Privacy policy

In short

• We use the minimum information needed to run Modfun. We don't sell your data.
• Room and game records are deleted when the game ends; none of them are left after 24 hours at the latest.
• You can play as a guest without an account. Guest data is deleted automatically if you don't sign in for 90 days.
• You can delete your account from inside the app at any time.
• We don't use your location, contacts, photos, camera or microphone.

This policy is the information we must give you under Article 13 of the EU General Data Protection Regulation (GDPR) and the UK GDPR. It is also the privacy notice (aydınlatma metni) required by Turkey's Law No. 6698 on the Protection of Personal Data (KVKK).

Data controller

The data controller for Modfun is the app's developer, Oğuzhan Balaban (Turkey). For any privacy question or request, write to info@modfunapp.com.

What information we use

• Sign-in: If you play as a guest, we only create a random user ID. If you create an account with Apple, Google or email, we store your email address and the name your sign-in provider shares with us. We can't see your password; Firebase stores it in encrypted form.
• Rooms and games: Your nickname, the avatar you pick, the room you join, your role in the game, your votes, your score and whether your phone is connected to the room. Other players in the room see your nickname and score; only you see your role and other secret information.
• History (accounts only): A summary of your last 30 games (game, date, players and their roles, winner, your score), your game night totals and your stats. Guests don't have a permanent history.
• Plays and subscription: Your weekly plays and your subscription status (whether it's active and when it ends). We never see your card details; Apple or Google takes the payment.
• Device and usage: App version, device model, operating system and language; a crash report if the app crashes; measurements of which screens and games are used; a notification ID if you allowed notifications; and device verification that confirms requests really come from the Modfun app (Firebase App Check).
• Ads (free version): Your advertising ID, IP address and device information are processed by our ad partner, Google AdMob (more on this below).
• If you write to us: Your email address and your message.

To prevent abuse, we count wrong room code attempts. For this, we briefly use only an irreversible summary (hash) of your IP address; we don't store your IP address.

Modfun has no chat, voice calls or photo sharing; the games are played face to face, in the same room.

Why we use it, and our legal basis

• Running the game, creating rooms, keeping your account and history: entering into and performing our contract with you (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)).
• Preventing cheating and abuse, security, crash reports: our legitimate interests (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)). These are needed for the app to work properly and safely.
• Usage measurements (which games are played and how much): our legitimate interests; in the European Union, the United Kingdom and Switzerland, only with your consent.
• Subscription and purchase records: our legal obligations (GDPR Art. 6(1)(c), KVKK Art. 5(2)(ç)), for example tax records.
• Personalized ads and promotional notifications: your consent (GDPR Art. 6(1)(a), KVKK Art. 5(1)). You can withdraw your consent at any time; this doesn't affect anything done before you withdrew it.

We don't use your data to make automated decisions that have legal or similarly significant effects on you, and we don't build profiles of you (except for our ad partner's personalized ads, if you've agreed to them).

Ads

In the free version, we show ads through Google AdMob. Ads only appear on the home screen and in the lobby; there are never any ads during a game. Subscribers see no ads, and anyone who joins a room created by a subscriber doesn't see ads in that room either.

In the European Economic Area, the United Kingdom and Switzerland, we ask for your consent the first time you open the app, using Google's certified consent window. On iPhone, Apple's tracking permission is also requested. If you say no, you'll still see ads, but they won't be personalized. You can change your choice on iPhone in Settings > Privacy & Security > Tracking, and in the app in Profile > Privacy settings.

Purchases

Subscriptions are bought through the App Store or Google Play, and they take the payment. We use the RevenueCat service to check that your subscription is valid. For this, your user ID and your purchase record (product, date, store) are shared with RevenueCat.

Services we use and international transfers

We share your data only with these providers, and only to provide the service:

• Google Firebase (Google Ireland Ltd. and Google LLC): sign-in (Authentication), database (Cloud Firestore), server (Cloud Functions), crash reports (Crashlytics), usage measurements (Google Analytics for Firebase), notifications (Cloud Messaging) and device verification (App Check). Our database and servers run in the European Union (Belgium); some Firebase services may also process data in the US.
• Google AdMob (Google Ireland Ltd. and Google LLC): ads in the free version.
• RevenueCat, Inc. (US): subscription verification.
• Apple and Google: sign-in, if you sign in with them; payment, if you make a purchase. Their own privacy policies apply to these.
• Zoho Corporation (servers in the EU): emails you send us.

Some of these providers are outside Turkey, the European Union and the United Kingdom. Under the GDPR, transfers outside the EU rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses; for the UK, on the UK Extension to that framework or the UK Addendum to those clauses. Transfers from Turkey comply with KVKK Art. 9 (standard contracts).

We don't sell or rent your data, and we don't share it with data brokers. If the law requires it, we may share it with the relevant authorities.

How long we keep it

• Room and game records (roles, votes, scores): deleted within 1 hour after the game ends. A room closes if it's inactive for 1 hour. In every case, they're deleted within 24 hours at the latest.
• Guest account: if you never created an account, everything is deleted if you don't open the app for 90 days.
• Account, history (last 30 games) and stats: until you delete your account.
• Crash reports: 90 days.
• Usage measurements: up to 14 months.
• Subscription and purchase records: as long as the law requires (up to 10 years under tax law).
• Email conversations: up to 2 years after your request has been resolved.

After you delete your account, players with accounts who played with you will still see your nickname from that game in their own history. Those records are their history and aren't linked to your account.

Your rights

Under Articles 15–22 of the GDPR and the UK GDPR, and Article 11 of the KVKK, you have the right to:

• find out whether we process your data and ask for a copy of it,
• ask us to correct it if it's wrong, or delete it if it's no longer needed,
• ask us to restrict processing, and object to processing based on our legitimate interests,
• receive your data in a portable format,
• withdraw your consent at any time,
• find out who your data has been shared with, and ask for compensation if you've suffered harm.

To delete your account: go to Profile > Delete my account in the app. If you can't get into the app, follow the steps on the account deletion page.

For other requests, write to info@modfunapp.com, ideally from the email address linked to your account. We'll reply within 30 days at the latest.

Your right to complain: you can complain to the data protection authority in your country (in the UK, the ICO). In Turkey, you can apply to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

Children

Modfun is made for people aged 13 and over. We don't knowingly collect data from children under 13. If you find out a child is using Modfun, write to info@modfunapp.com and we'll delete their data.

For personalized ads and promotional notifications, if you're under the age of digital consent in your country (for example, 16 in Germany), a parent must give this consent. Without it, ads are shown without personalization.

Security

All connections between the app and the server are encrypted. Phones can't change the game record; only the server writes scores, votes and roles. No other player can read your role or your secret information.

Changes

When we update this policy, we change the date at the top. If there's an important change, we'll also let you know in the app.

Contact

Oğuzhan Balaban · info@modfunapp.com · modfunapp.com