Privacy Policy — E-Commerce: Shop Simulator

1. Who we are

The App is published by Burak Şengüloğlu, trading as Talya Games (“Talya Games,” “we,” “us,” or “our”).

Address:
Anadolu Caddesi, 34870 Kartal, İstanbul, Türkiye
Privacy and support email: iletisim@buraksenguloglu.com

For personal data controlled by Talya Games, Burak Şengüloğlu, trading as Talya Games, is the data controller or business, as those terms are defined under applicable privacy laws.

Google, Apple, Unity, and their advertising or platform partners may act as our processors or service providers for certain activities, and as independent controllers or third parties for other activities.

Platform availability. The App is currently distributed on Google Play for Android. An Apple App Store release for iOS and iPadOS is planned. The iOS-specific provisions in this Policy describe how the App behaves on Apple platforms and apply from the date that version becomes available.

2. Notice at collection and key points

When you use the App:

You do not need to create an in-game account.
Talya Games does not ask for your name, password, email address, or payment-card details in order to play.
Game progress and settings are primarily stored locally on your device.
Analytics, advertising, purchasing, and platform services process pseudonymous identifiers and technical information.
The App may process device or installation identifiers, IP-derived approximate location, app interactions, advertising interactions, device and diagnostic information, and purchase information.
We use this information to operate and improve the App, process and restore purchases, measure usage and advertising performance, display and measure advertisements, prevent fraud, maintain security, and comply with legal obligations.
We do not request precise GPS location, contacts, microphone, camera, photos, or media files.
We do not sell personal information in exchange for money. However, personalized advertising disclosures may be considered a “sale,” “sharing,” or targeted advertising under certain U.S. state privacy laws.
Where required, you may withdraw consent or opt out of eligible advertising processing through the Privacy Choices option in the App or by contacting us.
On iOS, personalized advertising additionally depends on the App Tracking Transparency permission described in Section 7.
Retention periods and criteria are described in Section 9.

Although most automatically collected information does not directly identify you by name, it may distinguish a device, installation, or user and may therefore constitute personal data. It should not be considered fully anonymous.

3. No in-game account and local gameplay data

The App does not provide or require an in-game account. Your Google Play or Apple Account is controlled by Google or Apple and is not an account created or maintained by Talya Games.

The following information is stored primarily on your device:

game progress and save files;
store name and business configuration;
inventory, orders, simulated customers, and financial progress;
unlocked content and locally stored purchase entitlements;
language, audio, graphics, performance, and control settings.

Talya Games does not operate a custom server that receives your gameplay save files.

Depending on your device and account settings, the operating system may include some local App data in a device or cloud backup — Android Backup or Google One on Android, and iCloud Backup on iOS. Such backups are controlled by Google, Apple, or your device provider, and Talya Games does not directly access them.

Avoid entering real personal information into optional in-game names or other free-text fields.

4. Information processed through the App

4.1 Firebase Analytics

The App uses Google Analytics for Firebase. Depending on your region, choices, device configuration, and availability of identifiers, Firebase Analytics may process:

a randomly generated app-instance identifier;
the Android Advertising ID, or on iOS the Identifier for Advertisers (IDFA), where available and permitted;
the Identifier for Vendors (IDFV) on Apple platforms;
first opens, app launches, sessions, screen views, and engagement events;
advertising impressions and related measurement events;
acquisition, campaign, and install-referrer information;
in-app purchase events;
app version, device model, operating system, language, and technical configuration;
approximate country or region derived from network information;
basic performance and diagnostic information.

Talya Games primarily uses this information in aggregated reports to understand installations, engagement, retention, technical performance, and campaign effectiveness.

4.2 Google AdMob

The App displays banner, interstitial, and rewarded advertisements through Google AdMob.

Google Mobile Ads and participating advertising providers may automatically process:

IP address and approximate location derived from the IP address;
app launches, taps, video views, ad impressions, ad clicks, and rewarded-ad interactions;
the Android Advertising ID, App Set ID, publisher identifiers, and other applicable device or account-related identifiers;
on iOS, the IDFA where App Tracking Transparency permission has been granted, and the IDFV;
app and SDK startup time, hang rate, energy use, and other diagnostic or performance information;
advertising, measurement, security, and fraud-prevention information;
advertising preferences, audiences, or inferences where personalized advertising is permitted.

Advertisements may be personalized, non-personalized, contextual, or limited depending on your location, age treatment, consent, App Tracking Transparency status on iOS, privacy choices, and applicable law.

4.3 Purchases and app store billing

The App offers non-consumable in-app purchases. These are processed through Google Play Billing on Android, through the Apple App Store and StoreKit on iOS, and through Unity In-App Purchasing on both platforms.

The purchasing services may process:

product identifiers and purchased products;
purchase status and purchase history;
transaction, order, or purchase tokens, and on iOS the App Store transaction identifier and receipt;
country, currency, and store information;
device, installation, player, and session identifiers;
information needed to confirm, restore, or prevent fraudulent purchases;
purchase-related diagnostic and performance information.

Unity’s current IAP documentation states that an end-user email address may be processed transiently as part of the purchase service. Talya Games does not use such information to create an account or send marketing communications.

Payment-card numbers, bank-account credentials, and billing authentication information are processed by Google, Apple, or the relevant payment provider. Talya Games does not receive your complete payment-card details.

4.4 Communications and privacy requests

If you contact us, we may receive:

your email address;
the contents of your message;
files or screenshots you choose to send;
device, installation, transaction, or purchase information you voluntarily provide;
records concerning our response and resolution of the request.

This information is used only to respond to your inquiry, provide support, handle privacy requests, prevent abuse, and meet legal or recordkeeping requirements.

5. Sources of information

We receive information:

automatically from the App and your device;
from Google Analytics for Firebase, Google AdMob, Google Play, the Apple App Store, and Unity IAP;
directly from you when you contact us;
from advertising attribution and campaign services where legally permitted.

We do not purchase personal information from data brokers.

6. How and why we use information

We use information for the following purposes:

operating and maintaining the App;
saving settings and gameplay locally;
processing, confirming, and restoring purchases;
measuring installations, usage, retention, and performance;
understanding and improving the user experience;
displaying, measuring, and limiting advertisements;
campaign attribution and advertising measurement;
preventing invalid traffic, fraud, abuse, and security incidents;
answering support and privacy requests;
complying with accounting, tax, legal, and regulatory obligations;
establishing, exercising, or defending legal claims.

Legal bases in the EEA, United Kingdom, and Switzerland

Where applicable, we rely on:

Performance of a contract: to provide the App and process purchases you request.
Consent: for personalized advertising, non-essential analytics, advertising identifiers, and device storage or access where consent is required.
Legitimate interests: for security, fraud prevention, service reliability, responding to inquiries, and permitted limited measurement or contextual monetization, provided those interests are not overridden by your rights.
Legal obligations: for tax, accounting, regulatory requests, dispute handling, and lawful government demands.

Where consent is legally required, consent-dependent advertising and analytics must not begin until valid consent has been obtained. You may withdraw consent at any time through the App’s Privacy Choices interface. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

7. Advertising and privacy choices

For users in the EEA, United Kingdom, and Switzerland, the App uses a Google-certified consent management platform to present required disclosures and choices before consent-dependent advertising or analytics begins.

The consent interface identifies the applicable advertising providers and purposes. The provider list may change as Google or our advertising configuration changes. You can reopen this interface through Settings → Privacy Choices.

Depending on your choice:

personalized advertising may use identifiers, activity, or advertising profiles to select ads;
non-personalized advertising may use contextual information and limited technical data;
limited advertising may restrict identifiers and personalization further;
certain information may still be processed for security, fraud prevention, frequency control, and basic ad delivery where legally permitted.

Platform-level advertising controls

Android. The system provides controls for resetting or deleting the Advertising ID and for limiting advertising personalization.

iOS and iPadOS. The App must ask for permission through Apple’s App Tracking Transparency framework before accessing the IDFA or tracking you across apps and websites owned by other companies. If you decline, the App and its advertising providers do not receive the IDFA, and advertising is non-personalized or limited. You can change this at any time under Settings → Privacy & Security → Tracking, and you can disable personalized Apple advertising under Settings → Privacy & Security → Apple Advertising. Declining tracking does not reduce the functionality of the game.

For eligible U.S. residents, Privacy Choices allows you to opt out of sale, sharing, or processing for targeted advertising. Applicable ad requests will then use restricted data processing or another legally appropriate mode.

We honor legally recognized universal opt-out preference signals, including Global Privacy Control, where required and where the signal can technically be received and associated with the relevant interaction. Because a browser signal may not reach a native mobile app, you should also use the Privacy Choices option in the App.

Advertising providers may perform automated ad selection or create advertising profiles. Talya Games does not use personal data to make decisions that produce legal or similarly significant effects concerning you.

8. Service providers, recipients, and their roles

Information may be processed by:

Google Analytics for Firebase, for analytics, attribution, and reporting;
Google AdMob and its advertising partners, for advertising, measurement, security, and fraud prevention;
Google Play, for distribution, purchases, payments, refunds, and purchase restoration on Android;
Apple, for App Store distribution, purchases, payments, refunds, and purchase restoration on iOS;
Unity Technologies, through Unity In-App Purchasing;
email, hosting, security, professional-adviser, or technical-support providers where necessary;
government authorities or courts where disclosure is legally required;
a successor entity in connection with a merger, reorganization, sale, or transfer of the App, subject to appropriate safeguards.

Google generally acts as our processor or service provider for Firebase processing. For AdMob and Google Play activities, Google may act as an independent controller. Apple acts as an independent controller for App Store distribution, payment, and its own analytics. Unity may act as either a processor/service provider or an independent controller depending on the processing activity.

Their independent processing is governed by their own notices:

The advertising providers applicable to a particular user are identified through the consent or Privacy Choices interface.

9. Retention

We retain or permit our providers to retain information only for as long as reasonably necessary for the purposes described in this Policy, taking into account operational requirements, sensitivity, legal obligations, security needs, and the availability of aggregated or de-identified alternatives.

Current retention practices include:

Local gameplay data: retained on your device until it is overwritten, cleared through system settings, or removed by uninstalling the App.
Firebase Analytics event data: the current property setting retains event-level data for 2 months.
Firebase Analytics user data: the current property setting retains user-level data for 14 months. The retention period currently resets when new user activity occurs.
Aggregated Analytics reports: standard aggregated reports may remain available longer because Google’s user and event retention controls do not apply to all aggregated reports.
AdMob reporting: Google currently makes User Activity reporting data available for approximately 90 days and certain advertising, cohort, and privacy reporting data for up to 2,555 days.
Unity IAP service logs: Unity currently states that service logs are retained for approximately 90 days.
Purchase and transaction records: retained for as long as necessary to provide and restore purchases, prevent fraud, comply with accounting or legal obligations, and resolve disputes.
Support and privacy correspondence: normally retained until the request is resolved and for no longer than three years afterward, unless a longer period is required for a legal obligation or active dispute.

Aggregated or genuinely de-identified information that can no longer reasonably be linked to an individual may be retained for longer.

10. International data transfers

Talya Games is located in Türkiye. Google, Apple, Unity, and their subprocessors may process information in the United States, the EEA, Türkiye, and other countries that may have different data-protection laws from your country.

Where legally required, transfers are supported by appropriate mechanisms such as adequacy decisions, Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, Swiss transfer adaptations, applicable Data Privacy Framework participation, and supplementary technical or organizational measures.

You may contact us for further information about safeguards applicable to data controlled by Talya Games.

11. Your privacy rights and data deletion

Depending on where you live, you may have the right to:

confirm whether we process your personal data;
access or receive a copy of your personal data;
correct inaccurate information;
request deletion;
restrict or object to processing;
obtain portable data where applicable;
withdraw consent;
opt out of sale, sharing, targeted advertising, or qualifying profiling;
limit certain uses of sensitive personal information;
appeal the denial of a request;
exercise your rights without discrimination or retaliation;
lodge a complaint with a competent data-protection authority.

Local data

There is no in-game account to delete.

You can delete locally stored gameplay data by using:

Android: Settings → Apps → E-Commerce: Shop Simulator → Storage → Clear storage / Clear data.
iOS and iPadOS: Settings → General → iPhone Storage (or iPad Storage) → E-Commerce: Shop Simulator → Delete App. Offloading the app keeps its local data; deleting it removes the data.

You may also uninstall the App. Platform-controlled backups may need to be managed separately through your Google, Android, or iCloud account settings.

Requests concerning processed personal data

To request access to or deletion of personal data processed in connection with the App, email iletisim@buraksenguloglu.com using the subject Privacy Request or Data Deletion Request.

You do not need to create an account to make a request.

Because the App does not maintain an account or directly identify users by name, our ability to locate a specific pseudonymous record may be limited. We may request only the device, app-installation, purchase, or request information reasonably necessary to locate the relevant record and verify that the request relates to you or your device.

We will not require identity verification for an advertising opt-out request unless permitted by law. Verification information will be used only to process the request.

If information can no longer be linked to you, is controlled independently by Google, Apple, or Unity, or must be retained under a legal exception, we will explain this where legally required and assist with directing the request to the appropriate provider.

We generally respond within one month for EEA or UK requests and within 45 days for applicable U.S. state requests. A legally permitted extension may apply, and we will explain the reason.

An authorized agent may submit a request where permitted by law. We may request proof of the agent’s authority and, for requests other than opt-outs, confirmation from the individual.

If we deny an eligible U.S. state request, you may appeal by emailing the same address with the subject Privacy Appeal. We will respond within the legally required period and, where required, explain how to contact your state attorney general.

EEA residents may complain to the supervisory authority in their country. UK residents may contact the Information Commissioner’s Office. Swiss residents may contact the Federal Data Protection and Information Commissioner.

12. U.S. state privacy disclosures

This section applies where U.S. state privacy laws apply to Talya Games and to the relevant processing.

During the preceding 12 months, the App may have processed:

identifiers, including the Advertising ID or IDFA, App Set ID or IDFV, app-instance ID, Unity installation or player identifiers, and session identifiers;
internet or application activity, including launches, sessions, screens, interactions, gameplay measurement, and advertising interactions;
approximate location derived from IP address or country information;
commercial information, including products purchased, purchase history, and transaction status;
device, diagnostic, and performance information;
contact information and correspondence voluntarily submitted to us;
advertising audiences or inferences generated by advertising providers.

We have disclosed these categories to Google, Apple, Unity, relevant advertising providers, platform providers, and technical service providers for the business purposes described in this Policy.

We do not sell personal information in exchange for money.

When personalized advertising is enabled, identifiers, app activity, approximate location, device information, and advertising inferences may be disclosed to Google or participating advertising providers. This activity may be considered a “sale,” “sharing,” or processing for targeted advertising under certain U.S. state laws.

Where applicable, you may opt out through the App’s Privacy Choices interface or by emailing us. An opt-out applies prospectively and does not prevent contextual advertising or processing necessary for security, fraud prevention, and App functionality.

We do not knowingly collect or use precise geolocation, biometric information, health information, government identifiers, financial-account credentials, racial or ethnic origin, religious beliefs, sexual orientation, or similar sensitive personal information through the App for the purpose of inferring characteristics.

We do not offer financial incentives in exchange for personal information.

13. Children and teenagers

The App is not directed to children under 13.

We do not knowingly collect personal information from a child under 13. If we learn that such information has been collected, we will take reasonable steps to delete or restrict it. A parent or legal guardian may contact us using the email address above.

We do not knowingly sell or share the personal information of users under 16 or process it for targeted advertising without the affirmative authorization required by applicable law.

Where we know that a user is below the applicable age of digital consent, we use age-appropriate treatment, restrict personalized advertising, and do not rely on the child’s consent for consent-dependent analytics unless valid parental or guardian authorization has been obtained.

Where a user’s age or authorization cannot be established, limited or non-personalized advertising and more privacy-protective defaults may be applied.

14. Security

We and our providers use reasonable technical and organizational safeguards designed to protect information, including encryption in transit, access controls, data minimization, restricted administrative access, and security or fraud monitoring.

No transmission or storage system is completely secure. We therefore cannot guarantee absolute security.

15. Changes to this policy

We may update this Privacy Policy when the App, SDKs, service providers, legal requirements, or data practices change.

The updated Policy will show a revised “Last updated” date. Where a change is material, we will provide additional notice through the App, the store listing, this website, the consent interface, or another appropriate method.

16. Contact us

For privacy questions, rights requests, or deletion requests:

Burak Şengüloğlu, trading as Talya Games
Anadolu Caddesi, 34870 Kartal, İstanbul, Türkiye
Email: iletisim@buraksenguloglu.com