1. Who is responsible

Ümit Yasin Çoban, an individual developer based in Türkiye, is the controller of the personal information processed for SpaceDrills. App and privacy requests: umityasincoban@gmail.com. You can also use umityasincoban@gmail.com for legal or privacy correspondence.

Uğur Özdemir helps with the development of our hobby projects as a friend and voluntary contributor. We have not formed a company or a commercial or profit-sharing partnership together. This acknowledgement does not identify him as the service provider or the contact responsible for privacy requests; the provider and contact details stated above remain applicable. Any responsibilities imposed by applicable law depend on the actual activities involved.

This Notice covers the mobile app, its associated game services and related account-deletion requests. It explains processing; it does not ask you to waive rights or treat use of the app as blanket consent to tracking. The Terms of Use address service and purchase conditions separately.

2. Information and sources

Information comes from you, activity in the app, your device, the identity provider you choose, stores and the integrated services listed below. An identifier can be personal information even when it does not contain your name. Please do not send passwords, full payment-card information or complete purchase tokens in support messages.

Some gameplay and preference data stays on your device. Local storage is distinct from the online game database; the service does not promise that every local record is backed up or synchronised across devices. Store payments are processed by the store, while we may receive transaction and entitlement information rather than your full card details.

3. Purposes and legal bases

Where EU or UK data-protection law applies, processing necessary to provide the account, online game or purchase service you request is based on performance of a contract. Proportionate security, fraud prevention, essential diagnostics and defending legal claims may rely on legitimate interests, subject to balancing your rights. Specific legally required records rely on the relevant legal obligation.

Optional advertising personalisation, analytics and access to information on your device require consent where applicable privacy or electronic-communications law requires it. A contractual basis does not automatically cover those optional activities. This Notice, acceptance of the Terms, a store age rating or an iOS permission does not by itself supply every consent required by law.

Providing account or purchase-verification information may be necessary for those particular functions. Choosing not to provide it may mean that we cannot supply the associated account, competitive or paid-access feature. We do not treat every requested data item as essential to all local gameplay.

4. Recipients and public profiles

The services used for the relevant functions include:

• Contabo: hosting of the game servers and databases in a European region, under the hosting data-processing relationship. Contabo data-processing information.
• Google and Apple: the sign-in method you choose, store payment and purchase verification, and platform game services where used. Google privacy information, Apple privacy information.
• Google Firebase Analytics and Crashlytics: usage measurement and diagnostics. Firebase privacy information.
• Google AdMob and the advertising providers involved in ad delivery: advertising, measurement and personalisation according to applicable requirements and settings. Google advertising information.
• Email service providers: delivery and handling of account, support and privacy correspondence.

Providers may act as processors for particular activities and as independent controllers for others under their own terms. Their privacy information explains their respective processing. We may also disclose necessary information to advisers or authorities for a specific legal obligation, dispute or lawful request. Using a provider does not remove our own responsibilities.

Display names, relevant scores, rankings and profile information can be visible to other players. Avoid adding sensitive or private details to a public name. Passwords and sign-in credentials are not intended to be public profile fields.

5. Locations and international access

The game-server hosting region is in Europe. The developer operates in Türkiye and may administer the service or handle support from Türkiye. Google, Apple and other integrated providers may process information in additional countries. European hosting does not mean that every recipient or access is confined to Europe.

International processing is subject to the applicable transfer requirements. You can contact us for information about recipients, applicable locations and transfer safeguards relevant to your information, including how to obtain details of a safeguard where required by law.

6. Retention and account deletion

We determine retention by the purpose of each record, the account or transaction relationship, the need to resolve a specific request or dispute, and applicable legal requirements:

• Account and online game records: for the account/service relationship, then removal or minimisation when no longer needed, including when an applicable deletion request is completed.
• Purchase and entitlement records: for verifying, restoring or resolving the purchase, and any justified legal record-keeping or claim period. Deleting a profile does not itself erase the store's independent transaction record.
• Support, security and deletion records: for handling the issue and the limited period justified by security, proof of fulfilment or legal claims. These are not a general right to retain every record indefinitely.
• Analytics, crash and advertising records: according to the relevant service, configuration, purpose and applicable deletion controls. We do not promise a single automatic anonymisation deadline for every SDK. Contact us for the retention information relevant to your request.
• Backups and restricted recovery records: deletion may require separate handling from the active database. Any continued retention must be limited to a justified recovery, security or legal-preservation purpose, with access restricted and no routine reuse for unrelated purposes.
• Device records: may remain until cleared through the app, device storage controls or removal of app data; operating-system backups may have their own lifecycle.

Use the in-app profile deletion control or the deletion request form below. The web form records a request for review; submission does not mean that deletion is already complete. If you use a guest account or cannot identify the account by email, contact us for proportionate verification using the information available to you.

The app uses a shared game-platform account. Deleting that account can also remove associated game-platform profiles, statistics and purchase links, not only the profile shown in this app. Contact us before proceeding if you need to clarify the scope or request deletion of particular data.

We may need proportionate identity verification. An optional reason for deletion is not a condition of your right. We will explain any specific legal retention exception or other lawful reason that prevents fulfilling a request in full. App account deletion does not delete your Google or Apple account, automatically remove every device record or replace store subscription-management steps if you have a recurring store product.

7. Privacy choices

Use the privacy/reporting controls available in your app version and device settings, and contact umityasincoban@gmail.com to withdraw consent, object to processing or request deletion. Withdrawal does not affect processing lawfully carried out before it and does not stop processing that has a separate valid legal basis.

Device advertising or iOS tracking settings address particular permissions; they do not by themselves disable every analytics or crash-reporting activity. Buying an ad-removal product also does not by itself mean that every non-advertising SDK is disabled. We will identify the scope and any limits relevant to your request rather than treating one setting as a universal opt-out.

8. Your rights and regional information

EU/EEA and United Kingdom: subject to the relevant conditions, you can request access, correction, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw consent. You can complain to the competent data-protection authority, including in your place of residence where applicable; in the UK this is the Information Commissioner's Office. GDPR requests are normally answered within one month, with an extension only where permitted and explained within that first month.

United States: state-law rights depend on the law's scope and applicable thresholds. Where applicable, these can include access, correction, deletion, a copy of data, non-discrimination and opting out of targeted advertising or the sale/sharing of personal information, with an appeal where provided by law. Advertising-related disclosure may qualify as sale or sharing under a particular law even without a cash payment. To make a request, including an advertising opt-out, email umityasincoban@gmail.com; we will handle the request under the law that applies. We do not treat all state laws as automatically applicable or dismiss a request just because this Notice does not list its state.

Türkiye: where Law No. 6698 applies, purposes and recipients are described above. Relevant legal bases include necessary contractual processing, a legal obligation, establishment/exercise/protection of a right, balanced legitimate interests, and explicit consent where needed. You may request information about processing, purposes and recipients; correction, deletion/destruction and notification to recipients where required; object to an adverse result arising solely from automated analysis; and seek compensation for unlawful processing. Apply through the contact above using a legally accepted method. Requests are handled as soon as possible and within 30 days, with complaint rights before the competent authority subject to the applicable procedure.

Other locations: any non-waivable rights provided by your local law remain available. Contact us to exercise them. We may request only information reasonably needed to verify an access or deletion request. We will explain a refusal and any applicable review or complaint route. We do not impose an artificial deadline that overrides a statutory right.

The game calculates scores and rankings automatically. That game calculation is not itself a representation that we make decisions with legal or similarly significant effects about you. You can contact us about an incorrect result or account restriction.

9. Children and safety

Age ratings describe content suitability and do not establish that every child can independently consent to processing or enter a purchase contract. Where local law requires a parent or guardian's authorisation, it is required for the relevant account, purchase or processing activity. Parents or guardians can contact us about a child's information so that we can verify the circumstances and take the action required by applicable law.

We use technical and organisational measures appropriate to the service and the risk. No service can promise absolute security. This does not limit our legal duties concerning security, incidents or your rights.

10. Changes and service closure

The date and version above identify this Notice. We will give an appropriate notice of material changes and seek a separate consent where required for a new consent-based purpose. Publishing this page does not retroactively authorise earlier processing.

If the game or online services are discontinued, we will explain the effect on data, the applicable retention/deletion arrangements and how to make a request. Legal and privacy correspondence can continue through umityasincoban@gmail.com after the game servers close. The Terms explain planned service-discontinuation notices and purchase rights separately.