Privacy Policy | Slice Orbit: Shape Puzzle

This privacy policy is applicable to the Slice Orbit: Shape Puzzle app for mobile devices, together with any related services operated by Hüseyin Enes Yılmaz (collectively, the "Application"). Hüseyin Enes Yılmaz is hereinafter referred to as the "Service Provider".

Data Controller Information

Hüseyin Enes Yılmaz acts as the Data Controller responsible for the processing of your personal data.

Name: Hüseyin Enes Yılmaz
Address: Meciyeköy Mahalles, Hark Sokak, Istanbul/Turkiye, 34381
Email: huseyinenes.dev@gmail.com

For data protection inquiries and to exercise your GDPR rights, please contact the Data Controller using the contact information above.

What information does the Application obtain and how is it used?

Slice Orbit does not require you to create an account with the Service Provider. You can play the puzzles without registering with us. Optional platform features use your Apple or Google account, subject to the relevant platform's availability and settings.

We use game progress to provide the album, levels and power-up inventory; gameplay statistics to understand attempts and improve the game; technical diagnostics to investigate crashes and errors; and advertising information to provide optional rewarded ads and measure their performance.

If you contact us for support or a privacy request, we receive the email address and information you choose to include. Please do not send passwords or unnecessary sensitive information.

Local storage and cloud saves

The game stores progress and settings on your device. When cloud services are available, completed progress can also synchronize through Apple's iCloud on iOS or Google Play services on Android, using the platform integration provided by VoxelBusters Essential Kit. The relevant platform account is used to keep saves associated with the correct player. Your Apple or Google account password is not provided to the game.

The game's cloud-save profile includes completed level results, collected paper designs, tutorial completion, power-up balances and reward records. Generated record and installation identifiers help merge progress and avoid duplicating rewards. The language selection, unfinished cutting-session state, undo history and active hint or slow-orbit state remain in local storage rather than this cloud-save profile.

Cloud availability depends on your platform account, connection and device settings. Deleting or changing your Apple or Google account is separate from deleting a Slice Orbit save.

Legal basis for processing your personal data

Where the GDPR applies, the Service Provider relies on one or more lawful bases to process your personal data, including:

Contract performance: processing necessary to provide the Application or fulfil a contract with you.
Consent: where you have given explicit consent to processing, including for marketing, analytics, or optional features. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
Legitimate interests: where processing is necessary for the Service Provider's specific legitimate interests, such as maintaining network and information security, preventing fraud and abuse, or improving the Application's core functionality through analytics, provided those interests are not overridden by your data protection rights or fundamental freedoms.
Legal obligation: to comply with laws or government requests.

Cookies and similar technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, and service delivery. Where required by law, the Service Provider will obtain your consent before using non-essential tracking technologies.

Automated decision-making and profiling

If the Application uses automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, you have the right to request human review, express your point of view, and contest the decision. Information about the logic involved and the likely consequences of that processing will be provided where required by law.

What information does the Application collect automatically?

The Application and its integrated services may process the following information:

Identifiers and device information: app-instance or installation identifiers, device identifiers where available and permitted, IP address, device model, operating system, app version and language.
Gameplay and usage: app launches, screens visited, level and chapter identifiers, attempts, scores, stars, time spent playing, cuts, undo and cancel actions, and hint or slow-orbit use. These are individual events, not only statistics aggregated on the device.
Advertising information: rewarded-ad requests, impressions, views, interactions and reward outcomes.
Diagnostics: crash traces, error reports, SDK performance information, and limited context such as the active screen, level and recent game actions.
Approximate location: a general location, such as country or region, may be derived from an IP address by analytics or advertising services.

Some records can be associated with an app instance, device or platform account. We do not attach an Apple or Google account identifier to our custom Firebase gameplay events, and we do not upload the full saved paper geometry to Firebase Analytics.

Does the Application collect precise real time location information of the device?

The game does not request GPS or precise-location access. This does not prevent the approximate location processing described above.

Does the Application use Artificial Intelligence (AI) technologies?

The Application does not use Artificial Intelligence (AI) technologies to process your data or provide features.

Do third parties see and/or have access to information obtained by the Application?

The Application uses Google Analytics for Firebase to understand how the game is played, Firebase Crashlytics to diagnose crashes and errors, and Google AdMob to provide optional rewarded advertisements. These services may receive individual app events and technical information, including app-instance or device identifiers, approximate location derived from IP addresses, device and operating-system details, gameplay results, advertising interactions, and crash or diagnostic information. The information sent to these services is not limited to aggregated or anonymous statistics.

Google's User Messaging Platform (UMP) manages applicable advertising privacy messages and choices. Advertising-related processing depends on those choices, device permissions and the services' configuration. On iOS, access to Apple's advertising identifier (IDFA) requires authorization through App Tracking Transparency. This policy does not replace any required permission or consent.

Apple and Google also process information needed for their platform-account and cloud-save services. Providers' privacy policies describe their own processing, including advertising, measurement, fraud prevention and security purposes.

International Data Transfers

The Service Provider or its third-party service providers may transfer personal data outside the European Economic Area (EEA). Where such transfers occur, the Service Provider will use an appropriate transfer mechanism required by GDPR Chapter V.

Adequacy decisions by the European Commission
Standard Contractual Clauses (SCCs) approved by the European Commission
Other safeguards or derogations recognized under GDPR Chapter V, including consent where legally permitted

Countries outside the EEA may not provide the same level of data protection as the EEA. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

The Service Provider may disclose User Provided and Automatically Collected Information:

as required by law, such as to comply with a subpoena, or similar legal process;
when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
with the service providers described in this policy to provide platform features, analytics, advertising and diagnostics. Their roles and any independent processing are described in their applicable terms and privacy policies.

For providers acting as processors on our behalf, applicable data-protection law requires appropriate contractual protections. Firebase and Google Analytics have separate service and data-processing terms. A provider may also act independently for some purposes described in its own privacy policy.

What are my opt-out rights?

Where advertising privacy options are required and available, the game shows an ad-privacy entry in Settings so that you can review or change those choices. Device advertising permissions are also controlled through your phone's settings. An advertising privacy choice does not necessarily disable separate gameplay analytics or crash reporting.

You can stop future collection by the installed game by uninstalling it. Uninstalling does not automatically delete cloud saves or information already transmitted to service providers.

To request deletion of personal data, withdraw consent where applicable, or exercise privacy rights, contact huseyinenes.dev@gmail.com. We may need enough information to locate the relevant records and verify the request. We do not have a player email address attached to every analytics or diagnostic record.

What is the data retention policy and how can you manage your information?

Retention depends on the kind of information and the purpose for keeping it. The criteria include providing ongoing saved progress, investigating technical problems, measuring gameplay and advertising performance, handling support requests, preventing fraud, and meeting applicable legal obligations.

Game saves: local and cloud records support continuing your game until you reset or delete them, subject to the platform's own storage and backup behavior. See the deletion instructions below.
Analytics: retention of user-level and event-level records depends on the Analytics property's retention settings and Google's applicable processing rules. Aggregated reports can have a different retention period. See Google Analytics retention information.
Crashlytics: Google's published retention policy states that crash traces and associated identifiers are kept for 90 days before removal from live and backup systems begins. See Firebase privacy and retention information.
Advertising and other provider records: retention depends on the relevant provider's purposes, policies and applicable legal requirements. See the provider links above.

Contact us for information about the retention settings applicable to your request. Data may need to be retained where required by law, and deletion from provider backups may take additional time.

Data Deletion

To delete your saved game, open Settings → Delete Save Data and confirm the request. This resets locally stored game progress and requests deletion or reset of the game's cloud save. If you are offline or the original cloud account is unavailable, cloud deletion may remain pending until the game can connect to that account. Keep access to the relevant Apple or Google account available so that the cloud request can complete.

Deleting a Slice Orbit save does not delete your Apple, Google or Google Play Games account, and does not automatically remove Analytics, Crashlytics or advertising records already transmitted to their providers.

For a personal-data deletion request beyond game-save deletion, contact huseyinenes.dev@gmail.com. Describe your request without sending account passwords. We will verify the request where necessary and respond within the time required by applicable law. Provider-held information is also subject to the relevant provider's available privacy controls and legal obligations.

How does the Application address children's privacy?

The Application is not intended for children under 16 years of age, or where a higher age of digital consent is established under applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.

Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 16 years of age, or where a higher age of digital consent is established by applicable law, in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (huseyinenes.dev@gmail.com) so that they will be able to take the necessary actions.

How is your information kept secure?

The Service Provider is committed to safeguarding the confidentiality of your information. The Service Provider implements physical, electronic, and procedural safeguards to protect information it processes and maintains. For example, access is limited to authorized employees and contractors who need to know that information to operate, develop, or improve the Application. However, no security system can prevent all potential security breaches.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, the Service Provider will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by applicable law. Where the breach is likely to result in a high risk to your rights and freedoms, the Service Provider will also notify you without undue delay, providing information about the nature of the breach, the categories of data affected, and the measures taken or proposed to address the breach.

How will you be informed of changes to this Privacy Policy?

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at huseyinenes.dev@gmail.com.

This privacy policy is effective as of 2026-09-23

What are your GDPR data protection rights?

Under the GDPR, you have the following rights:

Right of Access: You can request access to your personal data.
Right to Rectification: You can request correction of inaccurate data.
Right to Erasure: You can request deletion of your personal data (the "right to be forgotten").
Right to Restrict Processing: You can request that the Data Controller limits how they use your data.
Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
Right to Object: You can object to processing based on legitimate interests. You have an absolute right to object to processing for direct marketing purposes at any time.
Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time. Use any applicable in-app privacy choices or contact the Data Controller. Device permissions can also be managed in the phone's settings.
Rights Regarding Automated Decision-Making: You have rights related to automated decisions that affect you.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority. Contact details for each country's Data Protection Authority can be found at: https://edpb.ec.europa.eu/about-edpb/members_en

If you are located in the United Kingdom, you may contact the Information Commissioner's Office at https://ico.org.uk

What are your California privacy rights (CCPA/CPRA)?

If you are a resident of California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

Right to Know: You can request disclosure of the categories and specific pieces of personal information the Service Provider has collected about you.
Right to Delete: You can request deletion of personal information the Service Provider has collected from you, subject to certain exceptions.
Right to Correct: You can request correction of inaccurate personal information.
Right to Opt-Out: You can opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
Right to Limit Use of Sensitive Personal Information: You can limit the use of your sensitive personal information to essential purposes.
Right to Non-Discrimination: The Service Provider will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact the Service Provider at huseyinenes.dev@gmail.com. The Service Provider will verify your request using the information you provide and respond within the timeframes required by law. You may designate an authorized agent to make a request on your behalf.

How do you give your consent?

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases, including contract performance, legitimate interests, or legal obligations, is carried out as described above.

How can you contact the Data Controller?

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at huseyinenes.dev@gmail.com.

To request deletion of your personal data or to exercise any of your rights, contact the Service Provider using the details provided above. The Service Provider will respond within one month of receiving your request, extendable by up to two months where necessary due to the complexity or volume of requests, as permitted by applicable law.

This privacy policy was adapted from a template generated by App Privacy Policy Generator