Cargo Tilt — Privacy Policy
Effective date: 23 September 2026
1. Who we are
Cargo Tilt ("the game") is published by Ege Yıldızlı, Esenlik Sk. No 3-2 D. 6, Uskudar, 34700 Istanbul, Turkiye ("we"). We are the data controller for the processing described here. Contact: [email protected].
2. The short version
- You do not need an account and we never ask for your name, email, phone number, contacts, photos or precise location.
- Your progress is saved on your device.
- The game is supported by ads and optional purchases. Our advertising and analytics partners (Google) receive device identifiers and usage data as described below. Where the law requires it, this happens only with your consent, and you can change your choice at any time.
- The game is not directed to children.
3. What is processed, why, and on what legal basis
| Data | Source | Purpose | Recipient | Legal basis (GDPR / UK GDPR) |
|---|---|---|---|---|
| Advertising identifier (IDFA on iOS — only if you allow tracking; Advertising ID on Android), IP address, approximate location derived from IP, ad interactions | Your device, via Google Mobile Ads SDK | Showing ads, limiting ad frequency, measuring ads, preventing fraud; personalised ads only with consent | Google (AdMob) and its advertising partners | Consent (Art. 6(1)(a)); fraud prevention: legitimate interests (Art. 6(1)(f)) |
| Purchase events (product, price, currency, time) and purchase receipts | Apple App Store / Google Play, and your device | Delivering what you bought, restoring purchases, revenue statistics | Apple / Google (as independent controllers for payment); RevenueCat (our purchase-processing provider) | Performance of a contract (Art. 6(1)(b)); legitimate interests |
| Random player ID (made on your device, not linked to any account, device identifier or name), a 4-digit public tag, the duck you wear, and your daily-puzzle result (solve time, moves, hints, attempts, stars) | Your device, only when you solve the daily puzzle | The daily ranking ("Captain #1234" and a time — no name is ever shown or asked for) | Our ranking server at api.cargotilt.app (Cloudflare) | Legitimate interests (Art. 6(1)(f)) |
| Game progress and settings | Your device | Running the game | Nobody — stays on your device (and in your own device backup, if enabled) | Performance of a contract |
| Messages you send to our support email | You | Answering you | Our email provider | Legitimate interests |
We never receive your payment card details; payments are handled entirely by Apple or Google.
4. Consent and your choices
- EEA, UK and Switzerland: before the first ad, a Google consent form (UMP) asks for your choices. You can reopen it at any time from Settings → Privacy options.
- iOS: Apple's App Tracking Transparency prompt asks whether the game may track you. If you decline, the game works exactly the same; you see non-personalised ads and rewarded ads give the same reward.
- Android: you can reset or delete your Advertising ID in the device settings.
- Delete my data: Settings → Delete my data erases local progress and resets the identifiers used by the game.
- Uninstalling the game removes all locally stored data.
5. Sharing and international transfers
We do not sell personal data. Data is shared only with the service providers and partners listed in section 3 (Google AdMob, RevenueCat, Cloudflare, Apple, Google Play). Google processes data on servers worldwide, including in the United States. Where data leaves the EEA/UK, the transfer relies on the EU–US Data Privacy Framework and/or Standard Contractual Clauses offered by Google. For users in Türkiye, transfers abroad are carried out in accordance with Article 9 of Law No. 6698 (KVKK).
6. Retention
Ad-serving logs are kept according to Google's retention policies; purchase records according to Apple's, Google's and RevenueCat's legal retention duties. Daily-ranking entries are kept for up to 90 days and store no IP address. Support emails are deleted within 24 months of the last message. Local game data stays until you delete it or uninstall the game.
7. Children
Cargo Tilt is a general-audience game. It is not directed to children under 13 (or the higher age of digital consent in your country) and is not part of Apple's Kids category or Google Play's Families programme. We do not knowingly collect personal data from children. If you believe a child has provided data, contact [email protected] and we will have it deleted.
8. Your rights
- EEA / UK (GDPR, UK GDPR): access, rectification, erasure, restriction, portability, objection, withdrawal of consent at any time, and the right to complain to your data-protection authority.
- Türkiye (KVKK Art. 11): to learn whether your data is processed, request information, learn the purpose and recipients (in Türkiye or abroad), request correction, erasure or destruction, object to results arising from automated analysis, and claim compensation for unlawful processing. Applications: [email protected] or Esenlik Sk. No 3-2 D. 6, Uskudar, 34700 Istanbul, Turkiye; we answer within 30 days. [VERBIS REGISTRATION — if required]
- California and other US states: we do not sell personal information for money; sharing for cross-context behavioural advertising can be refused through the choices in section 4.
Because we hold no account for you, we can usually identify your data only by device identifiers. Data deletion request (step by step: https://cargotilt.app/delete-data): email [email protected] with your app-instance ID (shown in Settings → About) and we will request deletion from our providers within 30 days.
9. Security
All network traffic is encrypted in transit. The only server-side data we hold is the daily ranking described in section 3 (random ID, tag, times); it contains no name, email, device identifier or IP address.
10. Changes
We will post changes here and update the effective date. Material changes are also announced in the game's update notes.
11. Contact
Ege Yıldızlı · Esenlik Sk. No 3-2 D. 6, Uskudar, 34700 Istanbul, Turkiye · [email protected] · [EU/UK REPRESENTATIVE — if required]