Effective date: 25 October 2026 · Version: 1.0 · Türkçe
This policy explains what data Saniye Yıldız, trading as Brimm Interactive ("Brimm Interactive", "we") collects when you play the Roshamball mobile game (the "Game"), why, who we share it with, and your rights. Players in Turkey should also read the KVKK Disclosure Notice (Turkish), which forms part of this policy. If the Turkish and English versions differ, the Turkish version prevails for players in Turkey.
In short:
If you play as a guest, nothing is sent to our servers.
When you sign in, we keep only what is needed to run your account and online play.
We do not sell your data. Ads are served by Google AdMob and are personalised only if you allow it.
You can delete your account inside the Game; it is permanently deleted after 30 days.
Account data: when you sign in with Apple, Google or email, your email address (Apple's relay address if you choose "Hide My Email"). Google also shares your name and profile-picture link; these stay in the authentication record only and are never shown in the Game.
Nickname and appearance: the nickname, avatar, kit and other cosmetics you choose.
Support messages: the content of any email you send us and your address.
Gameplay data: your matches and the cards you played, scores, rating/ELO, league, season statistics, leaderboard position, matchmaking-queue records, daily-login rewards.
Economy data: balances and history of in-game currencies (Gold and premium currency), and your inventory.
Purchases: records of App Store / Google Play purchases (platform, product, store transaction ID, store receipt). We never receive your card details; Apple or Google processes the payment.
Technical data: your user ID, linked sign-in methods, last sign-in time, and your IP address in our hosting provider's server logs.
Notifications: if you allow notifications, a push token, device platform, language, time zone and your notification setting. We use the time zone to avoid sending notifications at night.
Advertising: the Google AdMob SDK collects your advertising ID (iOS IDFA — only with your permission — or the Android Advertising ID), device and app information, your IP address (and approximate location derived from it), ad interactions and diagnostics, to serve and measure ads. See Google's How Google uses information from sites or apps that use our services.
Local settings: preferences such as language, sound and vibration, and guest progress, are stored only on your device.
We do not collect: precise (GPS) location, contacts, photos, microphone or health data. The Game contains no analytics or crash-reporting SDK, and no chat or messaging.
Creating your account, verifying sign-in, linking sign-in methods
Legal basis: Contract
Running online matches on our server, computing results, matchmaking, leagues, seasons, leaderboard
Legal basis: Contract
Showing your nickname, league and rating to opponents and on the leaderboard
Legal basis: Contract
Managing rewards, purchases and inventory; verifying receipts
Legal basis: Contract
Keeping purchase records as required by tax law
Legal basis: Legal obligation
Preventing cheating, bots, match-fixing and fraud; security and debugging
Legal basis: Legitimate interests
Match, season and reward notifications
Legal basis: Contract + your device permission (can be turned off in Settings)
Personalised advertising
Legal basis: Your consent (iOS ATT; Google's UMP form in the EEA/UK)
Non-personalised ads and rewarded-ad rewards
Legal basis: Legitimate interests / contract
The game server, matchmaking and rankings are automated. Cheat detection may start from automated signals; you can appeal any sanction on your account by writing to us, and appeals are reviewed by a person.
We do not sell your data or give it to third parties for their own marketing. We share it only with the service providers below, and only as needed to provide the service:
Supabase, Inc.
Purpose: Database, authentication, game server
Location: Germany (Frankfurt, EU; AWS)
Privacy policy: supabase.com/privacy
Google (Firebase Cloud Messaging, Google Sign-In, Google Play)
Purpose: Notifications, sign-in, payments
Location: US / EU
Privacy policy: policies.google.com/privacy
Google AdMob
Purpose: Serving and measuring ads, verifying rewarded ads
Location: US / EU
Privacy policy: policies.google.com/privacy
Apple (Sign in with Apple, APNs, App Store)
Purpose: Sign-in, notifications, payments
Location: US / Ireland
Privacy policy: apple.com/legal/privacy
Resend, Inc.
Purpose: Account-verification emails (only while email sign-in is enabled)
Location: US
Privacy policy: resend.com/legal/privacy-policy
Other players can see your nickname, cosmetics, league, rating and season statistics. We may disclose data where legally required. If Brimm Interactive is involved in a merger or acquisition, data may pass to the acquirer under the protections of this policy; we will tell you beforehand.
International transfers: our providers' servers are outside Turkey. Transfers are protected by the standard contracts under Article 9 of the KVKK and, for EEA players, the EU Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
iOS: Apple's tracking permission is requested right before your first rewarded ad. If you decline, your advertising ID is not shared. Change it any time under Settings → Privacy & Security → Tracking.
EEA, UK: Google's consent form is shown; change your choice any time under Settings → Ad privacy settings in the Game.
Android: delete or reset your advertising ID under Settings → Google → Ads.
Declining never disables a game feature; ads are simply shown without personalisation.
Account, profile, push tokens
Retention: While your account is open; permanently deleted 30 days after a deletion request
Match records
Retention: Anonymised when the account is deleted (so your opponent's history stays intact)
Purchase and currency records
Retention: As long as tax law requires (generally 5 years), detached from your identity
Server logs (incl. IP)
Retention: For the hosting provider's short log-retention period
Support emails
Retention: Up to 2 years after your request is closed
Guest data
Retention: On your device only; removed when you delete the app
In the Game: Settings → Delete account. Your account is closed immediately, you are signed out on every device, and it is permanently deleted after 30 days. Signing in again within those 30 days cancels the deletion.
Without the app: follow the steps on the Support page.
Deleted: your account, profile, nickname, inventory, balances and push tokens. If you signed in with Apple, we revoke the Game's access with Apple.
Kept: anonymised match records and purchase records detached from your identity (section 5).
Deletion cannot be undone after 30 days, and purchased in-game currency and items are not refunded.
Depending on where you live, you have the right to access, correct, delete and port your data, to object to or restrict its processing, and to withdraw consent. Rights and the application procedure for players in Turkey are set out in the KVKK Disclosure Notice. Email your request from your registered address to support@brimminteractive.com; we answer within 30 days.
EEA and UK: you may exercise your GDPR / UK GDPR rights and complain to your local data protection authority.
California (CCPA/CPRA): we do not sell personal information. However, AdMob's personalised ads may count as "sharing" for cross-context behavioural advertising. To opt out of the sale or sharing of your personal information ("Do Not Sell or Share My Personal Information"): decline tracking on iOS, delete your advertising ID on Android, or email support@brimminteractive.com with the subject "Do Not Sell or Share". We will not discriminate against you for exercising your rights.
All connections are encrypted with TLS (HTTPS). Match results are computed only on the server; the database is protected by row-level access rules so each player can read only their own private data, and balances and rankings are written only by the server. Your opponent's hand is never sent to you, and yours is never sent to them. No system is perfectly secure; if a breach occurs we will notify you and the relevant authority within the legal deadlines.
The Game is intended for players aged 13 and over and is not directed at children. We do not knowingly collect data from children under 13 and will delete such an account if we become aware of it. If you are under 18, use the Game — especially purchases — with your parent's or guardian's permission.
We may update this policy. We will announce material changes in the Game or in the store release notes; the effective date is shown at the top.
Saniye Yıldız (Brimm Interactive) · Zuhuratbaba Mahallesi, Demirkapı Caddesi, Mermer Apartmanı No: 9 Daire: 10, Bakırköy / İstanbul, Türkiye · support@brimminteractive.com