Privacy policy
Draft: pending legal review. A lawyer will review this text before launch.
Last updated:
This policy explains which data we process when you use the Wilderbum game (iOS and Android) and the wilderbum.com website, why we do it, how long we keep it and how you can use your rights.
1. Controller
[ŞİRKET UNVANI / LEGAL ENTITY NAME], [ADRES / ADDRESS]. Contact: support@wilderbum.com.
2. Data we process
| Data | Examples | Why |
|---|---|---|
| Account | Random account ID, your username, sign-in method (guest, Sign in with Apple, Game Center) | To create and protect your account and show you to other players |
| Game data | Level, XP, rank points, inventory, match results, friends list, party | To run the game, matchmaking and leaderboards |
| Purchases | Store transaction ID, product, date | To verify and deliver purchases and handle refunds. Your card details stay with Apple or Google; we never see them |
| Analytics (only with your consent) | Random install ID, session and screen flow, match events, performance and crash data, device model, OS and app version, language, country from your device's region setting | To improve the game and find bugs |
| Technical connection data | IP address, connection times, server logs | To connect you, for security, and to prevent cheating and abuse. Your username is not written to server logs |
| Support messages | Your email address and message | To answer you |
What we do not collect: location (we do not derive location from your IP), contacts, health, financial information, browsing history. We currently do not collect the advertising identifier (IDFA) and do not track you across other companies' data. If this changes, we will update this policy first and ask for your permission through your device's prompt.
If you use Sign in with Apple, Apple gives us a user identifier. If you choose to share your email, whether we store it is to be confirmed.
3. Legal bases
- Contract (GDPR Art. 6(1)(b), KVKK Art. 5/2-c): account, gameplay, purchases, support.
- Legitimate interests (GDPR Art. 6(1)(f), KVKK Art. 5/2-f): security, anti-cheat, moderation, debugging.
- Consent (GDPR Art. 6(1)(a), KVKK Art. 5/1): analytics. You can withdraw it at any time in the game's Settings. No game feature depends on it.
- Legal obligation (GDPR Art. 6(1)(c), KVKK Art. 5/2-ç): tax and accounting records.
4. Who we share it with
- Other players see your username, pet, cosmetics, level and rank.
- Our service providers process data only on our behalf: Hetzner Online GmbH (servers, Germany), Cloudflare, Inc. (website hosting, network and security), Apple (App Store, purchases, Sign in with Apple, Game Center) and, with the Android version, Google (Google Play).
- Authorities, where the law requires it.
We do not sell your data and do not share it for advertising.
5. International transfers
Our game servers are in the European Union (Germany). Apple, Google and Cloudflare may operate in other countries. These transfers rely on the safeguards in Chapter V of the GDPR and Article 9 of the KVKK. The transfer basis and VERBİS registration are pending legal review.
6. How long we keep it
- Account and game data: until you delete your account.
- Raw analytics events: 90 days. Daily totals without identifiers may be kept indefinitely. Per-install summary (random install ID): 400 days after last activity.
- Server logs: 14 days.
- Purchase and accounting records: for the legally required period, unlinked from you once your account is deleted. Period to be confirmed with counsel.
- Support messages: [period] after the issue is resolved.
7. Deleting your account
In the game, go to Settings → Account → Delete account. Guest accounts can be deleted too. Deletion completes within 30 days at the latest; we aim for 24 hours. Your account, progress, inventory, friends list, replays and analytics records are deleted. Records we must keep by law are kept unlinked from you. Purchases are tied to your Apple or Google account, so deleting your account does not refund them.
8. Your rights
Under the GDPR and the KVKK you can ask whether we process your data, get information and a copy, and ask for correction, deletion, restriction, objection, portability, and withdraw consent. Write to support@wilderbum.com and include your in-game player ID. We answer within 30 days. You can also complain to your local data protection authority or to the Turkish Personal Data Protection Authority.
9. Children
When the game first opens we ask for your age range and store only the range (for example 13-15), never your date of birth. Under-13 policy pending decision (proposal: no accounts under 13, offline play only). Purchase limits apply to players under 18. If you think your child gave us data without permission, write to us and we will delete it.
10. Security
Connections are encrypted with TLS. Access to data is limited to team members who need it, and admin tools sit behind authentication.
11. This website
wilderbum.com uses no cookies and no tracking scripts. It runs on Cloudflare, which processes technical data such as IP addresses for security and performance.
12. Changes
If we change this policy we publish the new version here and announce important changes in the game.
← Back to home