Dürüst Tavla (Honest Backgammon) — Privacy Policy

Last updated: October 30, 2026 · Türkçe · Terms of Use

1. Who we are

This game is developed and published by Görkem Gündener (Türkiye), who is the data controller for your personal data. Contact: destek@slashminus.com

2. What we collect

If you only play against the computer (offline), no account data is sent to us; only the data described under "Usage statistics and crash reports" below, which is not linked to your account, is processed. When you use the online features, we process:

Account data: an account ID and an 8-letter friend code (generated by the game); for guest sign-in, a random key created on your phone (the server stores only an irreversible hash of it); for email, Google or Apple sign-in, your email address (with Apple's "Hide My Email", Apple's relay address); the player name, avatar and appearance choices you select.
Game data: XP, level, achievements, titles and game statistics; results and move records of online matches; your friends list, friend requests and blocked players; the in-game items you own; the country code from your phone's region setting (e.g. TR, used only for the country leaderboard).
Purchase data: the purchase receipt issued by Google Play or the App Store (order/transaction number, product). We never see your card details; payment is handled entirely by Google Play or Apple.
Ad data: the confirmation Google sends when you finish watching a rewarded ad. Ads are served by Google AdMob, which may process your advertising ID, IP address and device information under Google's privacy policy.
Reports: when you report another player, the reason, your note and the match; text you send with "Report a Bug", together with the game version, phone model and Android/iOS version.
Error logs: if an unexpected error occurs in the game, the error message, game version, phone model and operating system are sent automatically to the server together with your account. They are used only to find and fix bugs.
Usage statistics and crash reports (Google Firebase Analytics and Crashlytics): which parts of the game are used (e.g. lesson started/finished, match started/finished, rewarded ad watched, rating prompt shown), number and length of sessions, game version, phone model, operating system, language, and the approximate country/city Google derives from your IP address; if the game crashes, the technical crash log and the phone's memory/storage state. They are sent with a random app identifier assigned by Firebase and are not linked to your account, player name or email; your advertising ID is not collected and the data is not used for advertising or personalisation. In the European Economic Area and the UK, usage statistics are only collected if you allowed storing information on your device in the consent dialog (you can change this under Info & Support → Ad Privacy).
Device identifier: an irreversible hash of the device identifier Android assigns to your phone (Android ID). It is used only to stop the starting XP from being collected again and again by creating new accounts on the same phone: the second and later new accounts created on a phone do not receive starting XP. The server stores only this hash and the number of accounts created on that phone, never the identifier itself.
Connection data: your IP address is used to connect you to the server and may be kept briefly in the hosting provider's logs.

What we do not collect: your precise (GPS) location, contacts, photos or microphone. There is no written chat in the game; players can only send preset emotes and emojis.

3. How we use it

To create your account and let you play with the same account on different phones.
Matchmaking, enforcing the rules of each match, and calculating XP.
Leaderboards (global, country and friends): your player name, level and XP are visible to other players there.
Preventing cheating and abuse.
Delivering items you buy or unlock by watching ads.
Reviewing player reports and bug reports, and providing support.
Understanding in aggregate how the game is used, and finding and fixing bugs and crashes (with statistics not linked to your account).

We do not sell your data and do not use it for profiling or marketing.

4. Who we share it with and where it is stored

Only with the service providers the game needs to run:

Google Firebase (sign-in and database): data is stored on servers in Frankfurt, Germany.
Google Firebase Analytics and Crashlytics (usage statistics and crash reports): Google processes this data on its servers, including in the United States, relying on the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.
Render (game server): Frankfurt, Germany.
Google AdMob (ads), Google Play and the Apple App Store (purchases), Apple (Sign in with Apple).

Other players only see your player name, avatar, level, title and the emotes you send during a match. Data may be disclosed to authorities where required by law.

5. Google Sign-In data

If you choose "Sign in with Google", we receive only the following from Google (scopes: openid, email, profile): your Google account ID, your email address and your name. We do not access your profile photo, contacts, Google Drive, Gmail or any other Google data.

Why: only to recognise your account and let you play with the same account on different phones. Your name is only suggested as your first player name (not used if inappropriate); you can change it in the game at any time.
Where: sign-in is handled by Google Firebase Authentication; the account ID and email are stored with your game account in Firebase (Frankfurt, Germany).
Sharing: this data is not sold, not used for advertising and not shared with anyone; your email is never shown to other players.
Deletion: when you delete your account, this data from Google is deleted too (see section 7). You can also remove the game's access at myaccount.google.com/permissions.

The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. How long we keep it

Account and game data: until you delete your account.
Usage statistics: detailed records are deleted from Google Analytics after 2 months (only aggregate counts remain). Crash reports: 90 days in Crashlytics.
When you delete your account, your profile, email, XP, statistics, achievements, friends list, blocks and items are permanently deleted.
The hash of the device identifier and the number of accounts created on that phone are kept after your account is deleted, unlinked from your account, to prevent abuse.
Purchase records may be kept for legal accounting and fraud prevention, and past match results and player reports for preventing cheating and abuse, separated from your account.

7. Deleting your account

In the game: Settings → Account → Delete My Account. If you cannot access the game, follow the steps on the account deletion page or email destek@slashminus.com.

8. Your rights

Under the GDPR (for players in Europe) and Turkish data protection law (KVKK), you have the right to know whether your data is processed, to get a copy, to have it corrected or deleted, to object to processing, and to lodge a complaint with your data protection authority. Email destek@slashminus.com; we reply within 30 days. We do not sell personal information.

Legal bases: providing the game to you (performance of a contract), our legitimate interest in preventing cheating, legal obligations for purchase records, our legitimate interest in improving the game for usage statistics and crash reports (your consent for usage statistics in Europe), and your consent for personalised ads.

9. Children

The game is intended for ages 13 and over. We do not knowingly collect data from children under 13; if we learn of such an account, we delete it.

10. Security

All connections between the game and the server are encrypted (https/wss). Phones cannot access the database directly; every action is checked by the server.

11. Changes

If this policy changes, the new version is published at this address and the date above is updated.