1. Who we are
Perfect Pause Challenge (the “Game”) is developed and operated by Univerlist Teknoloji Sanayi ve Anonim Şirketi (“Univerlist”, “we”, “us”), Erzene Mah. Ankara Cad., Ebiltem Blok No: 172/14, Bornova, İzmir, Türkiye. Univerlist is the data controller for the personal data described in this policy.
Privacy questions and requests: [email protected].
2. Data we collect
We process data needed to run the Game and guest account, save progress, deliver purchases, support players and prevent abuse. For players eligible for optional ads or measurement, additional providers may process device and usage data as described below. We do not request contacts, camera, microphone, precise location or health data. A chosen username, sign-in name, email address or support message may contain personal information you provide.
2.1 Data the Game creates or you give us
| Data | When | Notes |
|---|---|---|
| Guest player ID and installation ID | When a guest account is created | Random identifiers used for sign-in, progress and fraud prevention; not an Apple or Android advertising ID. Android stores an installation UUID on the device. |
| Apple or Google sign-in identifier; name or email if shared | Only if you choose account linking | Apple may provide a relay email. Google account details depend on the sign-in scope. Used to link or recover your game account, not sold to advertisers. |
| Game Center player ID and display name | iOS, if Game Center is available and signed in | Used for Game Center achievements and leaderboards. |
| Age category | When you enter a birth date or choose not to answer | Only “adult”, “protected” or “unknown” is stored on the device; the birth date itself is not retained by the age picker. |
| Optional in-game username | If you set one | Public inside the Game where rankings are shown. Usernames are checked against a moderation list. |
| Gameplay data | While you play | Level attempts, results, stars, streaks, coin and life balances, pause counts, settings. |
| Purchase records | When you buy something | Product, time, store order/transaction identifier, receipt or purchase status needed for verification and support. Apple or Google handles payment credentials. |
| Push token | If notifications are enabled and registration is permitted for your device | Lets Apple or Google deliver notifications. You can change notification permission in device settings; turning off alerts in the Game also affects delivery. |
| Support messages | If you email us | Your email address and what you write. |
2.2 Data collected automatically
| Data | Notes |
|---|---|
| Device and app information | Device model, operating-system and app versions, language, country and time zone; Android guest bootstrap may send device metadata to our server. |
| IP address | Received by our servers and by our providers with every request. We use it for security, rate limiting and rough country detection. We do not build location histories. |
| Usage and performance data | Which screens and features are used, session length, load times and errors, so we can find bugs and balance levels. |
| Crash reports | Stack traces and device state at the moment of a crash. |
| Advertising identifier (IDFA on iOS, AAID on Android) | May be available to permitted ad/measurement SDKs only when the applicable platform permission, age policy and consent conditions allow it. Other technical identifiers and IP addresses may still be processed by providers. |
| Ad interaction data | Which ads were shown, viewed, clicked or completed, and the reward granted for a completed rewarded video. |
| Install attribution | Whether an eligible install came from a campaign, using platform attribution tools, device information and permitted advertising identifiers. |
3. Why we use it
| Purpose | Data | Legal basis where GDPR / UK GDPR applies |
|---|---|---|
| Run the Game and keep your progress on our servers | Player ID, gameplay data, device information | Performance of a contract (the Terms of Service) |
| Let you recover your account on a new device | Apple or Google sign-in identifier, eligible game account data | Performance of a contract |
| Deliver purchases and grant coins, lives and Remove Ads | Purchase records | Performance of a contract |
| Show and measure ads where permitted | Device information, IP address, ad interaction data and, where permitted, advertising identifiers | Applicable consent or other lawful basis depending on region and processing; tracking permission alone does not substitute for legally required consent |
| Measure where eligible installs come from | Attribution data | Applicable consent or other lawful basis; platform tracking permission where required |
| Fix crashes, balance difficulty, improve the Game | Usage, performance and crash data | Legitimate interest |
| Prevent cheating, fraud and abuse; enforce the Terms | Player ID, gameplay data, IP address, purchase records | Legitimate interest; legal obligation |
| Answer your support requests | Support messages | Legitimate interest; performance of a contract |
| Comply with law, tax and accounting duties | Purchase records | Legal obligation |
The legal-basis column describes GDPR/UK GDPR concepts where those laws apply; Turkish KVKK and other local laws may use different requirements. We do not sell personal data for money and do not use it for automated decisions with legal or similarly significant effects on you.
4. Service providers and ad partners
The Game integrates or uses the services below. Their actual collection can vary by platform, age category, configuration and whether a feature is used. Including an SDK in a build can still create privacy obligations even if the Game does not deliberately request a service from it. We do not intentionally send your sign-in email or chosen username as an ad-targeting field. Their policies are linked below; we remain responsible for reviewing how the partners used by the Game handle data.
| Provider | What it does | Data it may receive | Policy |
|---|---|---|---|
| Apple (App Store, Sign in with Apple, Game Center, Push Notifications) | iOS distribution, payments, sign-in, achievements and notifications | Apple account relationship, purchases, push token | apple.com/legal/privacy |
| Google (Google Play, Google sign-in, Firebase and push) | Android distribution and payments, optional account linking, analytics/crash reporting where enabled, notifications | Google account relationship, purchase and device data, events and push token as applicable | policies.google.com/privacy |
| RevenueCat | Validates App Store and Google Play purchases and tracks entitlements such as Remove Ads | Game user ID, store purchase records and device information | revenuecat.com/privacy |
| AppLovin MAX | Ad mediation: decides which network shows an ad | Device information, IP address, ad interaction data, IDFA with consent | applovin.com/privacy |
| Google AdMob / Google Ads | Ad network via MAX | Same as above | policies.google.com/privacy |
| Meta Audience Network | Ad network via MAX | Same as above | facebook.com/privacy/policy |
| Pangle (ByteDance) | Ad network via MAX | Same as above | pangleglobal.com/privacy |
| Mintegral | Ad network via MAX | Same as above | mintegral.com/en/privacy |
| Digital Turbine (DT Exchange) | Ad network via MAX | Same as above | digitalturbine.com/privacy-policy |
| AppsFlyer | Install attribution and campaign measurement | Device information, IP address, install and in-app events, IDFA with consent | appsflyer.com/legal/services-privacy-policy |
| Google Firebase (Analytics, Crashlytics, Cloud Messaging) | Usage analytics, crash reporting and/or push delivery when enabled for the platform and player | App instance or push token, device information, usage events and crash reports as applicable | firebase.google.com/support/privacy |
| Meta SDK (Facebook Core) | Measures whether installs came from Meta ads | Device information, app events, IDFA with consent | facebook.com/privacy/policy |
| Hosting and infrastructure providers | Run our game servers and database | All server-side data listed in section 2, under contract | under contract with us |
We may also disclose data when the law requires it, to protect our rights or the safety of players, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to the transferred data.
5. Advertising and tracking choices
- Age category. The app-level age selection is intended to avoid ad requests and optional analytics for protected or unknown-age players. A date of birth entered into the picker is converted to an age category rather than retained. Core account, purchase and security data may still be processed.
- iOS tracking. If the Game asks for App Tracking Transparency permission and you choose “Ask App Not to Track”, the IDFA is not available to the Game for cross-app tracking. You can review this in iOS Settings > Privacy & Security > Tracking. The prompt is not shown merely because the app is opened by a player of unknown or protected age.
- Android ad and privacy choices. Eligible adult players can review available choices through Settings > Account > Ad Privacy and any applicable platform consent flow. Android advertising-ID and provider processing depend on those choices and applicable law.
- Ads without cross-app tracking. Eligible adult players may still see contextual or less personalised ads when tracking is declined. Protected and unknown-age players should not receive an ad request from the Game.
- Remove Ads. The one-time purchase turns off interstitial and banner ads for the eligible account. Optional rewarded videos may remain where ads are permitted and available.
- Notifications and data requests. Use device settings to change notification permissions, Settings > Account to delete your account, or email us for access, deletion or other privacy requests. An iOS Ad Privacy link opens the system app settings; it is not a separate in-app consent manager.
6. How long we keep data
| Data | Retention |
|---|---|
| Active account and gameplay data | For as long as the account is active and needed to provide the Game. |
| Deleted account and related gameplay data | Access is disabled and sessions revoked when deletion is requested. The backend currently schedules permanent removal of the account and user-scoped records after a seven-day grace period; the purge job must actually run for this to happen. |
| Purchase and financial records | Where applicable law requires us to retain them, for the legally required period. The store and RevenueCat may retain their own transaction records under their policies. |
| Client diagnostics and selected security-rejection records | The current backend configuration uses a 30-day retention setting for these two record types. Other infrastructure logs may have different schedules. |
| Analytics, attribution, crash and ad-provider data | Under the relevant provider's settings and retention policies; deleting a Game account does not automatically prove deletion from every independent provider. |
| Support messages and backups | Kept for support, security or recovery only as needed, subject to applicable law and documented operational schedules. Ask us for the current schedule for a specific request. |
7. Deleting your account
Open the Game, go to Settings > Account > Delete Account and confirm. This is intended to work for guest accounts and accounts linked to Apple or Google. The request immediately prevents access to that Game account and revokes sessions; user-scoped server records are scheduled for purge after the grace period described above. Store purchase history, legally required records and independent providers' records may remain under their own legal duties. Deleting the account can cause loss of progress and consumable balances; contact support promptly if deletion was accidental.
If you cannot open the Game, use our public account-deletion request page or email [email protected] from the address you want us to reply to and describe the account. We may ask for limited information to verify that you control the account before deleting it. Do not send passwords or payment-card details.
Uninstalling the Game does not by itself delete server data. A person using the Google Play listing must also be able to reach a public web resource to request account deletion without reinstalling. We do not control all records independently retained by Apple, Google or advertising partners; contact us and use their privacy controls for related requests.
8. Your rights
Depending on where you live you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict processing, to withdraw consent at any time, and to complain to a supervisory authority. To exercise a right, email [email protected]. We answer within 30 days, or sooner where the law requires. We will not treat you differently for exercising a right.
European Economic Area, United Kingdom and Switzerland
Our legal bases are listed in section 3. Where we rely on legitimate interest you may object; where we rely on consent you may withdraw it using the available in-app or platform control or by contacting us. Platform tracking permission and consent required for cookies or device storage are not interchangeable. You may complain to your local data protection authority.
Türkiye (KVKK, Law No. 6698)
You have the rights listed in Article 11 of the Law, including learning whether your data is processed, requesting correction or erasure, and objecting to results produced by automated analysis. Requests can be sent to the address in section 1 or to [email protected] in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.
California and other US states
We do not sell personal information for money. Sharing data with ad partners for cross-context behavioural advertising may count as “sharing” under some state laws even when no money changes hands. If this applies to you, contact us to opt out or use the available in-app privacy choice; iOS “Ask App Not to Track” also restricts cross-app tracking, but is not represented as a complete substitute for every statutory opt-out. You may also have rights to know, correct or delete data and to avoid discrimination for exercising them. We do not intentionally share data for cross-context behavioural advertising for players classified as protected.
Other regions
Other privacy laws may give you additional rights depending on where you live. You may use the same contact address to make a request, and we will respond under the law that applies to you.
9. International transfers
Our servers and providers may process data in Türkiye, the European Union, the United States and other countries. Cross-border transfers are subject to applicable law and appropriate safeguards where required. The specific transfer mechanism may vary by provider and country; contact us for details about a particular transfer. We do not claim a particular provider's certification or contractual safeguard without confirming it.
10. Security
We use encrypted network connections and restrict access to Game data to authorised personnel and service providers who need it. No system is completely secure, so we cannot guarantee absolute security; if a breach affects you, we will notify you and the relevant authorities as required by applicable law.
11. Children
The Game is intended for a mixed audience, including children; this policy does not claim enrollment in the App Store Kids Category. The age picker stores an age category, not a birth date; an unanswered age is treated as protected for app-level ad and measurement decisions. Android currently asks for an age category before starting its guest account; on iOS, the age picker is available in Settings > Account rather than automatically appearing at launch. A guest account still requires an identifier and limited technical data to save progress. Parents or guardians may contact us to review or request deletion of a child's Game data. We do not intend to request behavioural ads for children. A parent's permission may be legally required for some data processing or features depending on the child's age and country; where required, those features must not be enabled without it.
12. Changes
We may update this policy when the Game or the law changes. The published version will show its effective date. For material changes we will provide notice in the Game or on the published page when required. We will ask for any new consent that applicable law requires; continued use alone is not a substitute for that consent.
13. Contact
Univerlist Teknoloji Sanayi ve Anonim Şirketi
Erzene Mah. Ankara Cad., Ebiltem Blok No: 172/14, Bornova, İzmir, Türkiye
[email protected]
This document is provided in English. Where a translation is offered, the English version prevails in case of conflict. See also the Terms of Service.