Privacy Policy
Last updated: 2026-08-04 · VAULT (vaultplay.app)
This policy explains what data VAULT’s mobile game collects, why we collect it, how we use it, and how you can exercise your rights. It is prepared with Google Play and App Store requirements and KVKK / GDPR principles in mind.
1. Who we are
VAULT (“we”), available at vaultplay.app, is a multiplayer code-breaking / vault-opening game. This policy applies to the Android and iOS apps and the APIs that power the game.
Privacy requests: privacy@vaultplay.app
2. Data we collect
- Account: name, username, email, password (hashed only), or provider ID and email when signing in with Google / Apple; language and country preference.
- Gameplay: guesses, hint usage, score / ranking stats, daily attempt usage, progress records.
- Device: platform (Android / iOS), app language, session tokens, and (optional) push notification token.
- Premium: subscription / purchase status and store transaction references (we do not store card numbers; Google Play or the App Store processes payment).
- Ads: the AdMob SDK may process device identifiers and ad interaction data (subject to your permissions).
- Technical: limited server logs for security and debugging (e.g. IP address, request time).
3. How we use data
We process data to:
- Create and manage your account
- Run the game and show scores / rankings
- Protect security and prevent cheating or abuse
- Provide Premium benefits
- Send notifications you opt into
- Show ads in the free tier
- Meet legal obligations
We do not sell your personal data.
5. Advertising
The free game may show rewarded ads (e.g. for an extra attempt or hint) via Google AdMob. Premium users may skip ads depending on settings.
The ad network may process advertising IDs and interaction data. On iOS, an App Tracking Transparency prompt may appear. You can manage preferences in your device settings.
Google Privacy Policy: policies.google.com/privacy
6. Notifications
If you allow it, game and account notifications may be sent via Firebase Cloud Messaging. You can turn notifications off in the app or device settings.
Firebase: firebase.google.com/support/privacy
8. Third parties
To run the game we may use:
- Hosting / server infrastructure
- Identity: Google, Apple
- Advertising: Google AdMob
- Notifications: Firebase Cloud Messaging
- Stores: Google Play, App Store
These parties process data only as needed to provide their services.
9. Retention and security
Account and gameplay data are kept while your account is active. Passwords are hashed; API access uses tokens. When you delete your account, personal data is removed; technical records required by law may be kept for a limited time or anonymized.
10. Your rights and account deletion
You can update your profile, change notification preferences, and delete your account from within the app. Account deletion is permanent. For access, correction, or deletion requests under KVKK / GDPR, email privacy@vaultplay.app.
11. Children
The service is not directed to users under 18. We do not knowingly collect personal data from anyone under 18. If such an account is found, it will be deleted.
12. Changes and contact
We may update this policy for legal or store requirements; the “Last updated” date will change. Material changes may be announced in the app or on the site.
Contact: privacy@vaultplay.app
· hello@vaultplay.app
Policy URL: https://vaultplay.app/privacy
4. Google / Apple sign-in
When you sign in with Google or Apple, authentication happens on the provider’s systems. We only receive the identity token needed to sign you in, your email, and (if shared on Apple) your name. We never receive your Google/Apple password.