Privacy Policy

We make a game, not a data business. There is no account or login, your progress stays on your phone, and we only use a small set of trusted services to keep the game running, show optional rewarded ads and measure our own marketing.

Summary

We do not sell your personal information for money, we never see your payment card, and we do not collect your name, e-mail, contacts, photos or precise location through the game.

1. Who we are

E-commerce Billionaire is developed and published by Emre Karaduman, an individual developer based in Türkiye (“we”, “us”). We are the data controller (veri sorumlusu under Turkish Law No. 6698 on the Protection of Personal Data, “KVKK”) for the personal data described here. Contact: emreqaraduman@hotmail.com.

This policy applies to the E-commerce Billionaire mobile app and this website. The website itself uses no analytics, advertising cookies or trackers; it only loads the Nunito font from Google Fonts, which receives your IP address to deliver the font file.

2. What we collect and why

a) Game progress — stays on your device

Your money, products, upgrades, settings and the store name you type are saved locally on your device. We have no account system and we do not receive this data. It may be included in your own iCloud/device backups under Apple’s terms. Uninstalling the app deletes it.

b) Analytics — Google Firebase Analytics

We collect usage data to learn which parts of the game are fun, confusing or too hard: an app-instance ID, device model, OS version, app version, language, country/region (derived from your IP address, which Google does not store as such), session start and length, and in-game events such as tutorial steps, level milestones, ads watched and purchases made. We do not send your store name or any free-text content.

c) Crash reports — Firebase Crashlytics

If the app crashes, we receive a crash trace, device model, OS version, free memory/disk, orientation and a Crashlytics installation ID, so we can fix the bug.

d) Remote Config and push notifications — Firebase Remote Config & Firebase Cloud Messaging

Remote Config uses a Firebase installation ID to deliver game settings (for example event timings or balance values). If you allow notifications, Cloud Messaging stores a push token so we can remind you, for example, that your offline earnings or daily reward are ready. Notifications are optional: you can turn them off at any time in iOS Settings → Notifications → E-Billionaire (or in the game’s settings).

e) Rewarded ads — Google AdMob

The game only shows rewarded ads that you choose to watch in exchange for an in-game bonus; there are no forced or interstitial ads. To serve and measure these ads, AdMob may process: the advertising identifier (IDFA) only if you allow tracking in Apple’s App Tracking Transparency (ATT) prompt; the identifier for vendors (IDFV); your IP address and the coarse location derived from it; device and app information; and your interactions with ads (views, clicks, rewards). In the EEA, the UK, Switzerland and Türkiye we ask for your consent through Google’s User Messaging Platform (UMP) before personalised ads are shown; if you decline, you can still watch non-personalised ads, which Google uses limited data for (e.g. frequency capping, fraud prevention and aggregated reporting).

f) Marketing measurement — Meta (Facebook) SDK

We use the Meta SDK to learn which of our own ad campaigns lead to installs, and to measure app events such as app launches and purchases. The SDK may process the IDFA (only with your ATT permission), IDFV, device and app information, IP address and those app events. We do not use Facebook Login and we do not send your name or contact details to Meta. Where consent is required (EEA, UK, Switzerland, Türkiye), the Meta SDK is only activated after you consent.

g) In-app purchases — Apple and RevenueCat

Purchases are processed by Apple through your Apple ID; we never see your card or billing details. We use RevenueCat to validate purchases and restore them on your devices. RevenueCat receives the App Store receipt and transaction data (product, price, currency, store country, purchase/transaction IDs and dates), a random anonymous app user ID and basic device/app information.

h) Support e-mails

If you write to us, we receive your e-mail address and whatever you include in the message, and use it only to answer you.

3. Legal bases (GDPR / UK GDPR / KVKK)

• Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)): running the game, Remote Config, delivering and restoring purchases, rewarding you for ads you choose to watch.
• Legitimate interests (Art. 6(1)(f); KVKK Art. 5(2)(f)): crash reporting, security, fraud prevention and basic analytics to improve the game. Where local law (e.g. ePrivacy rules) requires consent for storing or reading information on your device, we ask for it first.
• Consent (Art. 6(1)(a); KVKK açık rıza): personalised ads, cross-app tracking via the IDFA, Meta campaign measurement and push notifications. You can withdraw consent at any time without affecting earlier processing.
• Legal obligation (Art. 6(1)(c); KVKK Art. 5(2)(ç)): keeping purchase records where tax or accounting law requires.

4. Ads, tracking and consent

On first launch you may see (1) a consent form from Google’s UMP (in regions where it is required) and (2) Apple’s ATT prompt asking whether the app may track you across apps and websites owned by other companies. If you choose “Ask App Not to Track”, neither AdMob nor Meta receives your IDFA, and ads you watch are not personalised based on your activity in other apps.

You can change your choices at any time: in-game Settings → Privacy settings (reopens the consent form and the analytics/crash-report switches), or iOS Settings → Privacy & Security → Tracking.

5. Who we share data with

We share data only with the service providers below, who act as our processors or, for some advertising and measurement purposes, as independent controllers under their own privacy policies:

• Google (Firebase Analytics, Crashlytics, Remote Config, Cloud Messaging; AdMob; UMP): Firebase privacy, Google Privacy Policy, how Google uses data from apps that use its services
• Meta Platforms: Meta Privacy Policy
• RevenueCat: RevenueCat Privacy Policy
• Apple (App Store, payments, ATT): Apple Privacy Policy

We may also disclose data if required by law, to protect our rights or users’ safety, or as part of a transfer of the game to a new owner (who would remain bound by this policy).

6. International transfers

Our providers process data in the United States and other countries whose laws may differ from yours. Transfers from the EEA/UK rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum) or the EU–US Data Privacy Framework where the provider is certified. Transfers from Türkiye are made under Article 9 of KVKK, using standard contracts notified to the Personal Data Protection Authority or, where applicable, your explicit consent.

7. How long we keep data

• Game progress: on your device until you uninstall or reset the game.
• Firebase Analytics: user-level data up to 14 months, then only aggregated reports.
• Crashlytics: crash reports for 90 days.
• Push tokens / installation IDs: until they expire or you uninstall (unused tokens expire automatically).
• Ad and measurement data: as described in Google’s and Meta’s policies.
• Purchase records (RevenueCat): as long as needed to provide and restore purchases, and as required by tax law.
• Support e-mails: up to 2 years after the conversation ends.

8. Your rights and choices

Depending on where you live (GDPR, UK GDPR, KVKK Art. 11, US state laws), you have the right to access, correct, delete or port your data, to object to or restrict processing, to withdraw consent, and to complain to a data-protection authority (in Türkiye: the Kişisel Verileri Koruma Kurumu; in the EU: your local authority).

How to use them:

• In the game: Settings → Privacy settings — change ad consent, turn off analytics and crash reports.
• iOS: Settings → Privacy & Security → Tracking (IDFA), Settings → Notifications (push).
• Delete everything on your device: uninstall the app.
• Access or delete data held by our providers: see Delete my data or e-mail emreqaraduman@hotmail.com. Because there is no account, please include the Player ID shown in Settings → Privacy settings so we can find your data. We answer within 30 days.

9. US state privacy (CCPA/CPRA and similar laws)

In the last 12 months we collected these categories: identifiers (device/advertising IDs, IP address), internet or other electronic activity (in-game events, ad interactions), coarse geolocation, commercial information (purchase history) and inferences made by ad partners. We do not sell personal information for money. Sharing device identifiers with ad partners for personalised (cross-context behavioural) advertising may count as “sharing” under California law; you can opt out by choosing “Ask App Not to Track”, declining personalised ads in Privacy settings, or e-mailing us. We do not use or disclose sensitive personal information, and we will not discriminate against you for using your rights.

10. Children

The game is not directed at children under 13 (or the minimum digital-consent age in your country, e.g. 16 in some EU countries), and we do not knowingly collect personal data from them. If you believe a child has provided personal data, contact us and we will delete it. Parents can limit tracking and in-app purchases with Apple’s Screen Time controls.

11. Security

Data is sent over encrypted connections (HTTPS/TLS) to the providers listed above, who apply industry-standard safeguards. We keep access to the provider consoles limited and protected with two-factor authentication. No system is perfectly secure, but we minimise what we collect in the first place.

12. Changes and contact

We may update this policy when the game or the law changes. We will change the effective date above and, for significant changes, let you know in the game. Questions or requests: emreqaraduman@hotmail.com — Emre Karaduman, Türkiye.