Privacy Policy
This policy explains what data the Solvotor mobile app
(Android and iOS, package app.solvotor.mobile) collects, why it is
processed, and who it is shared with.
1. Who is responsible
The developer and data controller is M. Kaan Çeçen (independent developer, Türkiye).
For anything privacy related: mkcecen@hotmail.com
2. Accounts
You can use Solvotor without giving an email address or password. On first launch the app creates an anonymous (guest) account in the background, identified only by a randomly generated user id (UUID). We do not ask for your name, phone number, or address.
You may optionally link that guest account to Google or Apple from Settings > Link your account. If you do, the provider tells us your email address and your provider-side user id. These are stored in the authentication table and are used only to restore your progress when you change devices. Linking is entirely optional.
3. Data we collect
| Data | Why | Where it lives |
|---|---|---|
| User id (UUID) | Identify your account and progress | Server |
| Username | Shown on leaderboards and friend lists | Server (visible to other players) |
Country code (e.g. TR) and language | Country leaderboard and interface language | Server |
| Device identifier | Prevent one device from solving the same puzzle on several accounts and distorting the leaderboard | Server |
| Gameplay: solved puzzles, times, scores, streak, badges, daily hint allowance | Run the game, produce leaderboards and stats | Server + device |
| Social: invite codes, friend list, pending requests | Friends leaderboard | Server |
| Email address (only if you link Google/Apple) | Account recovery and device changes | Server (authentication table) |
| Advertising identifier (Android Advertising ID / iOS IDFA) | Serving and measuring Google AdMob ads | Google (not passed to us) |
Location
During setup you can pick your country from a list, or tap Use my location. If you choose the latter, the app requests a lowest-accuracy position from the system, converts it to a country code on the device itself, and sends only the two-letter country code to the server. Coordinates are never stored, never sent to us, and never shared with third parties. If you deny the permission, the app keeps working — you just pick the country yourself.
Notifications
When the daily reminder is on, the notification is scheduled on the device's own timer. Nothing is pushed from a server, so no push token is collected or stored.
What we do not collect
Name, date of birth, phone number, postal address, payment or card details, your contacts, your photos, microphone or camera data, location history, or the list of other apps on your device. There are no in-app purchases.
4. Legal basis
- Performance of a contract: the service cannot work without the account, gameplay, leaderboard and friend data.
- Legitimate interest: anti-cheat via the device identifier, and rate limits against abuse.
- Consent: location permission, notification permission, and — in the European Economic Area, Switzerland and the UK — personalised advertising. You can withdraw consent at any time (device settings for permissions, the in-app consent screen for ads).
5. Who we share data with
| Party | What it receives | Where |
|---|---|---|
| Supabase (database and authentication infrastructure) | All server-side data above | EU — Ireland (eu-west-1) |
| Google AdMob | Advertising id, approximate (IP-based) location, device and ad interaction data | Google infrastructure |
| Google or Apple (only if you link an account) | The authentication flow; returns your email and provider id to us | The relevant provider |
We do not sell your data and do not pass it to third parties for marketing beyond the advertising described here. If we are legally compelled (court order and similar), we disclose only what is strictly required.
AdMob's own handling is governed by Google's policies: How Google uses data from sites or apps that use its services.
6. Advertising and consent
Solvotor is free and supported by ads: a banner at the bottom of the screen, occasional full-screen interstitials, and optional rewarded ads that earn you an extra hint. Users in the EEA, Switzerland and the UK are shown Google's consent screen on first launch. If you decline personalised ads, the app serves non-personalised ads instead and every feature keeps working. You can change your choice later under Settings > Ad preferences.
7. Retention
Your account and gameplay data are kept until you delete your account. When you do, your profile, scores, badges, friendships, hint allowance and authentication record are deleted together, in one cascade, and cannot be restored. Leaderboard aggregates may remain as numeric totals containing no personal data. Copies in backups roll off within 30 days.
8. Your rights
Under the GDPR and Türkiye's KVKK you have the right to access, correct, delete and port your data, and to object to processing.
- Deletion: in the app, Settings > Delete account > Delete my account — immediate and complete. If you have already uninstalled the app, follow the account deletion page.
- Correction: username and language can be changed in Settings. Country is chosen once, to keep leaderboards honest; write to us if it needs to change.
- Other requests: email mkcecen@hotmail.com; we respond within 30 days.
You may also complain to your national data protection authority (in Türkiye, the Personal Data Protection Authority — KVKK).
9. Children's privacy
Solvotor is a general-audience app and is not designed for children under 13 (or the age set by your country in the EEA, usually 16). We do not knowingly collect data from children below that age. If we learn that we have, we delete it; parents who suspect this should contact us.
10. Security
All traffic to the server is encrypted with TLS. Row Level Security is enabled in the database: each user can only modify their own rows and cannot write another player's data. Puzzle solutions are never sent to the client. Session and progress data held on the device stay inside the operating system's app sandbox.
11. Changes to this policy
If this policy changes, the effective date above is updated; significant changes are also announced inside the app.