Tarihle Privacy Policy

What stays on your device

Your game history, streak, and settings are stored on your phone. In the web version, game and sign-in information is held in your browser's local storage; we do not use cookies for these records. A security cookie used by the web infrastructure is explained separately below.

What is sent to our server

The game uses our own server running on Supabase infrastructure; the current project is in the Frankfurt region. Game data includes:

• Account ID: A random user ID is created automatically, even when you start as a guest. It does not contain your name or phone number. Because it links account, game, and entitlement records, it is not considered completely anonymous data.
• Daily game and Rank: The content version for the day you played, your raw guesses, attempt start, stage scores, and completion time. The server processes guesses to validate the daily result. Your streak, overall total, trophy changes, and correction records are calculated from these results. Your earlier personal score history is preserved; an offline result is not considered verified for competition.
• Duels: The invitation code, both players' account IDs, selected questions, answers, server timings, round status, and match result. These are processed to manage the invitation, validate timing and results, and display win/draw/loss history. There is no chat or free-form messaging field. Duels do not add to daily competitive scores.
• Category practice and lives: The set you started, your answers, set progress, and life-refill times. Category results do not add to daily scores, leagues, or streaks.
• Your username and teams: The username you choose for your account/rankings and, if you use teams, team information, including the names of teams you create or join.
• Your email address: Only if you add it through “Save your progress.” It is used to send sign-in codes; we do not send marketing emails.

We send sign-in-code emails through Resend. Your email address and the verification message are sent to Resend for delivery. Details: Resend privacy policy.

Web infrastructure and visit measurement

The website is served through Cloudflare. Cloudflare processes IP addresses and request information to provide a secure connection, serve the site, and prevent abuse. Cloudflare's security script for automated requests may store its check result in the cf_clearance security cookie. This cookie is not intended to determine game scores or build an advertising profile. Details: Cloudflare JavaScript Detections. We use Cloudflare Web Analytics to measure page visits and loading performance in aggregate; this measurement does not use cookies or local storage to identify visitors. It is separate from the optional, device-only pilot game counter in Settings. Details: Cloudflare Web Analytics and Cloudflare privacy policy.

Support messages

If you write to destek@tarihle.com, your email address, message, and attachments are used to respond to your request. Incoming messages are forwarded through Cloudflare Email Routing to the Gmail inbox used for support. Details: Cloudflare privacy policy and Google privacy policy. Do not include passwords or verification codes in your message.

Anonymous usage statistics

To improve the game, Anonymous usage statistics in Settings is on by default in the iOS app and can be turned off at any time. On the web, nothing is recorded or sent until you choose Allow in the box at the bottom of the screen. If you choose No, you will not be asked again; you can enable it later in Settings. The app sends events for first launch, session start, game/stage/day completion, sharing, practice start/completion, and joining a team to our server with a device-specific random ID. Event data includes the event name, stage number, calendar day, platform, and app version. This ID is not linked to your account, email, answers, scores, or location, and is not sent to a third-party analytics service. Turning this setting off deletes queued events and stops new events from being recorded.

Safety reports and blocks

If you report a user or team in a ranking or team table, we record your account ID, the target user/team ID, the report reason, the target name as it appeared when reported, and the time. Reports have no free-text or email field. We process them to review inappropriate names and abuse. Only the service's authorized operator can access the report queue; other players and the reported person cannot see report records.

If you block a player, the blocking and blocked account IDs and the time are recorded. A block affects visibility in your social tables and acceptance of new duels with that player; it does not delete another person's score or membership. You can unblock someone under Blocked players and support. Blocks are kept until removed or the relevant account is deleted. The target maximum retention period for report records is 90 days; when the daily server cleanup that enforces this period is enabled, expired records are deleted at the next cleanup. Deleting the reporting or reported account also deletes the associated report; deleting a team deletes its team report.

Optional pilot counter

The Pilot game counter in Settings is off by default. If enabled, counts of game starts, stage/day completions, shares, practice starts/completions, and team joins are stored by calendar day on this device only. Counter records for up to 90 distinct days are kept; there is no time-based automatic deletion for days when you do not use it. The counter does not contain email addresses, account IDs, answers, scores, locations, or invitation codes, and is not automatically sent to a server. Export counters lets you download a file and share it yourself if you wish. Turning the counter off deletes accumulated counter records. Your game history is unaffected.

Advertising in the iOS app

To help keep Tarihle free, a small banner may appear at the bottom of the iOS home screen. Full-screen ads do not appear automatically while answering questions or on the daily result screen. No banner is shown during the first three device days; Tarihle+ and “Remove Ads” entitlements remove the banner. Optional rewarded ads may also provide +1 category life, an archive day, or streak protection. Ads do not increase daily league scores.

Ads are served by Google AdMob. To display ads, prevent fraudulent clicks, and measure ad performance, Google may process your device's advertising identifier (IDFA, only with your permission), IP address, approximate location inferred from IP, device and app information, ad interactions, and the SDK's crash/performance diagnostics. We do not request GPS or precise-location permission. If you decline Apple's request to allow tracking, IDFA access is not granted and the app requests non-personalized ads. Google's region-appropriate consent form is shown when required; if that process does not permit ad requests, ads are not loaded. You can change your choice through Ad privacy options in Settings and iOS Settings › Privacy › Tracking. Details: Google privacy policy and AdMob SDK data disclosure.

When you watch a rewarded ad to the end, Google sends our server the anonymous user ID, reward type, relevant day, and ad transaction ID to validate the reward. For a category-life reward, a random ID is also used to match the request. The life is granted after Google's signed notification is verified on the server.

The web version currently has no ads.

Purchases

Tarihle+ (a one-time purchase) and small purchases are made through Apple; we do not receive your payment or card details. We use RevenueCat to manage purchase records: your anonymous user ID and purchase information (product, date, refund status) are sent to RevenueCat. These records let us manage use of verified entitlements on the web and a new phone with the same Tarihle account; restoration depends on store and account verification. Store sandbox transactions are processed as separate test entitlements only for previously authorized test accounts; they do not count as payment evidence for real purchases or other accounts. Details: RevenueCat privacy policy.

What we do not use

We have not installed a separate game analytics or crash-reporting tool; the advertising SDK's diagnostics described above are separate. We do not access GPS location, contacts, or your photo library. We do not sell your data.

Notifications

The streak reminder is a local notification scheduled on your phone; no information is sent to a server for this. Notification permission is requested only if you want reminders: when you say yes to the “Remind me tomorrow?” card after finishing a day, or enable reminders in Settings.

Who can see what

Your username and weekly score are visible to team members. If you have registered an email account and chosen a username, your username and league score are also visible to other players in the public daily rankings; your email address is not shown. Your daily trophies, placement status, and verified overall total are also visible in player rankings. In a duel, your opponent can see your username; after both rounds close, the questions, choices, and match result are revealed only to the participants. An eligible player who knows an invitation code can join a valid invitation; you choose whether to share the code publicly. When you share a result, the text or web image card includes colored results, your game score, and streak, without answers or account information. Sharing a team invitation shares that team's name and join code.

Retention and deletion

Account and daily game data are retained until you delete your account. When server cleanup is enabled, the maximum retention period for duel matches and answers is 90 days; the win/draw/loss summary is calculated from retained matches. Deleting your account also deletes the duels you participated in, removing those matches from your opponents' history. To avoid leaving other players' daily trophy calculations incorrect, the deleted account's contribution is withdrawn; trophy records linked to your account ID are deleted, and the remaining day's aggregate calculation/correction record does not contain your personal ID. The pilot counter, blocks, and reports follow the separate retention rules above. Delete my account and data in Settings deletes your account, scores, reward and purchase-entitlement records, and team memberships from Tarihle's server; it also removes that account's progress on the device. It does not delete another account's device records. Payment/transaction records held by providers such as Apple or RevenueCat remain subject to their own retention and legal obligations. Server deletion does not mean independent backups or third-party records are deleted at the same time; you can contact support about those records. Tarihle+ and other purchases remain linked to your Apple account; you can unlock them on a new account with “Restore purchases.” Teams you created remain for other members but are no longer linked to you.

If you cannot access the app, you can also send a deletion request to destek@tarihle.com.

Collection methods, your rights, and requests

Data is obtained through actions in the app and web interface and electronic processes such as account creation/sign-in, game synchronization, ad validation, and purchase notifications. Information you send to support is received by email. Account/game services, safety reports, payment-entitlement verification, and optional advertising permissions serve different purposes; giving advertising permission is not blanket permission for all other data processing or transfers abroad.

Under Article 11 of Law No. 6698, you have the right to learn whether your data is processed and how it is used, learn the processing purpose and recipients, correct inaccurate or incomplete records, request deletion/destruction when the conditions are met, and request that recipients be notified of those actions. You may object to a result against you arising solely from automated assessment and seek compensation for damage caused by unlawful processing. Details: KVKK data-subject rights.

Send your request and the account it concerns to destek@tarihle.com. Do not send sign-in codes, passwords, or unnecessary copies of identity documents. We will explain the identity verification needed to avoid disclosing another person's data and the legally applicable request procedure. We do not claim this support address replaces every formal application method. KVKK right to apply and responding to applications explain application methods and the obligation to resolve properly submitted requests within thirty days at the latest.

The service providers above may process data abroad. The transfer purposes and data involved are described in the relevant sections. Linking to providers' privacy policies does not mean the legal mechanism or agreement required for a transfer has been completed. You can ask support about the actual mechanism to be used and the legal grounds for processing under the KVKK explanation of transfers abroad.

Changes

If we change this policy, the updated version will be published on this page with a new date.

Contact

For questions and suggestions, see the help page.

Email: destek@tarihle.com