Privacy Policy
This policy explains what data the ArtDuello mobile game (Android and iOS) processes and why. In short: we don't ask for an account, name, email or phone number; your progress stays on your device.
What the server stores
- Player code: a random code the app creates on first launch. It isn't linked to your identity.
- A hash of your secret key: not the key itself, but a one-way hash.
- When the record was created and last seen.
The server does not store your IP address, a device ID or match history, and no web access log is kept. Counters used to limit abuse live only in memory for a short time. In a duel, your answers and timing are used only during the match to compare with your opponent, and are discarded when it ends.
What stays on your device
XP, level, statistics, achievements, settings, the artworks you've seen and the player name you may enter stay on your device and are not sent to us. Depending on your device's backup settings, they may be included in a Google (Android Auto Backup) or Apple (iCloud Keychain) backup.
Purpose and legal basis
The player code is processed to provide the game (questions, images, Artwork of the Day, duels) and to prevent abuse. Legal basis: performance of a contract and legitimate interest (GDPR Art. 6(1)(b) and (f); Turkish KVKK Art. 5/2-c and f).
Ads
The game shows ads through Google AdMob. In the European Economic Area, the UK and Switzerland we show Google's consent form before any ad; on iPhone, Apple's tracking permission (ATT) is asked separately for personalised ads. Google may process data such as the advertising ID, IP address and device information to serve and measure ads. You can change your choice in the game under Settings > Ad preferences.
Where data is kept and transfers
The game server is in a data centre in Turkey. Cloudflare only provides domain name (DNS) service; game traffic does not pass through it. Ad data may be processed outside Turkey by Google, subject to your ad consent.
Retention
Your player record is kept until you delete it. Encrypted nightly server backups are kept for up to 3 months, so a deleted record also disappears from backups within that time. Technical error logs (which may contain an IP address when a connection fails) are kept for up to 14 days.
Your rights and deletion
Under the GDPR and KVKK you can access, correct, delete and object to the processing of your data. In the game, Profile > Settings > Delete my player code removes your server record immediately; Settings > Reset progress deletes the data on your device. For other requests, email info@knowduello.com with your player code; we reply within 30 days. You may also complain to your local data protection authority.
Children
The game is not directed at children under 13, and we do not knowingly collect data from children.
Changes
If this policy changes, this page and its effective date are updated; we also announce significant changes in the game.
Data controller and contact
Data controller: Emre Mert Dübüş (info@knowduello.com)
Contact: info@knowduello.com
Questions about your data? Write to us
info@knowduello.com
