Yasper GamesLifetale — Privacy Policy
Version: 2.0 · Effective: 30 October 2026
App: Lifetale (Turkish store name: Hayat Dosyası) · com.yaspergames.lifetale
Data controller: Erdoğan Yasin Peker (natural person), Türkiye, trading as "Yasper Games"
Contact: support@yaspergames.com · Data requests: support@yaspergames.com
This English text is a translation of the Turkish original; in case of conflict, the Turkish version prevails.
1. Summary
- Lifetale is a story game that works on your device first. You can play without an account.
- In teen and adult mode, when the game talks to the cloud (on by default) it creates a random anonymous account on your device. You may link a Google account or an e-mail address; if you do, your progress is backed up and can be restored on another device.
- In teen and adult mode, what we collect: your account ID, (if you link) your e-mail and Google name, your game records, your ink and purchase records, friend and quick-message records, and — if you join the leaderboard — a publicly visible name and player code. If you watch a rewarded ad, Google AdMob collects an advertising ID and device information.
- We do not sell your data. We run no analytics of our own, no crash reporting, and use no location, camera, microphone or contacts.
- You can delete your account at any time (in the app or on a web page).
- Anyone can play. On first launch we ask for a birth month and year (kept on this phone only, never sent to us); under-13s and anyone who declines get kids mode: no ads, purchases, accounts, leaderboard or friends, and no data collected (§11).
- The game's recommended age is 13+ (it deals with death, illness, grief, separation, addiction and smoking); the content is the same in kids mode.
2. Who is responsible
Erdoğan Yasin Peker (natural person), Türkiye, publishes the game as an individual. The product is called Lifetale (English) / Hayat Dosyası (Turkish); the studio brand is Yasper Games. Contact: support@yaspergames.com. The controller under Turkish KVKK is a natural person.
3. Data we process
3.1 Data that stays on your device
The game keeps the following in the device's local storage (localStorage, prefix hayat_m_): your profile (the name you typed, a 4-digit number, theme / language / sound / text-size preferences, reminder setting, seals and streak), wallet, the life in progress, an archive of finished lives (up to 50), daily markers and the last 10 error records (stored on the device only, never sent). Uninstalling the app removes them.
- Age mode: the mode resulting from your age-screen answer (kids / teen / adult) and a timestamp are stored on the device; your date of birth is not stored and is never sent to our servers or to third parties. The parent-gate wrong-attempt counter is also on the device only.
- Android auto-backup: Android may back up app data (including the age mode) to your own Google account. That is the operating system's feature and your setting; we have no access to that backup.
- Notifications: if you turn on the daily reminder, the notification is generated by your device. There is no server push.
- Sharing: if you share a life summary, it goes to the operating system's share sheet; you decide where it goes.
3.2 Account and identity
This section applies to teen and adult mode; in kids mode no account, identifier or session is ever created (§11).
| Data | When | Required? |
|---|---|---|
| Anonymous account ID (random UUID) and session tokens | Automatically when the cloud starts | For cloud features |
Player code (4–6 characters, e.g. K7Q2) | Automatically with the account | Yes; friends, gifts and reports use it |
| If you link Google: e-mail address, Google account ID, name on Google, profile-photo link | When you choose "Link Google" | No |
| If you link Apple (iOS): Apple account ID, your name and e-mail address (or the private relay address Apple gives you with "Hide My Email") | When you choose "Link Apple" | No |
| If you link e-mail: your e-mail address | When you type it | No |
| Your profile name (up to 40 characters, may be empty) | If you type one | No |
Sign-in happens on Google's own page (in your phone's browser); Google does not send us your password, and neither does Apple. Linking does not change your account ID (UUID).
3.3 Game records (cloud backup)
Summaries of finished lives (age, regret, money, seals, mode, life name, cause of death, and the details the screen draws), your ink transactions (amount, reason, proof), and — only if you linked Google/e-mail — your profile backup (seals, streak, settings, life in progress). Only you can read them (row-level security, see §8).
3.4 Data other players can see
This part matters; the following is visible to other players:
| What | Who can see it | Condition |
|---|---|---|
| On the leaderboard: your life name, the value (age/money/regret/seals), your profile name and your player code | Everyone (including people who are not signed in) | Only if you linked an account; anonymous players are not shown |
| To friends: your name, player code, last-seen time, and the quick messages you send | People you add as friends | After a friend request is accepted |
| If you send a gift: the gift type and your code/name | The recipient |
If you do not want to share your code, turn on streamer mode in Settings (code hidden, requests closed). Inappropriate names can be reported and are moderated (§3.7). We advise against using your real name. The leaderboard, friends, quick messages and gifts are also available in teen mode (13-17); in kids mode none of them exist and a child's name appears nowhere.
3.5 Purchases, subscriptions, gifts
Payment goes through Google Play (Android) or the Apple App Store (iOS); your card details never reach us. We receive and store: product code, the store's receipt token, order number, status (verified/refunded/cancelled), the store's verification response, and the subscription end date. Our server verifies receipts by asking the store's servers (Google Play Developer API / Apple App Store Server API). When you buy, your player ID is attached to the store purchase as an obfuscated account ID. There are no purchases in kids mode (store billing is never started); in teen mode purchases follow Google Play / App Store parental controls (Family Link, Ask to Buy).
3.6 Advertising (Google AdMob)
Rewarded ads play only when you start them (at most 3 a day). The ad SDK (Google Mobile Ads / AdMob) is initialised only in teen and adult mode, after the age screen is answered, and never in kids mode. When it runs it may send Google: your advertising ID (Android Advertising ID / iOS IDFA), your IP address (and an approximate location derived from it), ad and app interactions, and device and diagnostic information. Google uses it for ad delivery, measurement and fraud prevention (at this stage Google acts as an independent or joint controller). Details: https://policies.google.com/privacy and https://support.google.com/admob/answer/6128543.
- EEA, UK, Switzerland: Google's consent form (UMP) is shown. If you do not consent, only non-personalised ads are shown. You can change your choice later from the ad-consent row in Settings.
- Teen mode (13-17): the user is treated as under the age of consent in the EU (
tagForUnderAgeOfConsent), ads are non-personalised with a content-rating cap of "parental guidance", the advertising ID is not used for personalisation, and no tracking prompt is shown on iOS. - iOS (adult mode): Apple's App Tracking Transparency prompt appears before the advertising ID is used. If you decline, ads are not personalised but still appear.
- You can reset or disable your advertising ID in Android/iOS settings.
- To prove a reward, a single-use token reaches our server (server-side verification) and is stored against your account.
- There are no forced ads, app-open ads or banners.
3.7 Safety and moderation
Report records (reporter, reported player, name/message ID, reason, decision), strike counters and restrictions, the admin action log, the name-change counter, and receipt and reward tokens used to prevent fraud. Quick messages are chosen only from 24 fixed phrases; there is no free-text chat.
3.8 Website (yaspergames.com)
- Newsletter: the "let me know at launch" signup stores your e-mail, language and the page it came from (database: Supabase, Frankfurt); used only for that announcement; write to support@yaspergames.com to be removed.
- Fonts: fonts are loaded from the site's own server; no request goes to Google Fonts when a page loads.
- The site uses no cookies, analytics or advertising trackers.
- Deletion form: your e-mail, account type and (optionally) player number and name are used to process the request.
4. What we do not collect
Location (GPS), contacts, calendar, SMS/call log, photos/video/audio recordings, file contents, health or fitness data, biometric data, card or bank details, browsing history, the list of installed apps, and special-category data under KVKK art. 6 / GDPR art. 9. Your choices in the game are fiction; they are not treated as statements about your real life and are not used for profiling. Permissions the app uses on Android: Internet, Google Play billing, advertising ID, network state. The advertising and billing libraries may add technical permissions such as background work; there are no location, contacts, camera, microphone or storage permissions.
5. Purposes and legal bases
| Purpose | Data | KVKK basis | GDPR basis |
|---|---|---|---|
| Running your account and the game, backup, multi-device | 3.2, 3.3 | Performance of a contract (art. 5/2-c) | Art. 6(1)(b) |
| Delivering purchases/subscriptions/gifts, refunds and disputes, accounting | 3.5 | Contract; legal obligation (art. 5/2-c, ç) | Art. 6(1)(b),(c) |
| Fraud prevention (a receipt used twice, fake rewards) | receipt/reward tokens | Legitimate interest (art. 5/2-f) | Art. 6(1)(f) |
| Leaderboard, friends, quick messages | 3.4 | Contract; for the public name, an act amounting to explicit consent (linking and taking part) | Art. 6(1)(b),(a) |
| Moderation and abuse prevention | 3.7 | Legitimate interest | Art. 6(1)(f) |
| Showing and personalising ads | 3.6 | Explicit consent (UMP/ATT) | Art. 6(1)(a) |
| Newsletter | 3.8 | Explicit consent | Art. 6(1)(a) |
| Legal claims and obligations | art. 5/2-e, ç | Art. 6(1)(c),(f) |
Kids mode: because no personal data is collected, the purposes in this table do not apply in kids mode and nothing requires parental consent. Teen mode (13-17): the same bases apply, except that ads are not personalised and, in the EU, the user is treated as under the age of consent. The design takes child-data rules into account (COPPA in the US, GDPR Art. 8 in the EU, KVKK in Türkiye).
6. Retention
| Data | Period |
|---|---|
| Device records | Until you delete them / uninstall |
| Age mode and parent-gate counter | On the device only; until you uninstall or clear the app's data ("Delete data on this device" does not remove them, so the age gate cannot be bypassed by reset-and-retry). Never sent to a server |
| Account, archive, wallet ledger, backup, leaderboard, friends, messages, gifts, ad records | While your account exists; deleted as described in §10 |
| Purchase records | After deletion kept as de-identified (HMAC digest) financial records for the period required by tax/accounting law (generally 10 years in Türkiye) |
| Moderation records | Until the account is deleted |
| Newsletter | Until you unsubscribe |
| Deletion-form requests | Until handled and the legal objection period has passed |
| Server/infrastructure logs (Supabase, Hostinger) | Providers' standard periods; disaster-recovery backups for the provider's backup cycle [provider periods to be verified] |
Note: we do not currently delete accounts that are never opened again; if we add such a process we will state the period here.
7. Recipients and international transfers
| Recipient | Purpose | Location |
|---|---|---|
| Supabase (database, authentication, server functions) — processor | Account and game data; website newsletter signups | Frankfurt, Germany (EU, eu-central-1) |
| Google (Google Play Billing, Sign-In with Google, AdMob) | Payment, sign-in, ads | Google infrastructure (including the US) |
| Apple (App Store, StoreKit, Sign in with Apple) | Payment, subscriptions, sign-in | Apple infrastructure |
| Hostinger (website hosting and e-mail) | Site, support e-mail | provider's data centres |
- We do not sell data and do not market it to third parties for ad targeting (AdMob's own processing is described in §3.6).
- In kids mode no data goes to any recipient (Supabase, Google, Apple), so there is no international transfer.
- Servers are outside Türkiye, so this is an international transfer. Under KVKK art. 9 (as amended by Law No. 7499) appropriate safeguards (standard contract, notification to the Authority) are needed where there is no adequacy decision; for GDPR we rely on standard contractual clauses or the EU–US Data Privacy Framework.
- We may disclose data to authorities when legally required.
8. Security
- All network traffic uses TLS (HTTPS); cleartext traffic is disabled.
- The database enforces row-level security (RLS): each table is readable only by its owner; the leaderboard view is the exception and shows only the fields in §3.4.
- The client cannot write to wallet or purchase tables; only verifying server functions can. The ink balance is not a stored number but the sum of the transaction ledger.
- Server keys (
service_role, store service accounts) are never inside the app. - No system is perfect; if you find a flaw, write to support@yaspergames.com. In case of a personal data breach we notify within the legal deadlines (KVKK: 72 hours to the Board).
9. Your rights
KVKK art. 11: to learn whether data is processed, request information, learn whether it is used for its purpose, know the recipients, request correction, deletion/destruction, have these actions notified to third parties, object to automated analysis, and claim compensation.
GDPR: access (15), rectification (16), erasure (17), restriction (18), portability (20), objection (21), withdrawal of consent.
Requests: support@yaspergames.com. We answer within 30 days. Complaints: the Turkish Personal Data Protection Authority (kvkk.gov.tr) or your local EU data protection authority. To withdraw consent: change the ad consent in Settings; to leave the leaderboard, unlink or delete your account; for the newsletter, write to us.
10. Deleting your account
- In the app: Settings → Danger zone → Delete my account permanently. Type
DELETE(SİLin the Turkish interface) in the confirmation box. There is no such row in kids mode, because there is no account. - Game data on this phone only: Settings → Delete data on this device, or uninstall the app. In kids mode nothing is held on our servers in your name, so there is no cloud data to delete.
- On the web: https://yaspergames.com/en/delete-account.html (if you cannot install the app).
- Account linked with Google, Apple or e-mail: deletion starts immediately (your sessions end, you drop off the leaderboard, your balance is zeroed) and there is a 14-day window to change your mind — sign in with the same account to cancel. At the end of day 14 your account and all cloud data are permanently deleted.
- Anonymous account: no window; deletion is immediate and irreversible.
- Deleted: account, life archive, backup, wallet ledger, leaderboard row and name, friend/block/message records, gifts you sent that are still unopened, ad records, moderation records tied to the account.
- Kept: the de-identified financial record (§6); copies in provider backups until their cycle ends; old leaderboard lists cached on other people's devices.
- If you have an undelivered purchase, deletion pauses (so your money is not lost).
- Your subscription does not cancel itself: deleting the account does not cancel your Google Play / Apple subscription; cancel it in your store settings. Unspent ink is not refunded.
11. Children
Lifetale is a game anyone can play, including children. Its recommended age is 13+, because it deals in text with death, illness, grief, separation, addiction and smoking; that content is the same in kids mode. Kids mode switches off data collection, not content. Here is how it works:
- Age screen. On first launch we ask for a birth month and year (nothing is pre-selected; people who would rather not say can choose "I'd rather not say"). The answer is stored on the device only and is never sent to our servers or to third parties; the device keeps only the resulting mode (kids / teen / adult), not your date of birth. The age screen relies on what you tell it; it is not identity verification.
- Kids mode (under 13, and anyone who does not answer). The game is completely free and ink never runs out. In this mode: no ads (the ad SDK is never started), no purchases, no account or Google/Apple sign-in, no connection to our servers at all (no account, identifier or sync is created), no friends, quick messages or gifts, your name never appears on, and you do not take part in, the leaderboard, and no analytics or advertising ID is collected. Your game records stay on the device and disappear when you uninstall.
- Teen mode (13-17). The full game. Purchases follow Google Play / App Store parental controls (Family Link, Ask to Buy). Ads use age-appropriate content ratings (General/Parental Guidance level) and are not personalised; no tracking prompt is shown on iOS. If you link an account, your profile name and player code are visible to everyone on the leaderboard (§3.4); friends, quick messages and gifts are available.
- Adult mode (18+). The behaviour described in the rest of this policy.
- Changing the mode. An adult can switch the phone to kids mode at any time under Settings → Age and mode. Leaving kids mode requires a "parent gate" (a sum plus an adult's birth month/year); three wrong attempts lock the gate for an hour. This is friction, not identity verification; someone who cannot pass the gate still gets the complete game, free.
Parents' rights. In kids mode no data reaches us, so no record is kept about your child. If your child has a teen-mode account, a parent or guardian may exercise every right in this policy (access, correction, deletion) by writing to support@yaspergames.com; the account can also be deleted inside the app (§10). If you believe a child's data has been processed outside the modes described here, write to the same address; once confirmed, the record is deleted. See the Child Safety page.
12. Automated decisions and profiling
In-game outcomes (such as age at death) are game mechanics, not automated decisions with legal effect on you. Ad personalisation happens only in adult mode, by Google, with your consent; there are no ads in kids mode and no personalisation in teen mode.
13. AI-generated content
The game's images were generated with AI image models. The game does not run an AI model on your data and does not use your inputs to train models.
14. Changes
If this policy changes, the version and date are updated; the current text is at https://yaspergames.com/en/privacy.html. Material changes are announced in the app.
15. Contact
Erdoğan Yasin Peker · Türkiye · support@yaspergames.com · https://yaspergames.com