War Chess – Privacy Policy

Version 2 · Effective date: 12 October 2026 · Applies to the War Chess mobile game on Android and iOS

1. Who we are

War Chess (the “Game”) is developed and published by Kale App (Yunus Kale, Merkez Mahallesi, 1143 Sokak No:7 Daire 2, Erenler, Sakarya, Türkiye) (“we”, “us”, “our”). We are the data controller responsible for your personal data under the EU/UK General Data Protection Regulation (GDPR), the Turkish Personal Data Protection Law No. 6698 (KVKK) and other applicable privacy laws.

Contact: contact@kaleapp.net (see Section 17).

This policy explains what information the Game processes, why, with whom it is shared and the rights you have. By creating an account or playing the Game you confirm that you have read this policy; where we rely on your consent (for example personalized advertising or notifications) we ask for it separately.

2. Summary of the data we process

3. Information we collect

3.1 Information you give us

• Account information. If you register, your e-mail address and password. Passwords are handled by Firebase Authentication and are never visible to us. If you play as a guest, an anonymous account ID is created; you can later link it to an e-mail address and keep your progress.
• Username. The name you choose (default “Guest”). Your username, player tag and rank score are visible to other players on leaderboards. Please do not use your real name or other personal information as your username.
• Support messages. When you contact us from the Game, the e-mail draft automatically contains your operating system, app version, device model, screen resolution and your user ID so we can find your account. You can remove this information before sending.
• Consent choices. When you accept this policy we store the policy version, the time (server time) and platform in your account so we can prove your consent and ask again when the policy changes.

3.2 Information created while you play

• Game progress: level and XP, rank and rank points, in-game currencies (gold, gems), energy, items, weapons and equipped weapons, daily/weekly reward status, number of matches played and won, ad-free status.
• Usage events: for example app opens, tutorial progress, match start/end and result, screens viewed, rewards and purchases. These events are processed by Google Analytics for Firebase together with device information and an approximate location (country/region) derived from your IP address. We do not collect your precise location.
• Crash reports: if the Game crashes, Firebase Crashlytics collects technical information about the crash and your device.
• Anti-cheat signals: the Game checks for memory editing, speed manipulation, modified save data and code injection. If cheating is detected, the type of the detection and its date are stored on your account and the event is reported to analytics. Detected cheating may lead to rewards being withheld or the account being restricted.
• App integrity: to make sure requests to our servers come from the genuine Game, Firebase App Check obtains an attestation from Google Play Integrity (Android) or Apple DeviceCheck (iOS). These services evaluate the app and device; we receive only a pass/fail verdict.
• Time check: to prevent cheating with the device clock, the Game reads the current time from public web servers (google.com, cloudflare.com, microsoft.com). Like any web request, this reveals your IP address to those servers; no account information is sent.

3.3 Information collected by our partners

• Device identifiers: Firebase installation ID, app instance ID, push notification token and, for advertising, your device’s advertising ID (Android Advertising ID / Apple IDFA). On iOS the IDFA is only accessed if you allow tracking in the App Tracking Transparency prompt.
• Technical data: IP address, device model, operating system and version, language, app version, network information.

3.4 Information we do not collect

The Game does not access your contacts, photos, camera, microphone, files or precise (GPS) location, and we never receive your credit card or bank details – payments are processed entirely by Google Play or the Apple App Store.

4. Information that stays on your device

Some data is stored only locally on your device and is never sent to us:

• Settings such as sound, music, vibration, language and chosen side (white/black).
• Tutorial status, reminder and ad-frequency counters.
• Play-time pattern: the hours of the day at which you usually open the Game. It is used only on your device to schedule a daily reminder at a time that suits you (see Section 8).

Uninstalling the Game removes this local data.

5. How and why we use your information

We do not use your personal data for automated decisions that have legal or similarly significant effects on you.

6. Advertising and your choices

• The Game shows ads served by Google AdMob: interstitial ads at the end of some matches and optional rewarded ads that you choose to watch for in-game rewards.
• Consent in the EEA, UK and Switzerland: before ads are shown you see a consent message (Google User Messaging Platform). You can choose whether ads are personalized. You can change your choice at any time with the Ad Privacy Settings button in the Game’s Settings.
• iOS: we ask for permission under Apple’s App Tracking Transparency before the advertising identifier (IDFA) is used. If you decline, you will still see ads, but they will not be personalized using the IDFA. You can change this any time in Settings > Privacy & Security > Tracking.
• Android: you can reset or delete your advertising ID or opt out of ad personalization in your device settings (Settings > Google > Ads or Settings > Privacy > Ads).
• Purchasing “Remove Ads” turns off interstitial ads. Rewarded ads stay available because you start them yourself.
• Google’s use of data for advertising is described at How Google uses information from sites or apps that use its services.

7. In-app purchases

Purchases are processed by Google Play or the Apple App Store under their own terms and privacy policies. To deliver your items and prevent fraud, the purchase token (Google) or signed transaction (Apple), product ID, platform and date are sent to our server (Google Cloud Functions for Firebase), verified with Google or Apple, and a record of the purchase is kept linked to your account. We never receive your payment card details.

8. Notifications

• Local notifications are created on your device: a notification when your energy is full and, after you have played at least once, up to one invitation per day at the hour you usually play (for at most 3 days after your last session). The usual play hour is calculated only on your device.
• Push notifications may be sent through Firebase Cloud Messaging, which uses a push token linked to your app installation.
• You can turn notifications off at any time in your device’s notification settings.

9. Who we share information with

We share personal data only as described below. We do not sell your personal data for money.

9.1 Service providers (processors)

• Google LLC / Google Ireland Ltd. – Firebase Authentication, Realtime Database, Cloud Functions, Analytics, Crashlytics, Cloud Messaging and App Check; Google AdMob and the User Messaging Platform; Google Play Billing, Google Play Developer API and Play Integrity. Google Privacy Policy · Privacy and Security in Firebase.
• Apple Inc. – App Store purchases (StoreKit), DeviceCheck, push notifications, in-app ratings. Apple Privacy Policy.
• Unity Technologies – the Game is built with the Unity engine and Unity’s purchasing and notification libraries. Unity Privacy Policy.
• Our e-mail provider – to receive and answer support e-mails.

9.2 Other players

Your username, player tag and rank score are visible to other players on leaderboards.

9.3 Legal and business reasons

We may disclose information if required by law, court order or a competent authority, to protect our rights, the safety of users or to prevent fraud, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your data.

9.4 “Sharing” for advertising (US state laws)

Allowing Google AdMob to use your advertising ID and device data for personalized ads may be considered “sharing” or “targeted advertising” under some US state laws (for example the California Consumer Privacy Act). You can opt out by declining personalized ads in the consent message, denying tracking on iOS, deleting/resetting your advertising ID or enabling “opt out of ad personalization” on Android, or by e-mailing us.

10. International data transfers

Our service providers store and process data on servers in the United States, the European Union and other countries. When personal data from the EEA, UK, Switzerland or Turkey is transferred to countries without an adequacy decision, the transfer is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and their UK/Turkish equivalents) or the EU-U.S. Data Privacy Framework where the provider is certified. By using the Game you acknowledge these transfers, and where KVKK requires your explicit consent for a transfer abroad we rely on the consent you give when accepting this policy.

11. How long we keep information

• Account and game data: for as long as your account exists. When you delete your account, your account data, game progress and leaderboard entry are deleted immediately from the live database and removed from backups within 30 days.
• Inactive accounts: guest accounts that have not been used for 24 months may be deleted.
• Purchase records: kept as long as needed for refunds, fraud prevention and our legal accounting and tax obligations (up to 10 years), limited to the minimum information required.
• Analytics data: retained by Google Analytics for Firebase for up to 14 months.
• Crash reports: retained by Firebase Crashlytics for up to 90 days.
• Consent records: kept as long as your account exists and as long as needed to demonstrate consent.
• Support e-mails: kept for up to 2 years after your request is closed.

12. Deleting your account and data

• In the Game: open Settings > Delete Account. This works for registered and guest accounts and permanently deletes your account, progress and leaderboard entry.
• On the web: follow the instructions on our Delete Account page.
• By e-mail: write to contact@kaleapp.net from your account e-mail address or include your user ID (shown in support e-mails sent from the Game).

Deleting your account cannot be undone. Purchased items and in-game currencies are lost. Purchases remain subject to the refund policies of Google Play or the App Store.

13. Your rights

Depending on where you live, you have some or all of the following rights:

• Access – obtain a copy of your personal data and information about how it is processed.
• Rectification – correct inaccurate data (you can change your username in the Game).
• Erasure – delete your data (see Section 12).
• Restriction and objection – restrict or object to processing based on legitimate interests, including analytics.
• Data portability – receive your account data in a structured, machine-readable format.
• Withdraw consent – at any time, without affecting earlier processing (ads, tracking, notifications).
• Complain to a data protection authority.

EEA, UK and Switzerland (GDPR)

You may lodge a complaint with the supervisory authority of your country of residence or work.

Turkey (KVKK)

Under Article 11 of Law No. 6698 you may learn whether your data is processed, request information, learn the purpose of processing and whether it is used accordingly, know the third parties in Turkey or abroad to whom it is transferred, request correction or deletion, request that such correction or deletion be notified to third parties, object to results against you arising exclusively from automated analysis, and claim compensation for damages caused by unlawful processing. You may submit requests to us in writing or by e-mail; we respond within 30 days at the latest. You may also complain to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).

United States (California and other states)

You may request to know, access, correct or delete your personal information, and opt out of the sale or sharing of personal information and targeted advertising (see Section 9.4). We will not discriminate against you for exercising these rights. In the last 12 months we have not sold personal information for money.

Brazil (LGPD) and other countries

You have the rights provided by your local law, including confirmation, access, correction, anonymization, portability, deletion and information about sharing.

How to exercise your rights

E-mail contact@kaleapp.net with your request and your user ID or account e-mail. We may ask you to verify your identity. We answer within 30 days (45 days where US law allows, with notice).

14. Children

The Game is not directed to children under 13, and we do not knowingly collect personal data from children under 13 (or under the age of digital consent in your country, for example 16 in some EU countries). If you are below that age, please use the Game only with the involvement of a parent or guardian. If you believe a child has provided us with personal data, contact us and we will delete it.

15. Security

We use industry-standard measures to protect your data: encrypted connections (HTTPS/TLS), Firebase security rules that let you access only your own account data, server-side purchase verification, app integrity checks and encryption of sensitive values on the device. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your password private and contact us if you suspect unauthorized access to your account.

16. Changes to this policy

We may update this policy when the Game or the law changes. The version number and effective date at the top show the current version. If we make material changes, we will notify you in the Game and ask you to accept the updated policy before you continue playing.

17. Contact us

Kale App
Yunus Kale
Merkez Mahallesi, 1143 Sokak No:7 Daire 2, Erenler, Sakarya, Türkiye
E-mail: contact@kaleapp.net
Support page: War Chess Support