase. We do not receive your card details.

Why, and on what legal basis

To run the game and your account (contract); to answer you (legitimate interest and your request); to keep the service secure and fix errors (legitimate interest); to measure and improve the game (legitimate interest); to show ads and use tracking where required (your consent). In Türkiye this follows the Law No. 6698 (KVKK); for users in the EEA and UK, the GDPR.

Who receives data

Service providers act on our behalf: our hosting and Cloudflare (network and security), Sentry (error reports, EU region), PostHog (analytics), Google (AdMob, sign-in), Apple (sign-in, purchases), Firebase Cloud Messaging (notifications), Postmark or our mail provider (email) and RevenueCat (purchase management). Data may be processed outside your country; we rely on the safeguards these providers offer. We do not sell personal data.

How long we keep data

Account and gameplay data are kept while your account exists. Error reports and analytics are kept for a limited period set in those services. Contact messages are kept as long as needed to answer and follow up. When you delete your account, we remove or anonymise your personal data, except what we must keep by law or to prevent abuse.

Your rights and choices

  • Delete your account in the app under Settings, or ask us to.
  • Ask for access, correction, deletion, restriction or a copy of your data, and object to processing, by writing to [email protected].
  • Withdraw advertising or notification consent in your device settings.
  • Complain to your data protection authority (in Türkiye, the KVKK Board).

Children

The game is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

Changes

If this policy changes we will update the date above and, for material changes, tell you in the app.