Privacy Policy

1. The short version

2. Who we are

İdiqut Games ("İdiqut Games", "we", "us") is an independent mobile game studio based in Türkiye. We develop and publish the game Hamster Maze and operate the website idiqutgames.com.

For anything in this policy — including requests to access or delete your data — write to idiqutgames@gmail.com. We are the data controller for the processing described here.

3. What we collect

Information you give us directly

Only if you choose to contact us. If you send us an email — a bug report, a question, a data request — we receive your email address and whatever you write in the message, including any screenshots or recordings you attach.

Information collected automatically inside the game

When you play, our advertising and analytics providers collect the following through their SDKs. None of it identifies you by name.

Information stored only on your device

Your progress, unlocked levels, settings and sound preferences are saved in the game's local storage on your phone. We do not upload them, and we cannot read them. If you delete the game, that data goes with it — see section 13.

4. What we never collect

We do not collect, and do not want:

• Your name, postal address, phone number or date of birth
• Precise or GPS location
• Your contacts, photos, files, calendar or call history
• Microphone or camera access — the game never requests either
• Card numbers, bank details or any payment credentials
• Health data, biometric data, or any special category of personal data

The game has no account system, no login, no friend list and no chat. There is nothing to sign up for.

5. Why we collect it

Every piece of data above serves one of five purposes: running the game, keeping it stable, improving it, showing ads that fund it, and delivering purchases. We do not collect data "in case it becomes useful later".

If you are in the European Economic Area or the United Kingdom, our legal bases under the GDPR are:

• Consent — for personalised advertising and for optional analytics, which we ask for before any tracking identifier is used, and which you can withdraw at any time.
• Legitimate interests — for crash diagnostics, fraud prevention, and basic aggregate counts needed to keep the game working and secure.
• Performance of a contract — for delivering an in-app purchase you made and for supporting a restore of that purchase.
• Legal obligation — where tax or consumer law requires us to keep purchase records.

If you are in Türkiye, the equivalent grounds under KVKK (Law No. 6698) are your explicit consent, the necessity of processing for the performance of a contract, and our legitimate interests, as applicable to each purpose above.

6. Who we share it with

We do not have servers of our own that store player data. The processing above happens through the following third parties, each under their own privacy policy. They are the only companies that receive data from our game.

We may also disclose information where the law requires it — a valid court order, a lawful request from an authority — or to establish or defend a legal claim. If İdiqut Games is ever sold or merged, data may transfer as part of that business, and this policy will continue to apply to it until it is replaced by one that is no less protective.

7. Advertising and your choices

Hamster Maze is free, and ads are what pay for it. Depending on your settings and your region, those ads are either personalised (chosen partly from your advertising ID and inferred interests) or non-personalised (chosen only from the app you are in, your approximate location and general context).

In the EEA, the UK and Switzerland, we ask for your consent through a consent screen the first time you open the game. If you decline, you still get ads — the game still needs funding — but they are non-personalised. You can change that answer at any time from the game's settings screen.

Turning off personalised ads on your device

• Android: Settings → Google → All services → Ads → Delete advertising ID (or, on older versions, Opt out of Ads Personalisation). Once the ID is deleted, apps receive no advertising ID at all.
• iOS: Settings → Privacy & Security → Tracking → turn off Allow Apps to Request to Track. You can also refuse the tracking prompt the game shows when it first launches.
• Reset instead of delete: both platforms let you reset the advertising ID, which breaks the link to any profile built so far.

Google also offers adssettings.google.com for account-level ad controls.

8. In-app purchases

Hamster Maze offers optional purchases. They are processed entirely by the store you installed the game from — the App Store on iOS, Google Play on Android.

• Your payment details go to Apple or Google, never to us. We never see, store or process a card number.
• What we receive is a purchase receipt: a transaction ID, the product bought, the time, and the store's confirmation that it was paid for. We use it to unlock the item and to honour a restore later.
• Refunds are handled by the store, not by us. The support page explains how to request one.

9. Children

Hamster Maze is a general-audience game. It is not directed at children under 13, and we do not knowingly collect personal information from them.

We know a game about a hamster attracts younger players anyway, so we take the protective route rather than the minimum one:

• Where a store's family or kids programme applies to the game, or where a user is identified as a child, we instruct our providers to serve non-personalised ads only and to disable advertising identifiers.
• There is no chat, no user-generated content, no social feature and no way for a player to share anything publicly through the game.
• We ask for no personal information at any point in the game.

Parents and guardians: if you believe a child has given us personal information — for example by emailing us — write to idiqutgames@gmail.com and we will delete it promptly. In the EEA the relevant age is set by each member state and may be up to 16; we apply the higher standard where it is unclear.

10. Selling and sharing

We do not sell your personal information for money. We have never done so, and we do not have a business model that would benefit from it.

California residents should note one nuance: if you allow personalised ads, our advertising partner may use your advertising ID for interest-based advertising across apps. Under the CCPA as amended by the CPRA, that counts as "sharing for cross-context behavioural advertising", even though no money changes hands. You can stop it at any time using the steps in section 7 — that is your opt-out, and we do not discriminate against players who use it.

11. How long we keep it

• Analytics and advertising data — retained by Google under their own schedules, generally between 2 and 14 months for event-level data, after which it is aggregated or deleted.
• Crash reports — typically 90 days, then deleted.
• Purchase records — kept as long as tax and consumer protection law requires, which in Türkiye is generally 10 years.
• Emails you send us — kept while your question is open and for a reasonable period afterwards, then deleted. If you ask us to delete your message sooner, we will.
• Progress on your device — kept until you delete the game or clear its data. That one is entirely in your hands.

12. Where data is processed

Our providers operate globally, so data may be processed outside Türkiye and outside the EEA — including in the United States. Where personal data leaves the EEA or the UK, our providers rely on the European Commission's Standard Contractual Clauses, the UK Addendum, or an adequacy decision such as the EU–US Data Privacy Framework, together with additional technical safeguards. For transfers from Türkiye, we rely on the grounds set out in Article 9 of the KVKK.

13. Your rights

Depending on where you live, you have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict its processing, to receive it in a portable format, and to withdraw consent you have given. Residents of Türkiye have the equivalent rights under Article 11 of the KVKK, including the right to learn whether their data has been processed and to request that any incorrect processing be corrected.

How to exercise them

Email idiqutgames@gmail.com with the subject line "Privacy request". We reply within 30 days, and usually much sooner.

One practical note: because the game asks for nothing that identifies you, we normally hold nothing that can be traced back to a person. To locate anything at all, we will need your advertising ID (findable in your device's ad settings) or, for a purchase, the store transaction ID from your receipt. Without one of those, there is genuinely nothing for us to look up — which is the point of collecting so little.

Deleting your data

• On your device: uninstall the game, or use Android's Clear data, and the local save is gone.
• At the providers: delete or reset your advertising ID (section 7) to break the link to any advertising and analytics profile.
• With us: email us as above, and we will forward the deletion request to our providers and confirm when it is done.

Complaints

If you think we have handled your data badly, we would rather hear it from you first. You also have the right to complain to your local supervisory authority — in Türkiye the Personal Data Protection Authority (KVKK), in the EEA your national data protection authority, and in the UK the Information Commissioner's Office.

14. This website

idiqutgames.com is a static site. It sets no cookies, runs no analytics, loads no fonts, scripts or images from anyone else's servers, and has no tracking pixels or social widgets. Nothing you do here is recorded by us.

Our host, GitHub Pages, keeps standard server logs including IP addresses for security and abuse prevention. Their handling is described in GitHub's privacy statement.

15. Security

We keep the attack surface small on purpose: no accounts, no player database, no servers of our own holding your data. What is transmitted between the game and our providers is encrypted in transit. Our providers are large operators with security programmes far beyond what a small studio could build.

That said, no system is perfectly secure. If a breach ever affects your personal data, we will notify the relevant authority and any affected players as required by law, and we will say what happened plainly.

16. Changes to this policy

When the game changes, this policy changes with it. The date at the top always shows the current version. If we make a change that materially affects your rights — a new category of data, a new provider, a new purpose — we will announce it in the game or on this site before it takes effect, and where the law requires it we will ask for your consent again.

Continuing to play after a change means you accept the updated policy.

17. Contact

İdiqut Games — Türkiye
idiqutgames@gmail.com

Privacy questions, data requests, and anything you think this document gets wrong: same address. A person reads it.