Privacy Policy

Last updated: 19 October 2026

1. Who we are

33 Yan 2 ("the App") is operated by EMRE GUNES, an individual — there is no company behind the App. Where this policy says "we", it means that one person. If you have any question about this policy or about your data, write to support@otuzucyaniki.com. Every privacy request sent to that address is answered.

The App lets people find each other and play 101 Okey and Standard Backgammon — both at real-world tables organised through the App and online inside the App.

2. What this policy covers

This policy describes the data the App collects, why we collect it, who else receives it, how long we keep it, and what you can do about it. It applies to the App on iOS and to the servers behind it. It does not cover services you reach by leaving the App (for example, when you tap "Get directions" and your phone opens Apple Maps, Google Maps or Waze).

3. Data we collect

3.1 Account

• Email address. Required to create an account and to sign in. If you sign in with Apple and choose Hide My Email, Apple gives us a relay address (@privaterelay.appleid.com) instead of your real one — in that case we never receive your real email address, and we do not attempt to resolve it.
• Name. Only if you sign in with Apple or Google and they pass it to us. We use it once, as a suggestion for your username. You can ignore it.
• Username. Chosen by you, 3–16 characters, letters, numbers and underscore only. It is visible to other players.
• Avatar. A number from 1 to 16 that picks one of our built-in drawings. You cannot upload a photo, and we never receive one.
• Terms of Use acceptance. When you tap I agree, we record which version of the Terms of Use you accepted, when, and in which language (English or Turkish). Other players cannot see this record.

3.2 Gameplay

• Matches you play, hands, scores, penalty points, who won, whether a bot was in the game, and how the game ended.
• Your rating points for each game mode, your team rating if you play in pairs, your match count.
• Tournaments you join, matches inside them, and trophies you win.
• How far you got in the in-app tutorial.
• Records of rule violations detected by the server.

3.3 In-app economy and purchases

• Coins and energy: your balance, and a ledger of every change with its reason (match reward, daily reward, tournament reward, purchase, cosmetic purchase, correction).
• Purchase records: the Apple transaction identifier, the product identifier and the date, so we can give you what you bought and not credit the same purchase twice.
• We never see your payment details. Card numbers, billing addresses and payment methods are handled entirely by Apple. They never enter the App and never reach our servers.

3.4 Notifications

• A push notification token issued by your device, plus the platform and your language, so we can send you notifications about your games, tables and tournaments. You can turn notifications off in iOS Settings at any time.
• A record of notifications we sent you and whether you opened them.

3.5 Social features

• Friend requests and friendships.
• Users you have blocked.
• Reports you file about another player: the category you pick and the free-text description you write (at least 20 characters).
• Messages you send to a venue through the in-app venue thread, and the venue's replies. These are read by the venue's administrator and by the App's operator.

There is no chat between players inside a game. The game screens contain no text input.

3.6 Presence

• The time you were last seen online, so other players know whether you are available.

3.7 If you apply to list a venue

If you submit a venue through the App, we collect the business name, address, city, country, opening hours and, if you provide them, the business phone number and email address. This is business contact information, not your personal contact information — but you are the one typing it, so we list it here.

3.8 What we do not collect

We want to be specific, because "we may collect" language hides more than it tells:

• No location. The App never reads your device's location. There is no location permission and no location library in the App. Venue coordinates come from the venue's street address, not from you.
• No photos, camera, microphone or contacts.
• No advertising identifier (IDFA). We never ask for tracking permission.
• No analytics or advertising SDKs of any kind. We checked every one of the App's 148 bundled software libraries.
• No third-party crash-reporting service. The App reports its own errors only to our own server — see 3.9.
• No browsing or search history. Searching for a friend does not store the search.
• No date of birth, age, or any special-category data (such as health, religion, ethnicity, political opinion or biometrics).
• No payment or financial data (see 3.3).

3.9 Error reports and App version

Error reports. When the App runs into an error, it sends a short error report to our own server so that we can find and fix the bug:

• the error message and the stack trace (the list of places in the App's code the error passed through),
• the App version, build number and platform (for example, iOS),
• where in the App the error happened, if known, and how many times the same error repeated.

Before a report leaves your device, email addresses, sign-in tokens and long numbers are removed from it.

App version record. When you sign in, and when you return to the App (at most every 30 minutes), the App tells our server which App version, build number and platform you are using. We keep one record per account with the time it was last seen, and replace it each time. We use it to tell you when your version is too old and must be updated, and to see how many people still use an old version before we require an update.

Both are sent only while you are signed in and are stored with your account. We use them only to keep the App working and to find and fix errors. We do not share them with anyone else. Error reports are deleted automatically 30 days after we receive them; the version record is kept while your account exists. Both are deleted when you delete your account (section 8). No third-party crash-reporting or analytics SDK is involved: the data goes only to our own database (hosted by Supabase — see section 5).

4. Why we use your data

We use everything listed in section 3 to operate the App: to sign you in, to seat you at a table, to run matches, to calculate ratings, to give you what you purchased, to send notifications you asked for, to let you report and block other players, to stop cheating and abuse, and to find and fix errors in the App.

We additionally use gameplay records in aggregate to understand how the game is balanced, how the in-app economy behaves, and whether people keep playing — so we can improve the App. This is the "Analytics" purpose we declare on our App Store privacy label.

We do not use your data for advertising, and we do not sell it, rent it, or share it with data brokers.

We do not track you in the sense Apple defines: we never link data from this App with data from other companies' apps or websites for advertising.

5. Who else receives your data

We share data only with the service providers that make the App work, and only as much as they need:

Our service providers are bound to protect your data to at least the standard described in this policy and to use it only to provide their service to us.

We may also disclose data if we are legally required to, or where it is necessary to protect the safety of our users.

6. Where your data is stored

We are based in Türkiye. Our database and server functions run on Supabase infrastructure hosted in the AWS ap-south-1 region (Mumbai, India). This means that wherever you use the App from, your data is transferred to and stored on servers in India. All traffic between the App and our servers uses encrypted HTTPS connections.

Supabase also keeps technical request logs (which include IP addresses) for security and service reliability. We do not use those logs to build a profile of you.

7. How long we keep your data

• While your account exists, we keep the data in section 3 so the App works: your ratings, match history, purchases and balances are part of the product.
• Short-lived technical records are removed automatically — for example, the records that stop a single action being processed twice are deleted after two hours.
• Error reports (3.9) are deleted automatically 30 days after we receive them.
• The App version record (3.9) is a single record per account, replaced each time the App reports its version; it is kept while your account exists.
• After you delete your account, see section 8.

Apart from error reports, we do not operate a fixed retention period. Except for error reports and the short-lived technical records above, there is no set number of days or months after which data is automatically erased: the data in section 3 is kept for as long as your account exists, and what happens when you delete it is described in section 8. If we ever introduce other fixed retention periods, we will say so here and give notice under section 12.

8. Deleting your account

You can delete your account inside the App: Settings → Delete Account. You do not need to email us or visit a website.

Here is exactly what happens, because "we delete everything" would not be true:

What is erased or made anonymous:

• Your email address and phone number are obscured in our authentication system, your password is deleted, and all your sign-in sessions and tokens are destroyed. You can no longer sign in.
• Your username is replaced with an anonymous marker such as "Silinmiş #a1b2c3". Other players stop seeing your name.
• Your friendships are deleted, so you disappear from other people's friend lists.
• If you signed in with Apple, we ask Apple to revoke the token that links your Apple ID to the App.
• Your push notification tokens are deleted, so your devices stop being reachable from this account.
• Your error reports and your App version record are deleted (see 3.9).

What remains:

• Your match, hand and tournament records stay in the database, attached to the anonymous marker instead of your name. We keep them because deleting them would corrupt the ratings and match history of the people you played against — your opponents' wins would disappear with your account.
• Your coin ledger and purchase records stay, as a record of transactions processed through Apple.
• Messages you sent to a venue, and reports you filed, stay, so moderation decisions remain reviewable.
• The record of which Terms of Use version you accepted, and when, stays, as proof of what you agreed to.

You cannot delete your account while you are in the middle of an online match, because leaving would break the game for the other players. Finish or leave the match first.

9. Your rights

Depending on where you live, you may have the right to access your data, correct it, have it deleted, object to how we use it, or receive a copy in a portable form.

• Deletion: use the in-app flow in section 8, or write to support@otuzucyaniki.com.
• A copy of your data: we do not yet have an automatic export button. Write to support@otuzucyaniki.com and we will prepare it for you.
• Correction: you can change your username and avatar in the App. For anything else, write to us.
• Complaints: write to us first at support@otuzucyaniki.com. You may also have the right to complain to your local data protection authority.

10. Children

The App is not intended for children under 13 and we do not knowingly collect data from them. We do not ask for your date of birth, and the App has no parental controls of its own — use Screen Time on iOS to manage access. If you believe a child under 13 has created an account, write to support@otuzucyaniki.com and we will delete it.

11. Security

Access to your data is restricted at the database level: every table in our database has row-level security enabled, so one player cannot read another player's private records. Other players can see only your username, avatar, rating and trophies — not your email address, not your coin or energy balance. Traffic is encrypted in transit.

No system is perfectly secure, and we do not claim otherwise.

12. Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and, for significant changes, tell you in the App or by notification before the change takes effect.

13. Contact

EMRE GUNES — support@otuzucyaniki.com