Privacy Policy

Game progress on your device

Your game progress, Heroes, in-game currency, settings, and local records are saved on your device. We do not upload your complete game save to our servers. If you join the optional leaderboard, the completed-run information described below is uploaded.

Your operating system can include app data in device backups according to your device settings. Removing local app data does not remove information already submitted to the leaderboard.

The optional online leaderboard

You can play without joining the leaderboard. Browsing it does not create a player profile. When you choose to join, we receive your chosen display name, a randomly generated player identifier, and a protected representation of the credential used to verify your submissions. You do not need to provide your real name or email address to join.

Joining shares your retained completed runs. Later completed runs are submitted automatically, including queued results when a connection becomes available. Submitted information includes run identifiers, survival time, waves completed, enemies defeated, game and ruleset versions, and submission and ranking timestamps.

Your display name, ranked results, and associated public identifiers are visible to other players and anyone accessing the public leaderboard. Use a nickname that does not reveal personal information.

The profile belongs to the app installation. We do not provide cross-device profile recovery. Reinstalling the game or losing its local credential can prevent us from verifying ownership of an existing profile.

When you report a name, we store the reported player's public identifier and displayed name, a random report identifier, and submission time. If you have joined, the report is also linked to your leaderboard identifier; reporting without joining creates no profile. We use reports to review inappropriate names. Reports are not shown in the game. Reports about a profile, and reports submitted by that profile while joined, are removed from the active database when the profile is deleted.

Connections and technical information

Cloudflare provides the online leaderboard infrastructure. Requests to the leaderboard and visits to these pages involve processing connection information, such as IP addresses, request times, requested addresses, and information sent by your browser or device.

We use technical information to deliver the service, limit abusive requests, investigate errors, and maintain security. The leaderboard uses values derived from IP addresses for rate limiting; raw IP addresses are not saved in the game's leaderboard database. Infrastructure providers can process network information separately to operate and secure their services.

For leaderboard profiles, we also store the latest known country code derived by Cloudflare from the connection's IP address, together with the observation time. We use it to understand the country distribution of leaderboard players. The country is not shown in the game or included in public game API responses. It is an approximate network location and can be affected by VPNs or routing. It is removed from the active leaderboard database when the associated profile is deleted.

These pages do not set advertising cookies or use analytics scripts, tracking pixels, or third-party fonts. They work without JavaScript.

When you contact us

If you email us, we receive your email address, message, and any information or attachments you choose to include. We use them to answer you, troubleshoot problems, handle feedback, and respond to privacy requests. Our email service providers process messages to deliver and store this correspondence.

Please send only information relevant to your request. Never send passwords, payment details, or the private credential used by your leaderboard profile.

Why we process information

We process leaderboard information to provide the online feature you request. We process proportionate technical and support information for our legitimate interests in operating a reliable, secure service and helping players. We also process information when needed to meet legal obligations.

Where European or UK data-protection law applies, these purposes correspond to performance of the service you request, legitimate interests, and compliance with legal obligations, as applicable.

Who receives information

Public leaderboard information is shared as described above. Infrastructure and email providers receive information needed to provide their services to us. We do not sell your personal information or use it for targeted advertising.

We can disclose information when legally required, to respond to a valid legal request, or where necessary to protect people, the service, or legal rights. We limit such disclosures to the information needed for that purpose.

International processing

Our service providers operate internationally, so information can be processed in countries other than where you live. Cloudflare describes its data-processing terms and international-transfer safeguards, including standard contractual clauses where applicable, in its Customer Data Processing Addendum.

You can contact us to ask about the providers that process your information, the countries involved, and the safeguards applicable to your data.

How long information is kept

Local saves remain on your device until you or the operating system remove them; device backups follow your backup settings.

Leaderboard profiles and submitted runs do not automatically expire. We retain them to operate the profile and rankings while the leaderboard is available, unless they are removed following a valid deletion request or are no longer needed for that purpose. Uninstalling the game does not delete these server records.

We keep support correspondence for as long as needed to resolve the request, handle related follow-up, and meet applicable legal obligations. Technical logs and recovery copies follow the infrastructure service's retention settings and are used for security, diagnosis, and recovery. Information that must be retained for a legal obligation or dispute is limited to what is necessary for that obligation or dispute.

Your choices and privacy rights

Joining the leaderboard is optional. To request access to, correction of, or deletion of information associated with you, email contact@tonyukuk.dev. We can ask for reasonable information to locate your records and verify that you are entitled to make the request. A public display name alone does not prove ownership.

Depending on the law that applies, you can also request restriction of processing, receive a portable copy of your information, object to processing based on legitimate interests, and withdraw consent where processing relies on consent. Withdrawal does not affect processing that was lawful before withdrawal. We respond within the time required by applicable law.

You can complain to your local data-protection authority. In Türkiye, applicable rights also include learning whether and why data is processed, learning recipients in Türkiye or abroad, requesting that corrections or deletions be communicated to recipients, objecting to an adverse result arising solely from automated analysis, and seeking compensation for damage caused by unlawful processing. Where required, first make your request to us before complaining to the authority.

Children's information

Players should avoid putting real names or other personal details in public leaderboard names. If you believe a child has provided personal information through the leaderboard or a support message, contact us so we can review the information and take the steps required by applicable law.

Advertising and purchases

Advertising and subscriptions are not enabled in the release covered by this policy. We will update this policy and any required choices before introducing changes that affect how personal information is processed.

Changes and contact

We update this policy when our practices change and revise the date above. We provide additional notice or obtain permission where required by law.

For support or privacy questions, contact Tonyukuk Yazılım LTD at contact@tonyukuk.dev.