Privacy Policy

Introduction and Scope

This Privacy Policy explains how personal data is processed when you visit tastybitsstudio.com (the "Website") or play games published by Tasty Bits Studio on Steam, Google Play or other platforms (the "Games").

The data controller is Tasty Bits Studio, operated by Muhammet Yasin Yıldız (Türkiye). You can reach us at info@tastybitsstudio.com.

Data We Collect on the Website

• Newsletter: if you subscribe, we store your email address, preferred language, the date and time of your consent, the version of the policy you accepted and a hashed (non-reversible) form of your IP address used to prevent abuse.
• Visit statistics: an anonymised visitor identifier derived from your IP address, your approximate location (country, region and city) as provided by our hosting provider, the page visited, a shortened browser identifier (user agent), browser language and screen resolution. We do not store your full IP address.
• Messages: the content of emails you send to us and your email address.

Data We Collect in Our Games

• Analytics: our Games may use analytics services such as Unity Analytics or Google Firebase. These services may collect gameplay events, device information (such as device model and operating system version), game version, crash reports and an analytics identifier. This data is used to fix errors and improve the Games and is not used to identify you personally.
• In-app purchases: purchases are processed by the relevant platform (for example Google Play, Apple App Store or Steam). We do not receive your payment card details. We only receive confirmation of the transaction in order to deliver the purchased item.
• Steam: when you play through Steam, Valve Corporation processes your account data under its own privacy policy. We may receive your Steam ID and achievement or statistics data that are necessary for game features.
• Advertising: our Games do not currently display third-party advertising. If this changes, this policy will be updated before the relevant release.

If a specific Game collects data beyond what is described in this section, that Game will be listed here together with the additional data.

Purposes and Legal Bases

We process personal data to send the newsletter you requested (your consent), to operate, secure and measure the use of the Website (our legitimate interest), to deliver in-app purchases (performance of a contract), to fix errors and improve the Games (our legitimate interest or, where required by law, your consent) and to comply with legal obligations.

Service Providers and International Transfers

We use the following service providers to operate the Website and Games: Netlify (hosting), Neon (database), Resend (email delivery), Cloudflare Turnstile (bot protection on forms), analytics providers such as Unity Technologies or Google, and the platforms through which our Games are distributed (such as Valve, Google and Apple). Some of these providers process data outside Türkiye and the European Economic Area. In such cases, data is transferred on the basis of appropriate safeguards required by applicable law, such as standard contractual clauses.

Retention

• Newsletter data is kept until you unsubscribe. You can unsubscribe at any time using the link in every email.
• Visit statistics are kept for a maximum of 24 months.
• Game analytics data is kept in accordance with the retention settings of the relevant analytics provider.
• Emails you send us are kept as long as necessary to handle your request.

Cookies and Local Storage

The Website does not use advertising or tracking cookies. It uses your browser's local storage to remember your language preference, your progress in the mini-game on the home page and, for authorised staff only, the administration session. You can clear this data at any time through your browser settings.

Children

The Website and Games are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe that a child has provided us with personal data, please contact us and we will delete it.

Your Rights

Under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR), you have the right to request information about whether your personal data is processed, to access, correct or delete your data, to restrict or object to processing, to data portability and to withdraw your consent at any time. You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority or with the data protection authority in your country.

To exercise your rights, email info@tastybitsstudio.com. We will respond within 30 days at the latest.

Security

We take appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), hashing of IP addresses and restricted access to administration tools. No method of transmission over the internet is completely secure, but we work to protect your data in line with industry practice.

Changes to This Policy

We may update this Privacy Policy from time to time. The date of the latest update is shown at the top of this page. Significant changes will be announced on the Website or, where appropriate, by email.