Yonca Vadisi — Privacy Policy

Effective date: October 15, 2026
Version: 1.0
Publisher and data controller: Emrullah Hançer (individual developer), Istanbul, Türkiye
Contact: developeremrullah@gmail.com

This policy explains how the mobile game Yonca Vadisi (iOS and Android app, bundle/application ID com.yoncavadisi.game) and its web version handle personal data. It is also our notice under the EU General Data Protection Regulation (GDPR) Article 13 and Turkey's Personal Data Protection Law No. 6698 ("KVKK") Article 10.

1. Summary

• Yonca Vadisi is a single-player farming game. There are no accounts, usernames or passwords. We do not ask for your real name, email address or phone number inside the game.
• Your save (farm name, progress, settings) is stored on your device; in the mobile app it is optionally backed up to your own iCloud (iPhone) or Google Play Games (Android) account and this can be switched off in Settings (section 3A). Game saves are not kept on any server of ours; there is no multiplayer and no chat, and we run no analytics or tracking on servers of our own. In the mobile app we use Google Analytics for Firebase for anonymous usage statistics that depend on your consent and can be switched off in Settings (section 5A).
• In the mobile app, three third-party services receive data from your device: RevenueCat, which manages in-app purchases, Google AdMob, which serves optional rewarded ads, and Google Analytics for Firebase, which provides anonymous usage statistics. See sections 4, 5 and 5A.
• Ads are optional. You manage tracking and personalization through the iOS system prompt, Google's consent form (EEA/UK/Switzerland) and the app's Settings.
• The game is not directed to children under 13.

2. Data controller

The data controller is Emrullah Hançer, the publisher shown on the app stores (address: Istanbul, Türkiye; email: developeremrullah@gmail.com), acting as an individual developer.

3. Information stored on your device (it does not reach us)

The game stores on your device the farm name you choose, fields, crops, animals, resources, orders, completed tasks, album cards, gem and gold balances, and preferences such as sound, motion and reminders. The farm name is free text; you do not need to enter your real name.

• Web: the save lives in your browser's local storage. We do not use cookies.
• Mobile app: the save is stored in the app's on-device Preferences storage.
• The save is not sent to our servers, is not tied to an account with us, and is not synced between the browser and the mobile app (for the optional cloud save in the mobile app see section 3A). Uninstalling the app, clearing browser data or losing the device can delete the save.
• Important (purchased gems and gold): Purchased gems and gold are added to the save on your device. If the save is deleted or lost, those balances are not re-issued by the store because they are consumable products (see section 4). We recommend that you make regular backups.
• Backups (optional): In Settings you can export your save as a JSON file and import it later. The file contains your farm name and progress. Where you keep the file and who you share it with is your choice; the app does not send it to us.
• Operating-system backups: iOS (iCloud/device backups) and Android (Auto Backup) may include app data in a backup tied to your Apple/Google account, depending on your settings. That is Apple's or Google's service and we cannot access it.

3A. Cloud save (optional; in your own iCloud / Google account)

In the mobile app the "Cloud save" switch in Settings is on by default and can be turned off at any time. While it is on, your game save (farm name, progress, settings, gem and gold balances) is backed up to your own cloud account, so you can carry on with your farm when you switch devices or reinstall the app.

• iPhone/iPad: the save is written to Apple's iCloud key-value store (NSUbiquitousKeyValueStore) and syncs only with your own devices signed in with the same Apple ID. If you are not signed in to iCloud, or iCloud is switched off for the app, no backup is made.
• Android: the save is written to Google's Play Games Services "Saved Games" area and is tied to your Google Play Games account. If you are not signed in to Play Games, no backup is made.
• We run no server. The save sits in your own Apple or Google account; we cannot access, view or keep a copy of it. For that reason we do not treat the cloud save as data collected by us as the developer; its processing is subject to Apple's and Google's own privacy policies.
• When it is backed up: at most once a minute after changes, when the app moves to the background, and after real-money purchases. Without a connection the backup is queued and sent when you are back online. The "Back up now" button in Settings backs up immediately.
• Overwrite protection: if, when the app opens, the cloud save is newer or different, your farm is never replaced without your confirmation; the app asks you to choose "Load" or "Keep this device's farm". If you load the cloud save, your current local save is also kept on the device for safety.
• Deletion: to delete the cloud save, on iPhone go to Settings > Apple ID > iCloud > Manage Storage > Yonca Vadisi (or delete iCloud data); on Android go to the Play Games app > Profile > Settings > Delete Play Games account & data. Switching the toggle off stops new backups but does not delete the existing cloud save.
• The web version and third-party game portals do not use the cloud save; portals follow their own save infrastructure.

4. In-app purchases (App Store / Google Play Billing / RevenueCat)

Yonca Vadisi is free to download. You may optionally buy virtual items with real money: gem packs, gold packs and a one-time starter bundle. Gems and gold are used only inside the game; they have no cash value and cannot be transferred (see the Terms of Use).

• Your payment details: Payment is taken by the Apple App Store or Google Play. Only Apple or Google sees and processes your card or payment details; neither we nor RevenueCat have access to them. The store acts as the seller for billing, tax and refunds.
• RevenueCat (Purchases SDK): To validate purchases, list products and let you restore the one-time starter bundle, the app uses RevenueCat, Inc. According to RevenueCat's published information, for app users it processes: device type and operating system, last-seen time, the Apple receipt file or Google purchase token (transaction data), and a random, anonymous "app user ID" generated on the device. Because there is no account, this ID is not linked to your name, email or phone number. Locale and currency code may also be processed.
• RevenueCat's role: According to its privacy policy, RevenueCat acts as a data processor, not a controller, and stores customer data on AWS in the United States (see section 10). Its policy: https://www.revenuecat.com/privacy
• Purposes: crediting what you bought, validating receipts (fraud prevention), restoring purchases, resolving support requests.
• Consumable and one-time products: Gem and gold packs are consumable and are never re-delivered by the store. The starter bundle is a non-consumable one-time product; you can get it back after a reinstall or on a new device with "Restore purchases" ("Satın alımları geri yükle") in the app (in the store window "Elmas ve altın paketleri", Gem and gold packs). Purchased gem and gold balances are part of the save on your device.

5. Ads (Google AdMob, Google UMP, Apple ATT)

Ads appear only in the mobile app and only when you choose a "watch an ad" option (reward: +20 energy; up to 5 times per day). Declining ads never limits the game, animal care or your save. There are no banners and no forced interstitials.

• Ad service: Google AdMob (Google Mobile Ads SDK; Google Ireland Limited / Google LLC). To serve and measure ads the SDK receives data from your device. According to Google's published disclosures this includes: your IP address (used to estimate the device's general location; GPS location is not requested), the advertising ID (the IDFA on iOS, only if you allow it; the advertising ID on Android) and other device/app identifiers, product interactions (app launches, taps, video views), ads you have seen, and diagnostic/performance data (launch time, hang rate, energy use, crash logs). Data is encrypted in transit. Google uses it for advertising, analytics and fraud prevention.
• Consent (EEA/UK/Switzerland) — Google UMP: If you are in the European Economic Area, the United Kingdom or Switzerland, the app asks for your consent through Google's certified consent management tool (the UMP SDK) before requesting ads. If you do not consent or do not decide, ads may not be requested, or only non-personalized ads are shown. You can change your choice at any time in the app under Settings ("Ayarlar") > "Reklam ve gizlilik tercihleri" (Ad and privacy preferences) > "Aç" (Open) (the option is enabled where your region requires it). Outside these regions a consent form may not be shown.
• iOS tracking permission (ATT): On iPhone/iPad, after the consent step and before the first ad, the system "Allow tracking" prompt is shown. If you allow it, your advertising identifier (IDFA) may be used for personalized ads, which Apple calls "tracking". If you decline, only non-personalized ads are shown and the game works the same. You can change it at any time in iOS Settings > Privacy & Security > Tracking.
• Android advertising ID: In Android Settings > Google > Ads (or Privacy > Ads) you can reset or delete your advertising ID or turn off ad personalization.
• Ad content: The ad content rating is limited to a teen-appropriate level, and the app does not apply child-directed treatment because it is for users aged 13 and over (see section 14).
• If we change our ad settings or add another ad network, we will update this policy.

5A. Usage statistics (Google Analytics for Firebase)

To improve the game, the mobile app collects anonymous usage statistics with Google Analytics for Firebase (Google Ireland Limited / Google LLC). Firebase/Google Analytics is not used in the web version.

• When it runs: Analytics depends on the result of Google's consent management (UMP) and is off until permitted. In the EEA/UK/Switzerland, if you do not allow analytics in the consent form, nothing is collected. In regions where no consent form is shown (for example Türkiye) analytics runs without a form; you can stop it at any time with Settings > "Usage statistics" (when you switch it off, the analytics data on the device is reset). The advertising permissions used for personalized ads (ad_storage, ad_user_data, ad_personalization) are granted only with UMP consent and, on iOS, ATT permission; otherwise Google Analytics does not use them.
• What is collected: a random, device-specific app instance ID, device model, operating-system version, app version, interface language, approximate location derived from the IP address (country/city; the IP address itself is not stored), session length and in-game events: tutorial steps, level-ups, first harvest, planting/harvest counts (aggregated), deliveries and crafting completed, totals of in-game gold/gems earned and spent, rewarded ad views, opening the leaderboard and changing the language. App Store / Google Play purchase events are measured automatically by Firebase.
• What is not collected: your name, email, phone number, farm name, free text, precise location, contacts or account details. Because there is no account, events are not tied to your identity; they are associated only with the random app instance ID.
• Purpose: to see where players get stuck, improve balance and the tutorial, and measure stability (analytics).
• Legal basis: consent (GDPR Art. 6(1)(a), ePrivacy Art. 5(3); KVKK Art. 5/1 explicit consent) where consent is required; elsewhere you keep the right to opt out with the Settings switch and processing relies on legitimate interests (KVKK Art. 5/2-f, GDPR Art. 6(1)(f)).
• Retention: Analytics event data is kept for the retention period set in Google Analytics (at most 14 months).
• Transfers: Google processes the data on its servers (many countries including the United States); see section 10. Google's privacy policy: https://policies.google.com/privacy and Firebase privacy information: https://firebase.google.com/support/privacy

6. Game services: Game Center and Google Play Games (optional)

In the mobile app, if you choose to join leaderboards with Apple Game Center on iPhone or Google Play Games on Android (the "Sign in" button on the Leaderboard screen), the platform gives the game your player ID and player name. With that identity the game sends only three numbers to the platform's leaderboard: your farm score (total experience), harvest count and delivery count. These scores and your player name are visible to other players according to the platform's settings. Scores and identity are not stored on our servers; Apple's or Google's own privacy policies apply to their processing.

• If you do not sign in, no score is sent and the game uses a local (on-device) ranking only.
• On iOS, the Game Center friends list is accessed only when you ask for a friends ranking and with your permission.
• Google's Play Games Services SDK may process your player identity (nickname, avatar) and analytics/diagnostic data for SDK stability under Google's own service. Source: Google's Play Games Services data collection page.
• You can delete your account or Game Center/Play Games data from the relevant platform (Apple Game Center settings, your Play Games profile or Google Account).

7. Local notifications (optional)

If you turn on Settings ("Ayarlar") > "Hatırlatıcılar" (Reminders), the game schedules at most two local notifications with your phone's notification system when crops, animals, the workshop or energy are ready (quiet from 22:00 to 08:00). Notifications are scheduled on the device; no data is sent to a server and there is no remote (push) notification. You can withdraw the permission in your device settings at any time.

8. Web version and hosting logs

When you visit the web version, our hosting provider Cloudflare, Inc. (Cloudflare Pages) may process your IP address and technical request data (browser, time, requested page) to establish the connection and keep the service secure. These logs are kept for We keep no separate server logs; the hosting provider's technical records follow its own retention periods. The web version has no ads, no in-app purchases and no game services. We do not use cookies.

9. Purposes and legal bases

Where processing relies on consent, you may withdraw it at any time (see section 5); withdrawal does not affect the lawfulness of earlier processing.

10. Recipients and transfers

We do not run any data-sharing arrangement of our own and do not receive payment for your data. Data is collected by, or shared with, these service providers (recipients), who process it to provide their services (purchases, ads, platform features): RevenueCat, Inc. (purchase infrastructure), Google (AdMob ads, UMP consent, Google Analytics for Firebase, Play Games, Google Play) and Apple (App Store, Game Center, iCloud cloud save, ATT). Each processes data under its own privacy policy. For the cloud save, Apple/Google hold the content in your own account on your behalf; the save is not passed to us.

International transfers: RevenueCat stores data on AWS in the United States. Google and Apple process data in many countries, including Turkey, the EEA and the United States. Your data may therefore be transferred abroad. Transfers rely on safeguards required by KVKK Art. 9 and GDPR Chapter V (adequacy decisions, standard contractual clauses and supplementary measures, Board authorization, or other grounds permitted by law).

11. Retention

• On-device game data: until you delete it or uninstall the app.
• RevenueCat: purchase records are kept as needed to meet legal obligations, resolve disputes and enforce agreements; aggregated data that cannot identify you may be kept longer (RevenueCat privacy policy). For deletion requests see section 13.
• Google Analytics for Firebase: event data for at most 14 months; when you switch analytics off in Settings, the analytics data on the device is reset.
• Cloud save (iCloud / Play Games Saved Games): until you delete it or close your account, under the company's own policy; we hold no copy.
• Google AdMob / Play Games / Apple: according to each company's policies.
• Hosting logs: We keep no separate server logs; the hosting provider's technical records follow its own retention periods.
• Support emails: up to up to 2 years after the request is resolved after the request is resolved.

12. Security

Data in transit (with AdMob, RevenueCat, Apple and Google) is encrypted with TLS/HTTPS. Because the developer keeps no player data on its own servers, the attack surface is limited. Your save file is on your device; protecting your device and any backup files is your responsibility. No system is completely secure.

13. Your rights and how to use them

KVKK Art. 11: to learn whether your data is processed; request information; learn the purposes and whether they are used accordingly; know the third parties to whom data is transferred in Turkey or abroad; request correction of incomplete or inaccurate data; request erasure or destruction under KVKK Art. 7; request that these actions be notified to third parties to whom data was transferred; object to a result against you produced exclusively by automated analysis; and claim compensation for damage caused by unlawful processing.

GDPR Arts. 15–22 (if you live in the EU/UK/Switzerland): access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection, and not to be subject to solely automated decisions. You may withdraw consent where processing is based on consent.

How to apply: Email developeremrullah@gmail.com. Because there are no accounts, we cannot identify you directly; to resolve your request we may ask for your Apple/Google order (transaction) number and the device/app version you use. We may request reasonable information to verify your identity. We answer within 30 days (KVKK) / within one month (GDPR). KVKK applications are made in writing or through registered electronic mail/email in line with the "Communiqué on the Procedures and Principles of Application to the Data Controller".

Complaints: If you are not satisfied with our reply you may complain to the Turkish Personal Data Protection Authority / Board (KVKK) (https://www.kvkk.gov.tr) or, in the EU/UK/Switzerland, to the data protection authority of the country where you live.

How to delete your data:

1. On-device game data: uninstall the app (iOS/Android), or clear your browser's site data for the web version; on Android go to Settings > Apps > Yonca Vadisi > Storage > Clear data. Also delete any JSON backups you exported. (There is currently no separate "delete my local data" button in the app.)

1b. Cloud save: on iPhone, Settings > Apple ID > iCloud > Manage Storage > Yonca Vadisi; on Android, Play Games app > Profile > Settings > Delete Play Games account & data (see section 3A). The save is in your own account; you do not need to contact us.

1. RevenueCat record: email developeremrullah@gmail.com; we delete the relevant anonymous customer record from RevenueCat's dashboard. A new anonymous ID is generated on reinstall.
2. AdMob/Google, Apple, Play Games: through those companies' own tools (Google Account, Apple Data and Privacy portal) or by writing to us so we can pass the request on.

14. Children

Yonca Vadisi is for users aged 13 and over and is not directed to children under 13; we do not knowingly collect personal data from children. The app does not verify age; the age limit appears in the Terms of Use. If we learn that data of a child under 13 has reached us (for example, if a parent tells us), we will take reasonable steps to delete it. Ad content is limited to a teen-appropriate level. If your country sets a higher age of digital consent (for example 13–16 in some EU countries), complying with local parental-consent rules is your responsibility. This notice does not mean we hold COPPA or any other child-privacy certification.

15. Changes

If the app's data practices change (new SDK, new feature), we will update this policy and change the effective date. For significant changes we will inform you in the app or on the store page.

16. Contact

For privacy questions and requests: developeremrullah@gmail.com
Publisher: Emrullah Hançer, Istanbul, Türkiye
Address of this policy: https://yonca-vadisi.pages.dev/en/privacy