Last updated: 24 September 2026
This policy explains what information the mobile game AquaCozy ("the App") handles, why, and the choices you have. It applies to the Android version distributed on Google Play.
The App is made by Uğur Gülay, an individual developer based in Türkiye, who is the data controller for the purposes of this policy. Contact: ugurgulay@gmail.com.
| What | Details | Why |
|---|---|---|
| Game data on your device | Your tank, fish, their names, the keeper name you type for photo cards, and your settings. Stored only on your device. | To run the game. |
| Google Play Billing | Purchase records (product, order ID, purchase token). Payment details stay with Google. | To deliver and restore what you buy, and to check that a purchase is genuine. |
| Google Play Games Services (optional) | If you sign in: your Play Games player ID and display name, your achievements, and your leaderboard scores (species found, longest care streak). | Achievements, leaderboards, and your name on photo cards. |
| Google Analytics for Firebase | How the App is used (for example feeding, breeding, tier-ups, store and ad views), an app-instance identifier, device model, OS version, language and approximate location derived from your IP address. | To understand what players enjoy, fix problems and balance the game. |
| Firebase Remote Config | An app-instance identifier. | To adjust game balance without an app update. |
| AquaCozy server (run by us, hosted by OVHcloud in Germany, reached through Cloudflare) | A random install ID and a player ID; your Play Games player ID if you use Play Games; the push token, language, time zone offset, quiet hours and notification choice from Settings; the app version and when the App last contacted the server; purchase records (product, order ID, purchase token, state); rewarded-ad records (which reward, when). Like any web request, your IP address reaches Cloudflare and the server. | To check with Google Play that a purchase is genuine before granting it, to keep your purchases and notifications with you on a new phone, to send the notifications you allow at a sensible local time, and to prevent purchase and reward fraud. |
| Firebase Cloud Messaging | A push token for your install, which the App also gives our server. | To deliver notifications about your tank and the game. |
| Google AdMob and the User Messaging Platform (UMP) | Advertising ID, IP address and approximate location, device information, ad interactions, and your consent choices. When you finish a rewarded ad, our player ID travels with it so that our server can check the reward. | To show the rewarded ads you choose to watch, measure them, and record your consent. |
| Radio catalog and songs (GitHub Pages) | No identifiers. Like any web request, fetching the radio's catalog, and the songs while you listen to Reef FM, sends your IP address and device type to GitHub, Inc., which hosts them. | To add music and radio stations without an app update. Songs are kept on your device and deleted when space runs short. |
The App does not access your contacts, photos, microphone, camera or precise location.
Reminders about your tank are scheduled on your device and can be turned off in the App's Settings or in Android's settings. If you allow notifications, our server may also send a note: game news at most once a day, or, after a week away, a short reminder once a week for up to four weeks. It never sends during the quiet hours you set, and turning notifications off stops these too. A photo you take in photo mode stays on your device unless you share it; sharing opens Android's share sheet, and what happens next is up to the app you share to.
We handle data to provide the game and the purchases you request (performance of a contract), to keep the App working and secure and to improve it (legitimate interests), and, where the law requires it, on the basis of your consent (personalised ads and analytics identifiers). Under Türkiye's Personal Data Protection Law No. 6698 (KVKK) the same purposes apply; see the Turkish version for the full notice.
We do not sell or rent your data. The services above are provided by Google LLC and its affiliates, which may process data in countries other than yours, including the United States, under their own safeguards. Their policies: Google Privacy Policy, Firebase privacy, AdMob and partners. Our server is hosted by OVHcloud in Germany and reached through Cloudflare, Inc., which may handle your IP address in other countries; both act only on our behalf (OVHcloud, Cloudflare).
Game data stays on your device until you delete it or uninstall the App. Analytics event data is kept for up to 14 months. Other Google services keep data according to their own policies.
On our server, a player's record is deleted when you use Delete my data, or two years after the App last contacted the server. Google Play's purchase notifications and rewarded-ad records are deleted after 90 days. Purchase records are kept as long as they are needed to restore purchases, handle refunds and meet legal obligations. The server's request log (addresses and paths) is limited in size and overwritten as it fills; it is used only to run and protect the server.
Depending on where you live (for example under the GDPR or KVKK), you may ask to access, correct or delete data about you, object to or restrict its use, or withdraw consent. Most choices are in the App itself (section 5). For anything else, email ugurgulay@gmail.com; we will reply within 30 days. You may also complain to your data protection authority (in Türkiye, the KVKK Board).
AquaCozy is made for players aged 16 and over and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has used the App, contact us and we will help remove any related data.
Game data on the device is stored in the App's private storage. Communication with Google's services and with our server uses encrypted connections (HTTPS). Only the developer has administrative access to the server.
If the App starts handling data in a new way (for example a cloud save), this policy will be updated before that version is released, and the date above will change.
Uğur Gülay — ugurgulay@gmail.com