Who we are (data controller)
Mustafa Baykal (Individual Developer), jurisdiction: Republic of Türkiye.
For all privacy-related questions: mustafabaykal91@gmail.com
What we collect
Gummy Siege has no app account or developer-operated backend. The developer does not collect your game progress or identifying information through the app. Meta progress, the run checkpoint and settings stay only on your device. There is no analytics SDK, advertising, tracking or App Tracking Transparency (ATT) prompt. This does not mean that third-party services receive no data: Apple Game Center processes leaderboard data when you sign in, RevenueCat processes subscription data, and Apple processes payments, as explained below.
Third-party services we use
- Apple Game Center (GameKit): if you sign in, scores and your Game Center player ID/alias are sent to Apple to provide leaderboards. The developer only sees the alias, score and rank that Game Center makes publicly visible.
- RevenueCat Purchases: manages Gummy Pass subscription and Lifetime purchase state using an anonymous app user ID, purchase receipts/transactions, device information, app version information and country. Gummy Siege does not send your name or email address to RevenueCat.
- Apple StoreKit / App Store: Apple processes purchases and payments under its own terms and privacy policy. The developer never receives your payment details.
Data processors and international transfers
Game progress remains on-device. The providers below receive only the data described for their platform or subscription roles, which may involve processing outside your country. RevenueCat is the subscription processor; Apple operates its own Game Center and payment services. A dash in the DPA column means this page does not assert a separately signed agreement, and N/A in the SCC column does not certify a particular international-transfer mechanism. The linked provider policies explain their practices; these entries do not claim that all app data stays on-device. Every provider that receives app data is required to provide the same or equal protection of that data as stated in this policy.
| Processor | Purpose | Location | DPA | SCC |
|---|---|---|---|---|
| Apple, Inc. (Game Center and App Store) | Apple provides Game Center leaderboards and processes App Store payments. When you sign in to Game Center, Apple receives scores and your Game Center player ID/alias; the developer only sees the publicly displayed alias, score and rank. Apple handles payment details, which the developer never sees. Apple governs these platform services under its own privacy policy. | Global Apple platform services | — | N/A |
| RevenueCat, Inc. (purchase processor) | Provides Gummy Pass subscription and Lifetime purchase verification, entitlement state and purchase restoration on the developer's behalf. Receives an anonymous app user ID, purchase receipts/transactions, device and app version information and country. The app does not send a name or email address. The identifier links subscription records without an app account; it does not make the records free of data-protection obligations. | USA; service providers may process data internationally | — | N/A |
Data retention
We keep data only as long as necessary for the purpose collected, or as required by law (GDPR Art. 5(1)(e); KVKK Art. 7).
| Data type | Retention period | Reason |
|---|---|---|
| Meta progress, run checkpoint and settings | until-app-deletion-or-local-overwrite | Stored only in the app's private device storage. Progress and settings are updated locally, and a run checkpoint is replaced as the run advances. Deleting the app deletes its local progress and settings. There is no developer-held progress backup or cloud save to recover. |
| Game Center player ID/alias and submitted scores | managed-by-Apple | Apple controls retention under its Game Center and privacy policies. The developer has no separate player database. Deleting Gummy Siege does not itself delete Apple's Game Center records. |
| RevenueCat anonymous app user ID, receipts/transactions, device and app version information and country | subscription-service-and-applicable-retention-requirements | Processed by RevenueCat for subscription state, purchase verification and restoration under its applicable policies and obligations. Uninstalling the app or cancelling a subscription does not automatically erase provider-held transaction records. Contact support for an applicable privacy request; no fixed third-party deletion deadline is promised here. |
| Apple payment and App Store transaction records | managed-by-Apple | Apple processes and retains payment records under its policies and legal obligations. The developer never receives payment details and cannot delete Apple's records by removing your local game progress. |
| Support correspondence you choose to send | as-needed-for-request-or-legal-obligation | Your email address, message and any attachments are received only if you contact support, separately from automatic app data collection. Kept only as long as needed to resolve the request or meet an applicable legal obligation. |
Local gameplay and offline use
Gummy Siege is a single-player, offline-capable iPhone arcade game. A candy cannon fires jelly crowds through multiplier gates against endless waves. Meta progress, the run checkpoint and settings are stored only on your device, without an account, developer backend or developer cloud sync. Game Center leaderboards, purchases and Restore Purchases require an internet connection.
Optional Game Center leaderboards
If you sign in to Apple's Game Center, your scores and Game Center player ID/alias are sent to Apple to display leaderboards. Apple's Privacy Policy and Game Center privacy notice govern that service. The developer only sees what Game Center shows publicly: alias, score and rank. Manage sign-in, visibility and available restrictions in iOS Settings → Game Center and Screen Time. Game Center is not a backup or synchronization service for your local game progress.
Gummy Pass and RevenueCat
RevenueCat acts as a processor for Gummy Pass subscription and Lifetime purchase state. It receives an anonymous app user ID, purchase receipts/transactions, device information, app version information and country to verify purchases, determine access and restore the Pass. Gummy Siege does not provide RevenueCat with your name or email address. An anonymous app user ID is a subscription identifier, not a developer account or advertising identifier. See RevenueCat's privacy information. RevenueCat also uses this purchase and subscription data to give the developer aggregate purchase and subscription reports (for example, active subscriptions, renewals and refunds) — this is purchase analytics, not gameplay analytics, advertising or tracking, and it is not linked to your identity. The app contains no gameplay analytics SDK. RevenueCat is required by contract to protect this data and to process it only for these services, providing protection equal to that described in this policy.
Payments are handled by Apple
Apple processes Gummy Pass payments through your Apple ID (Apple Account). The developer never sees your card number, billing credentials or other payment details. Purchase receipts and subscription state are used for entitlement verification, not advertising. Manage or cancel the subscription through Apple ID settings; deleting the app does not cancel it.
Deleting data and making privacy requests
Deleting the app removes device-local meta progress, run checkpoints and settings. The developer cannot recover them. Uninstalling does not cancel Gummy Pass or erase Apple Game Center, App Store or RevenueCat records. For applicable requests about subscription processing or support correspondence, contact mustafabaykal91@gmail.com. Apple controls requests concerning its own Game Center and payment services. No game account needs to be closed.
When you contact support
If you email support, the developer receives the address, message and attachments you choose to send through your email service, solely to handle your request and any applicable legal obligations. No support message or diagnostic file is sent automatically. Please do not send payment details, Apple ID credentials or other unnecessary personal information.
No ads, tracking or sale of data
There are no ads, gameplay analytics SDKs, cross-app or cross-site tracking, or ATT prompts. The developer does not sell personal data, share it for targeted advertising, or make automated decisions with legal or similarly significant effects. The limited Apple and RevenueCat processing described above is for platform and subscription functionality.
Your rights
- Access — request a copy of any data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion (see Delete account).
- Portability — receive your data in a machine-readable format.
- Restriction — restrict processing in certain circumstances.
- Objection — object to processing based on legitimate interests.
- Object to automated decisions — the app does not make consequential automated decisions; you may still email us per GDPR Art. 22.
- Withdraw consent — for any processing based on consent.
- Lodge a complaint — with your local supervisory authority (in Türkiye: KVKK; in EU: your national DPA).
Legal bases for processing (GDPR Art. 6)
Local gameplay serves the game functions you request without sending progress to a developer server. Where data-protection law applies to subscription processing on our behalf, the necessary processing provides your requested purchase, entitlement and restoration service (GDPR Art. 6(1)(b)). Support correspondence is handled to respond to your request or on the basis of our legitimate interest in resolving enquiries (Art. 6(1)(b) or (f), as applicable); mandatory legal retention relies on Art. 6(1)(c). Apple determines the applicable legal bases for its own Game Center and payment services. There is no advertising or gameplay-analytics processing or tracking consent. An operating-system permission is not blanket consent for other processing.
Children
Gummy Siege has a 9+ content rating and is intended for a general audience. It is not directed at children under 13 in a way that collects their personal data, and the developer does not collect personal data from children or adults through a game account, analytics or a developer backend. Apple Game Center and RevenueCat process the limited service data described above; the app does not send a child's name or email address to RevenueCat. Parents and guardians should manage Apple account, purchase and Screen Time restrictions as appropriate. The 9+ rating concerns content suitability, not a child's independent ability to contract or subscribe. If you believe a child sent personal information to support, contact us to request appropriate action.
Security
Game progress and settings are kept in the app's private storage on the device. The developer maintains no game-progress server, account-password database or cloud-save backup. Apple and RevenueCat handle their service data under their own security practices. Protect your device and Apple account and keep iOS up to date. Do not send payment details or account credentials to support. No storage or network service is guaranteed to be completely secure.
California / CCPA
California residents have the right to: (i) know what personal info we collect; (ii) delete personal info; (iii) opt out of sale (we do not sell); (iv) non-discrimination. To exercise: email mustafabaykal91@gmail.com with subject "CCPA request".
Changes
If this policy changes materially, the "Last updated" date will be revised. Significant changes will be flagged in-app and we will provide a 30-day notice period for objection where required by law.
Contact
Privacy questions: mustafabaykal91@gmail.com · Data subject requests: same email, subject "Data subject request".