Privacy policy
Last updated: 25 September 2026
This policy explains what our games and the companies that help us run them collect, why, how long it is kept, and how you can control or delete it. It is written to meet Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK), the EU and UK General Data Protection Regulation (GDPR), US state privacy laws such as California's (CCPA), and the rules of Google Play and the App Store.
It covers our mobile games and this website:
| Game | App ID | Same text, one game |
|---|---|---|
| Wolf in the Flock | com.hopkite.wolf (Android), com.hopkite.wolf (iOS) | Policy for this game only |
| Trailfill | com.hopkite.trailfill (Android), com.hopkite.trailfill (iOS) | Policy for this game only |
and the website hopkite.pages.dev (section "This website" at the end).
Who we are
Hopkite is the name under which Anılcan Yurtbay (Hopkite), an individual developer based in Türkiye, makes and publishes games. Hopkite is not a registered company, so this person is the data controller (KVKK veri sorumlusu) responsible for your data and the provider of the games. Contact for anything in this policy: hopkitegames@gmail.com. For help with a game: hopkitegames@gmail.com.
The short version
- No account, no sign-in, no chat. We run no game servers: your progress and settings are saved only on your device.
- The games are free and show ads from Google AdMob. Google receives device identifiers and usage data to show and measure ads. It personalizes ads only where the law allows or you agree: in the EEA, UK and Switzerland you choose in a consent message; on iPhone you choose in Apple's "Allow tracking" prompt.
- We use Google Firebase to count how the game is played and fix crashes. It gets a random app identifier, not your name or advertising ID.
- Purchases go through Google Play or the App Store. We never see your name, email address or payment details.
- Settings > Privacy > Delete my data erases everything the game has stored on your device.
- We never sell your personal data for money.
What the game stores on your device
The game saves the following in its private storage on your phone or tablet. It is not sent to us; we have no server that could receive it.
| Game | Saved on your device |
|---|---|
| Wolf in the Flock | your level progress and checkpoints, daily flock results, coins, boosters, unlocked flocks and cosmetics, settings (sound, language, accessibility), whether you have seen the tutorial, and a record of your real-money purchases |
| Trailfill | your solved puzzles and unfinished boards, daily streak, streak freezes and statistics, hints, board themes, settings (sound, language, theme, accessibility), and a record of your real-money purchases |
It stays until you use Delete my data in the game's settings or uninstall the game. Your phone's own backup (for example Google's Android backup or iCloud) may copy app data under your account with Google or Apple; that is their service, not ours.
Ads (Google AdMob)
The ads are served by Google AdMob, run by Google LLC (USA), or Google Ireland Limited for users in the European Economic Area and Switzerland. Google acts as an independent controller for the data it collects to serve ads. When the game requests or shows an ad, Google's Mobile Ads SDK collects:
- device identifiers: on Android the advertising ID and the app set ID; on iPhone and iPad the identifier for vendors, and the advertising identifier (IDFA) only if you allow tracking;
- your IP address, from which Google derives an approximate location (city or region, never GPS);
- information about your device and the app: model, operating system, language, app version;
- how you interact with ads: which ads were shown, taps, videos watched and rewards earned;
- diagnostic data about the ads SDK: crashes and performance.
Google uses this to show ads, limit how often you see the same ad, measure ads, prevent fraud and abuse, and, only where allowed or with your consent, personalize ads.
Where the ads appear (rewarded videos are always your choice):
- Wolf in the Flock: interstitial (full-screen) ads between runs (when you leave the run-over or daily result card), never during a level, never before your third finished run, then at most one every two runs and 90 seconds apart; rewarded videos give a continue, double coins, binoculars, extra time or the free chest.
- Trailfill: interstitial (full-screen) ads in practice mode only, after you tap Next on a result screen, never on the daily puzzle, never before your second solved practice puzzle, at most every second puzzle, two minutes apart and eight a day; rewarded videos give one extra hint or a streak freeze.
Buying Remove ads stops interstitial and banner ads; rewarded videos stay available if you want them.
Your choices about ads:
- EEA, UK and Switzerland. Before the first ad is requested, the game shows Google's consent message (Google's User Messaging Platform, IAB Transparency and Consent Framework). You can accept, refuse or choose per purpose; if you refuse, you still get ads, but they are not personalized. Change your choice at any time in Settings > Privacy > Ad choices.
- United States. In states whose laws give you the right to opt out of the "sale" or "sharing" of personal data or of targeted advertising, use the same Ad choices option to opt out. Letting Google use your advertising ID for personalized ads can count as "sharing" under those laws; we do not otherwise sell or share your data.
- Türkiye. If your device's region is set to Türkiye, the game asks Google for non-personalized ads only.
- iPhone and iPad. After you have played for a while, the game may show Apple's "Allow tracking?" prompt. If you tap "Ask App Not to Track", the advertising identifier is not available and ads are not personalized with it. You can change this in iOS Settings > Privacy & Security > Tracking.
- Android. You can delete or reset your advertising ID in your device settings (usually Settings > Google > Ads, or Settings > Privacy > Ads).
- Google explains how it uses this data at https://policies.google.com/technologies/partner-sites and in its privacy policy at https://policies.google.com/privacy; you can manage ad personalization for your Google account at https://myadcenter.google.com/.
We ask Google not to show ads rated above "PG" (parental guidance) and we do not use other ad networks. If we add one, we will name it here first.
Analytics and crash reports (Google Firebase)
Firebase is a Google service that processes this data on our behalf (as our processor) under the Firebase data processing terms. Google does not use it to show you ads.
Firebase Analytics
Firebase Analytics tells us how many people play, how far they get and where they get stuck, so we can tune difficulty and fix what annoys players. It receives:
- a random app-instance ID created when you first open the game. It is not your advertising ID: we switched off advertising-ID collection and Google signals in Firebase Analytics, and we do not link Analytics to our ad account for ad personalization;
- game events:
- Wolf in the Flock: app opens, runs and levels started and finished (level, time used, wrong taps, whether a hint was used), tutorial steps, the daily flock, ads shown and rewards granted, purchases (product and result, never payment details), shares, settings changes, and coins earned and spent
- Trailfill: app opens, puzzles started and finished (mode, level, time), dailies completed, hints and streak freezes used, tutorial steps, ads shown and rewards granted, purchases (product and result, never payment details), shares, settings changes, and hints earned and spent
- standard information Firebase collects automatically: first open, sessions and engagement time, app updates, in-app purchases (product, price and currency, never your payment details), device model, operating system and version, app version, language, screen size, and the country and region Google derives from your IP address (Google does not give us your IP address).
We keep user-level Analytics data for 2 months (the shortest setting); after that only aggregated reports remain.
In the EEA, the UK and Switzerland, Firebase Analytics uses its app-instance ID only if you agree to measurement in the consent message described under "Ads". If you do not, it runs in Google's consent mode without storing an identifier on your device.
Firebase Crashlytics
When the game crashes or hits a serious error, Crashlytics sends a crash report: what the code was doing (the stack trace), the device model, operating system and app version, free memory and disk space, orientation, the time, and a random Crashlytics installation ID. We use it only to find and fix bugs. Crash reports are deleted after 90 days.
Purchases
You can buy optional items with real money. The purchase is handled entirely by Google Play (Google Play Billing) or Apple (In-App Purchase) under their own terms and privacy policies. The game receives only a confirmation from the store: the product, a purchase or transaction ID, the time and the status. It keeps that record on your device to give you the item and to restore it later. We do not receive your name, email address or payment details. The purchase is checked on your device; if we ever check purchases on a server, we will update this policy first.
The game talks to the store through Unity In-App Purchasing, a library from Unity Technologies. Unity states that the version we use collects, to make purchases work and for analytics: identifiers of the app installation and device, purchase history, crash and diagnostic data, and an approximate location derived from your IP address. Unity's list also includes an email address, used only for web checkouts, which our games do not offer. Unity does not share this data with third parties for advertising; see Unity's privacy policy.
Sharing your results
When you tap Share, the game hands a short, spoiler-free text with your result to your phone's share menu, and you choose where it goes. We do not see it.
Emails to us
If you email us, we receive your email address and whatever you write, and use them only to answer you. Our address is a Gmail mailbox (Google).
What we do not collect
No account, name, email address (unless you write to us), phone number, contacts, photos, microphone, camera, precise (GPS) location or data from other apps. There is no chat and no way to talk to other players in the game.
Legal bases
| Purpose | KVKK (Türkiye) | GDPR (EEA, UK) |
|---|---|---|
| Saving your game on your device, giving and restoring purchases | Necessary to perform our contract with you (Art. 5(2)(c)) | Contract (Art. 6(1)(b)) |
| Showing non-personalized ads that pay for the free game; ad fraud prevention | Legitimate interest (Art. 5(2)(f)) | Legitimate interest (Art. 6(1)(f)); storing or reading identifiers on your device only with your consent in the consent message |
| Personalized ads | Explicit consent (Art. 5(1)); we request non-personalized ads in Türkiye | Consent (Art. 6(1)(a)), given in the consent message |
| Analytics (Firebase Analytics) | Legitimate interest (Art. 5(2)(f)) | Consent (Art. 6(1)(a)) for the app-instance ID; otherwise legitimate interest for cookieless measurement |
| Crash reports (Crashlytics) | Legitimate interest (Art. 5(2)(f)) | Legitimate interest (Art. 6(1)(f)): keeping the game working |
| Answering your emails | Legitimate interest (Art. 5(2)(f)) | Legitimate interest (Art. 6(1)(f)) |
Who receives data
- Google (AdMob, Firebase, and Gmail for our mailbox).
- Google Play or Apple for downloads, updates and purchases, under their own policies.
- Unity Technologies, through the purchase library described under Purchases.
- Cloudflare, Inc., which hosts our website, including this page and the other pages our games link to.
- Authorities, only if the law requires it.
Transfers outside Türkiye and the EEA/UK
Google, Apple, Unity, and Cloudflare store and process data in the United States and other countries. We rely on the safeguards these providers offer, such as the EU standard contractual clauses and the EU-US Data Privacy Framework, and, for transfers from Türkiye, the standard contracts and other appropriate safeguards required by KVKK Art. 9. Ask us for details.
How long data is kept
| Data | How long |
|---|---|
| Saves on your device | Until you use Delete my data or uninstall the game |
| Ad data held by Google | Under Google's retention rules (policies.google.com/technologies/retention) |
| Firebase Analytics, user level | 2 months, then only aggregated reports |
| Crash reports | 90 days |
| Purchase library data held by Unity | Under Unity's privacy policy |
| Emails to us | Up to 12 months after the conversation ends |
Delete your data
- In the game: Settings > Privacy > Delete my data, then confirm. This erases everything the game saved on your device (progress, currency, unlocks, settings and the purchase record) and resets the analytics ID, so nothing new can be linked to your old data. It cannot be undone. One-time purchases (such as Remove ads) come back with Restore purchases; items that were used up when bought, such as packs of coins or hints, do not.
- Uninstalling the game also erases its saves on the device.
- Analytics data already sent: it is deleted automatically after 2 months (crash reports after 90 days). To have it deleted sooner, email hopkitegames@gmail.com before you use Delete my data, with the analytics ID shown in the game's Settings > Privacy; we delete it through Google's deletion tool and confirm.
- Ad data: Google holds it under its own policy. Delete or reset your advertising ID (Android) or turn off tracking (iPhone), and see Google's privacy policy for your rights with Google.
Your rights
Under KVKK Art. 11, GDPR Articles 15 to 22 and US state laws you can ask us to: tell you whether we hold data about you and give you a copy; correct it; delete it; restrict or object to its use; withdraw consent at any time (this does not affect what we did before); tell you who received it, including abroad; and compensate damage caused by unlawful processing. In US states with privacy laws you also have the right to opt out of "sale", "sharing" and targeted advertising (see "Ads") and not to be treated differently for using your rights.
Email hopkitegames@gmail.com with the name of the game. Because the games have no accounts, we usually cannot find data about you unless you send the analytics ID shown in the game's settings. We answer within 30 days, free of charge.
You can also complain to a data protection authority: in Türkiye the Personal Data Protection Authority (kvkk.gov.tr), in the EU the authority of your country, in the UK the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to fix the problem first.
Children
Our games are made for a general audience aged 13 and over and are not directed at children under 13. We do not knowingly collect personal data from children under 13, and we have no way to collect a name or contact details in the game. In the EEA and the UK, if you are under the age at which you can agree to online services yourself in your country (13 to 16), ask a parent or guardian before you accept personalized ads in the consent message. If you are a parent and believe your child has used our games, you can erase everything on the device with Delete my data, and you can email us for help with anything else.
Security
Data sent by the game to Google travels encrypted (HTTPS). Saves on your device sit in the game's private storage, which other apps cannot read. We have no servers that store your data.
Changes
If we change this policy, we update the date at the top and publish the new version here before it applies. If a change affects what the game collects, we also mention it in the store's "What's new" notes.
This website
This part covers this website, hopkite.pages.dev, and any address that redirects to it. The sections above on who we are, transfers, your rights, children and changes apply to the website too.
The short version
- No cookies. No advertising or tracking pixels, unless you allow one in a banner (see "Ad measurement" below; the banner only appears if we ever turn this on).
- If you only look at the pages, we do not learn who you are. We see anonymous counts: how many visits each page gets, from which country, from which ad.
- If you join a waitlist, we keep your email address to send you one email when that game launches. Nothing else. You can ask us to delete it at any time.
- We never sell your data and never use it to build a profile of you.
What the website collects and why
| Data | Why | Legal basis | How long | Who processes it for us |
|---|---|---|---|---|
| Technical request data: IP address, browser and device type, the page requested, time | To deliver the pages and protect the site from abuse | Legitimate interest (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)) | Short-lived logs kept by the host under its own policy; we do not store them | Our web host, Cloudflare, Inc. (USA) |
| Anonymous visit statistics: page visited, referring site, the ad label in the link (for example "mimic_clip3"), country, device type, screen size. Collected without cookies and without storing anything on your device | To see which game pages and which ads interest people, so we know which game to build | Legitimate interest (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)) | Kept as aggregated counts. The analytics provider may hold your IP address and browser type in memory for a few hours to avoid counting a visit twice; it does not store them | Our analytics provider: GoatCounter (servers in Finland and Germany) |
| Waitlist: your email address, the game you chose, the date and time, your consent, and the ad label of the link you arrived from (if any) | To send you one email when that game launches, and to count sign-ups per game and per ad | Your explicit consent (KVKK Art. 5(1); GDPR Art. 6(1)(a)), which is also the prior consent required for commercial electronic messages (Turkish Law No. 6563) | Until we send the launch email, then deleted within 30 days. If a game is cancelled, deleted within 30 days of that decision. In any case at most 24 months | Our form provider: Web3Forms (servers in the USA), which forwards each sign-up to our mailbox; and our email provider |
| Emails you send us | To answer you | Legitimate interest (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)) | Up to 12 months after the conversation ends | Our email provider |
We collect this data automatically (technical data and statistics) or directly from you through the waitlist form or your email. Joining a waitlist is optional; the pages work the same without it.
Ads that link here
We advertise our games on Facebook and Instagram (Meta) and possibly TikTok. If you clicked one of those ads, the link carries labels such as utm_source and utm_content that name the ad, not you. The ad platforms show us only aggregated results (for example how many people watched or clicked an ad). What those platforms collect about you is governed by their own privacy policies.
Ad measurement (off unless you allow it)
We do not use the Meta Pixel today. If we ever turn it on, a banner will ask you first, and the pixel (which sets cookies and sends your visit to Meta) loads only if you click "Allow". You can change your choice with the "Privacy choices" link at the bottom of every page, which appears only when the pixel is in use.
Transfers
The web host and the form provider store or route data in the United States, the analytics provider in the EU. We use them only under their published data processing terms (KVKK Art. 9; GDPR Chapter V). Where Turkish law requires a standard contract notified to the Personal Data Protection Authority, we put one in place before collecting waitlist emails.
Leaving a waitlist
To delete your email from a waitlist: email hopkitegames@gmail.com from that address with the subject "Delete my email", or reply "STOP" to any email from us. We stop all messages within 3 business days, delete the address from the form provider and our mailbox, and confirm within 30 days (usually within a few days). The launch email itself says who we are, how to reach us, and how to stop further messages.
The waitlists are for people aged 16 or older. If you are younger, please do not join one. If we learn that a child has signed up, we delete the address.