Privacy Policy

This Privacy Policy explains what information the Cutlane mobile game ("Cutlane", "the game", "we") processes, why, who receives it, how long it is kept and what rights you have. It applies to all versions of Cutlane for iOS and Android.

Data controller: Onur Emre Karadağ, trading as Kefelon, Istanbul, Türkiye · E-mail: privacy@kefelon.com. For the purposes of Türkiye's Personal Data Protection Law No. 6698 (KVKK) and the EU/UK General Data Protection Regulation (GDPR), the data controller is Onur Emre Karadağ.

1. The short version

• Cutlane has no account system of its own. We do not collect your name, e-mail address, phone number, contacts, precise location, photos or microphone.
• Your progress is stored on your device and copied to your own iCloud or Google Play Games account (section 4).
• To improve the game and fix bugs, the game sends usage statistics and error reports to analytics providers. These are linked to random identifiers, not to your name (section 5).
• Versions before 1.2.0 show no advertising. From version 1.2.0 the game shows ads from Google AdMob: optional video ads you choose to watch for a reward, and a full-screen ad between some runs. Where the law requires it, you are asked for consent first, and on iPhone the game asks your permission before the advertising identifier can be used (section 6). A one-time "Remove Ads" purchase turns off the full-screen ads.
• We do not sell your data for money. In some US states, letting an ad network use identifiers for personalised ads can count as "selling" or "sharing" under local law; you can opt out (section 6).
• Payments are handled by Apple or Google; we never see your payment details.

2. Data stored on your device

The game keeps the following in its own storage on your device:

• Game progress: unlocked bikes and helmets, coins, gems, best scores, missions, milestones, daily gift streak
• Preferences: sound, vibration, language, control scheme, left/right-hand mode, graphics quality, notification choices
• Purchase state: whether you own the PATROL 1300 or Remove Ads, and how long an active 2× Cash boost lasts
• Ad and consent state (from version 1.2.0): a run counter used to pace ads, and the choices you made in the consent form, stored in the standard IAB TCF / GPP format

Uninstalling Cutlane deletes this data from the device. Copies may remain in your cloud save (section 4).

3. In-app purchases

Cutlane sells coin and gem packs, a 7-day "2× Cash" boost, the PATROL 1300 motorcycle and, from version 1.2.0, "Remove Ads". Purchases are processed entirely by the Apple App Store or Google Play; we never see or store your payment details. The store gives the game a signed receipt so it can unlock what you bought, and the game uses Unity's in-app purchasing library (Unity Technologies) to talk to the store. A record of each purchase (product, price and currency — no payment details) is included in the usage statistics described in section 5.

4. Platform game services and cloud save

iOS

• Game Center: if you are signed in to Game Center on your device, the game uses it for leaderboards. Your weekly best score and all-time total are submitted under your Game Center nickname; other players can see that nickname and score, and you can see theirs.
• iCloud: if you are signed in to iCloud on your device, your game progress is automatically copied to your iCloud account so it follows you to other devices and reinstalls. You can manage or delete it in iOS Settings → [your name] → iCloud.

Android

• Google Play Games: if you are signed in, your scores are submitted to the leaderboards under your Play Games profile name, and your progress is saved as a Play Games "Saved Game" snapshot.

This data is stored in your own Apple or Google account and processed under their privacy policies: Apple Privacy Policy · Google Privacy Policy. We cannot access or delete it on your behalf; you control it in your account settings.

5. Usage statistics and error reports

Why: to understand how the game is played (for example which worlds are too hard), to keep the economy balanced and to find and fix crashes.

Who processes it depends on the version you have:

• Versions up to 1.0.2: Unity Gaming Services — Unity Analytics and Unity Remote Config (Unity Technologies).
• Later versions: Google Firebase Analytics and Firebase Crashlytics (Google LLC), plus Unity Remote Config and Unity Authentication, which signs the game in anonymously so it can fetch game settings (Unity Technologies).

What is collected:

• Random identifiers: Unity installation ID and anonymous player ID; in later versions also the Firebase app-instance ID. On Android, Firebase Analytics may additionally record your device's advertising ID unless you have deleted it (see section 8); on iOS it records the identifier for vendor. Versions before 1.2.0 do not access the iOS advertising identifier (IDFA) and never show a tracking prompt; from 1.2.0 see section 6.
• Gameplay events: runs started and finished (score, distance, near misses, best combo, top speed, coins earned, bike and world used), continues, daily gifts, screens opened, the share and review prompts, and purchases (product, price, currency).
• Device information: device model, operating system and version, app version, language and country or region (the providers derive the region from your IP address). Unity Remote Config also receives the processor type, memory, graphics chip, screen size and whether the device is rooted or jailbroken, which is used to deliver the right game settings.
• Error reports: the error message, a code trace, the screen you were on and the last few in-game steps before the error.

In versions before 1.2.0, collection starts when you open the game; they show no consent dialog and have no in-game switch to turn statistics off (section 8 explains what you can do). From version 1.2.0, in the European Economic Area, the UK and Switzerland statistics are held back until you have answered the consent form, and are not sent if you refuse storing or accessing information on your device; you can change your choice later under Settings → Privacy options.

Legal basis: our legitimate interest in running, securing and improving the game (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)); from version 1.2.0, in the regions listed above, your consent (GDPR Art. 6(1)(a)).

Retention: Firebase keeps event-level analytics data for at most 14 months and Crashlytics keeps crash reports for 90 days. Unity keeps analytics data according to its data retention terms. Aggregated statistics that no longer relate to an identifier may be kept longer.

This data is used only to operate and improve Cutlane. It is not sold, and the statistics we collect are not used for advertising (ads are covered separately in section 6). Providers' policies: Google Privacy Policy · Firebase privacy and security · Unity Privacy Policy.

6. Advertising

Versions before 1.2.0 show no advertising and do not sell an ad-removal option.

From version 1.2.0 Cutlane shows ads served by Google AdMob (Google LLC / Google Ireland Limited):

• Rewarded video ads that you choose to watch — to continue a run after a crash or to double the cash earned in a run. Watching is always optional.
• A full-screen ad when a run ends, shown over the results screen, at most every few runs and with a minimum gap between ads. New players do not see these during their first runs, and you never see one in a run where you watched a rewarded ad. The Remove Ads purchase turns them off permanently; rewarded ads stay available because you choose them.

What the ad network receives: to choose, show and measure ads and to prevent fraud, the Google Mobile Ads SDK collects your device's advertising identifier (on Android the Google advertising ID; on iPhone the IDFA, only if you allow tracking — otherwise the identifier for vendor), your IP address and the approximate location derived from it, device and app information (model, operating system, language, app version), and how you interact with ads (impressions, clicks, watched to the end). Google may combine this with other data to personalise ads, subject to your choices below. Google's practices are described in How Google uses information from sites or apps that use its services and the Google Privacy Policy.

Your consent:

• European Economic Area, UK and Switzerland: before any ads or statistics, the game shows Google's consent form (Google User Messaging Platform, an IAB TCF-registered consent management platform). You can accept, refuse or choose purposes. If you refuse personalisation you may still see non-personalised or limited ads. Change your choice at any time under Settings → Privacy options.
• US states with privacy laws: the same form lets you opt out of the "sale" or "sharing" of personal information for personalised advertising; the option stays available under Settings → Privacy options.
• iPhone (App Tracking Transparency): the game asks once, after your first results screen — first with a short card that explains the question, then with Apple's system prompt — whether ads may use the advertising identifier. If you choose "Ask App Not to Track" the identifier is not used. You can change this in iOS Settings → Privacy & Security → Tracking.

Legal basis: your consent where the law requires it (GDPR Art. 6(1)(a); KVKK Art. 5(1)); elsewhere our legitimate interest in funding a free game (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

Retention: the game itself keeps only the ad and consent state described in section 2. Google keeps advertising data according to its own policy; see How Google retains data.

7. Notifications and sharing

Cutlane can show local notifications about your daily gift (when it is ready, on the last day to keep your streak, and a reminder if you haven't played for a few days) and about the weekly leaderboard closing soon. They are scheduled on your device by the game itself; no server, no push token, no data leaves your device. The game asks you before the system permission prompt, and you can turn them off at any time in the game's Settings or your device settings.

The Share button on the run-over screen creates an image of your score on your device and hands it, with a link to the game, to your device's share sheet. Nothing is uploaded by us; what happens next is up to you and the app you share with.

8. Your choices and rights

• Limit identifiers: on Android you can delete your advertising ID in Settings → Google → Ads (or Settings → Privacy → Ads). On iPhone, versions before 1.2.0 do not use the advertising identifier; from 1.2.0 it is used only if you allow tracking, which you can turn off in iOS Settings → Privacy & Security → Tracking.
• Ads and consent (from 1.2.0): change your consent choices under Settings → Privacy options in the game, or buy Remove Ads to turn off full-screen ads.
• Start fresh: uninstalling and reinstalling the game creates new random identifiers; data from the previous installation is no longer linked to your device and is deleted at the end of the retention periods above.
• Cloud saves and leaderboards: manage or delete them in your iCloud, Game Center or Google Play Games settings.

Depending on where you live, you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw any consent you gave. In Türkiye these rights are set out in Article 11 of the KVKK. Send requests to privacy@kefelon.com; we answer within 30 days. Because the data described in section 5 is linked only to random identifiers and not to your name or e-mail, we may not be able to find records that belong to you; we will tell you what we can and cannot do.

You also have the right to complain to a data protection authority: in Türkiye the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu, kvkk.gov.tr), in the EU/UK the authority of your country.

9. International transfers

Our service providers (Unity, Google — including Google AdMob from version 1.2.0 — and Apple) process data on servers outside Türkiye and the European Economic Area, including in the United States. These transfers are necessary to provide the game and rely on the providers' data processing terms, including standard contractual clauses.

10. Security

Data sent by the game travels over encrypted connections (HTTPS). We do not run our own game servers and we collect as little as the game needs.

11. Children

Cutlane is not directed at children under 13 (or the higher age of digital consent that applies in your country), and we do not knowingly collect personal data from them. The game has no chat, messaging or account creation; the only thing other players can see is your leaderboard nickname and score through Game Center or Google Play Games. If you believe a child has provided personal data, contact us and we will help remove it.

12. Changes

We may update this policy when the game changes. The date at the top shows the latest version, and material changes are announced in the game's release notes.

13. Contact

Kefelon · Onur Emre Karadağ, Istanbul, Türkiye E-mail: privacy@kefelon.com