1. Purpose and Scope

This policy explains how the personal data of Kanveay users is processed under Turkish Personal Data Protection Law no. 6698 (KVKK).

2. Data Collected

Username, e-mail, hashed password, IP/session information, game progress and purchase records.

3. Use of Data

Data is used for account management, service provision, security, payment transactions, support and legal obligations. Your data is not sold to third parties for marketing purposes.

4. Cookies

A strictly necessary session cookie (PHPSESSID) is used to keep the session alive. It serves no advertising or tracking purpose.

5. Data Security

• Passwords are stored irreversibly (hashed).
• CSRF protection, secure cookie settings and security headers are applied.
• Payment details are not stored on the Site; purchases are handled by Google Play.

6. Retention Period

Data is retained for as long as your membership continues and for the statutory retention periods; at the end of that period it is deleted or anonymised. You may request the deletion of your account.

7. Your Rights (KVKK art. 11)

• To learn whether your personal data is being processed and to request information,
• To request correction if they have been processed incompletely or incorrectly,
• To request their erasure or destruction when the conditions are met,
• To object to the processing and to claim compensation for damages.

Applications: iletisim@kanveay.com. Requests are concluded within 30 days at the latest.