Privacy Policy

Version 1.0 · Last updated: 5 October 2026

This policy explains which data is processed when you play the Alaka word game ("the game") and use this website, why, and what your rights are. It is also our information notice under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK").

In short

• No sign-up wall. A guest account is created for you on first launch. We never ask for your name, phone number or contacts.
• The game is online. Your matches, scores, wallet and league standing are kept on our own server (in Türkiye), so your opponent is a real player and scores are calculated fairly.
• You play under a nickname. Other players see your username, avatar, player code, game statistics and what you post in the community. Please do not use your real name as your username.
• No free chat and no private messages. Matches only have preset reactions. Proposals and comments in the Discussion Pool are public and moderated.
• Purchases go through the stores. We never see your card details.
• Ads come from Google AdMob. We ask in the game for the permissions personalised ads need; if you say no, the game works the same.
• You can delete your account inside the game: Profile > Settings > Delete account.
• We do not sell your data.

1. Data controller

MOZ GROUP TEKNOLOJİ BİLİŞİM SANAYİ VE DIŞ TİCARET LİMİTED ŞİRKETİ ("we"). Address: Halkalı Merkez Mah. 1. Posta Sk. Cadde24 Rezidans No: 12 İç Kapı No: 77 Küçükçekmece / İstanbul. MERSİS: 0623228324400001. E-mail: info@neuros.com.tr.

2. What we process

2.1 Guest account

When you first open the game, a random key is created on your device and a guest account tied to it is opened on our server. It holds a random account id, your player code (e.g. ALK-7K2Q), the creation time, your platform (iOS or Android), the app version and session keys. None of this is your name, e-mail address or phone number.

2.2 Profile and game data

• Profile: the username and avatar you choose, your player code, titles, badges, league tier and Contribution Points.
• Matches: mode and arena, the words and letters you place, move times, scores, bonds, your answers on quiz squares, the result. Your opponent sees your moves and username during the match.
• Rankings: arena ratings (ELO), league points (LP), your weekly league group and rank, Daily Move scores and streak.
• Wallet: your coin and hint balance and a record of every change (rewards, spending, purchases). The server calculates the balance.
• Friends and invites: your friend list, challenges you send and receive, private leagues you create or join, the player who invited you and the status of invite rewards.
• Inbox: rewards and notices sent to you.

Your username, avatar, player code, league and arena information and the statistics on your profile (Arena Analysis, bond collection, badges) are visible to other players.

2.3 Community and contributions

If you propose a bond in the Discussion Pool, comment, vote or like, or send a question, arena term, meaning suggestion or error report, it is stored with your account. Your proposals and comments are public to other players together with your username.

• Before your first post we ask you to accept the Community Guidelines and the Terms of Use and we store the date of that acceptance.
• Every text you send passes a Turkish profanity and insult filter.
• Report and block: you can report a proposal or comment and block a player. A report is stored with your account, the reported content and the reason. Content that receives a certain number of reports is hidden automatically and reviewed by our moderators. Your block list is kept with your account; blocked players' content is hidden from you and they are not notified.
• Moderation decisions (hide, remove, restrict, ban) and their reasons are recorded.
• An accepted contribution (e.g. a bond between two words, or a question) becomes part of the game's content. If you delete your account, that content stays in the game but is no longer linked to you.

2.4 Optional account linking

To use your account on another device you can link one of these:

• Sign in with Apple (iPhone): Apple gives us a user id for this game and an e-mail address (an Apple relay address if you choose "Hide My Email"). We keep Apple's refresh token on our server so we can revoke Sign in with Apple when you delete your account.
• Sign in with Google (Android): Google gives us a user id and e-mail address.
• E-mail and code: we e-mail you a 6-digit code (no password) through Resend, which receives your e-mail address and the code.

We use these only to sign you in and to find your account if you write to us; they are never shown to other players.

2.5 Notifications

If you allow notifications (your turn, a challenge, the Daily Move is ready, the league is ending, your contribution was accepted, a reply to your comment), your phone gets a device token from Apple (APNs) or Google (Firebase Cloud Messaging). Our server stores the token, platform and your notification preferences with your account. Apple or Google deliver the notification and see the token and the text, which may contain another player's username. You can turn notifications off in Settings or in your phone's settings.

2.6 Purchases

Apple (App Store) or Google (Google Play) take the payment; we never see your card details. We use RevenueCat to validate purchases; it receives your account id, the product, price and currency, the store transaction record, country and basic device information. A validated purchase is added to your wallet on our server.

2.7 Ads

The game shows Google AdMob ads: rewarded videos you choose to watch, interstitials at the end of matches, an ad when the app opens and a banner at the bottom of the home screen and the match list. There are no ads during a match. AdMob may process your IP address, device model and operating system, language, coarse location (country or city level from the IP address), ad interactions and, if you allow it, your advertising id (IDFA on iOS, advertising ID on Android) to show ads, cap their frequency, prevent fraud and measure them.

• When you watch a rewarded video to the end, Google sends our server a verification callback with your account id and a one-time code so we can grant the reward.
• Where required (EEA, UK, Switzerland) the game shows Google's consent form (UMP).
• On iPhone, iOS asks for permission to track (App Tracking Transparency) for personalised ads. If you say no, your advertising id is not shared.
• All ads are capped at the lowest content rating ("General").
• Owners of Remove Ads or Alaka Club see no interstitial, app-open or banner ads.

How Google uses data: policies.google.com/technologies/partner-sites.

2.8 Install source

To see whether our ad channels work, we measure where the game was installed from instead of asking you:

• Android: Google Play's install referrer. We keep only the campaign fields (source, medium, campaign, invite code) and whether an ad click was present.
• iPhone: a one-time token from Apple's AdServices framework. Our server asks Apple; Apple returns campaign information only if the install came from an Apple Ads ad. No advertising id is used.

2.9 Usage measurement and error logs

To improve the game we measure game events on our own server: screens opened, modes played, match length, hint and ad use, shop views, app version and platform. These events are linked to your account id and are not shared with any third-party analytics company. When something goes wrong the game may send a short error log (time, version, platform, error message).

2.10 Security logs

Our server keeps request logs (IP address, time, requested address, account id) and rate-limit counters to prevent abuse and cheating.

2.11 Word meanings

The "look up" link on a word's meaning card opens the Turkish Language Association's dictionary website in your phone's browser. We send that website nothing; its own privacy rules apply.

2.12 When you write to us

If you e-mail support, we use your address and message only to answer you and solve the problem.

2.13 This website

This site sets no cookies and has no analytics. Fonts and images are served from this server. The server keeps standard access logs (IP address, date, requested page, browser information) for security for at most 30 days. The invite page (/d/) only shows the code in the link and helps you copy it.

3. Purposes and legal bases

4. Service providers and transfers abroad

Transfers abroad rely on the safeguards of KVKK article 9 or, where required, your explicit consent. Apart from lawful requests by authorities we share your data with no one else and we do not sell it.

5. Retention

• Account, profile, matches, wallet, rankings, friends: until you delete your account. Deletion in the game is immediate (section 6); e-mailed deletion requests are completed within 30 days.
• Proposals, comments, votes and likes: until you delete them or your account. The game content of an accepted contribution (e.g. a bond pair) stays without your name.
• Report and moderation records: up to 1 year after account deletion, de-identified, to prevent abuse.
• Sign-in codes: 10 minutes.
• Usage measurement and error logs: up to 24 months. Security logs: up to 90 days.
• Purchase and wallet records: as long as the stores and tax law require.
• Support e-mails: up to 2 years after the request is closed. Website access logs: up to 30 days.

6. Deleting your account and data

In the game tap Profile > Settings > Delete account and confirm. Your account, profile, match history, wallet, friendships, private league memberships, proposals and comments and notification tokens are permanently deleted from our server; Sign in with Apple is revoked at Apple too. Remaining coins, hints and purchased items are deleted and not refunded. Deleting your account does not cancel an Alaka Club subscription; cancel it in your store account settings.

If you cannot open the game, e-mail info@neuros.com.tr with the subject "Delete my account" and your player code (on your Profile, e.g. ALK-7K2Q) or the e-mail address you linked. Details: Delete account.

7. Children

Alaka is a word game for a general audience and is not designed for children under 13. Community features are moderated; there is no free chat and no private messaging. If you believe a child under 13 has given us data, write to info@neuros.com.tr and we will delete the account.

8. Security

Connections are encrypted (HTTPS). Our servers and backups are in Türkiye. Each player can only change their own account; only authorised staff can use the admin panel and every action there is logged. In case of a breach we notify the Board and affected people as KVKK requires.

9. Your rights

Under KVKK article 11 you can ask whether your data is processed, request information, learn the purpose and whether it is used accordingly, know the third parties it is transferred to, ask for correction or deletion and for those parties to be told, object to a result produced solely by automated systems and claim compensation for unlawful processing.

• Write to info@neuros.com.tr with your player code; we do not have your name, so this is how we find you.
• We answer free of charge within 30 days. If you are not satisfied you can complain to the Personal Data Protection Board (KVKK).
• You can change ad permissions in the in-game consent form or your phone settings and notifications in Settings at any time.

10. Changes

We may change this policy. The current version is always on this page and inside the game; we announce important changes in the game.

11. Contact

info@neuros.com.tr