Privacy and personal data
Last updated: 15 Oct 2026
Draft · content not final yet
Draft: This is a first version based on the data the site actually processes today. Fill in the bracketed details and have it reviewed by a lawyer before going live.
This notice explains how your personal data is processed when you use Hyphae Games, in line with Article 10 of Turkey's Law No. 6698 on the Protection of Personal Data (“KVKK”) and, for visitors from the EU, the GDPR.
1. Data controller
[BUSINESS / PERSON NAME]
Address: [ADDRESS]
Email: merhaba@hyphaegames.com
2. What data we process
You don't need an account to play. If you play without an account, we collect no personal data apart from the “server logs” below.
| Data | When | Why |
|---|---|---|
| Email address, display name, language | When you create an account | To create your account and recognise you |
| Password (as an irreversible hash) | When you create an account | To verify your login. We never store the password itself |
| Session identifier, IP address, browser info, session dates | When you log in | To keep you logged in and protect your account from unauthorised access |
| Comment text, date and approval status; your favorite games | When you comment / add a favorite | To publish and moderate comments; to show your favorites |
| IP address, requested page, date and time, status code (server logs) | On every visit | To run the site and detect errors and abuse |
[WHEN GOOGLE / APPLE LOGIN IS ADDED: If you log in this way, we receive your name, email address and your user ID at that provider.]
Game saves: Some games may store your progress in your browser's local storage (on your device). This is never sent to us.
We don't use analytics, advertising or tracking tools. Our fonts are served from our own server; our pages make no third-party tracking requests.
3. Purposes and legal bases
- Providing accounts, sessions, comments and favorites: Necessary for the performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)).
- Security, abuse prevention and comment moderation: Our legitimate interests, provided they don't override your rights (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
- Complying with legal obligations (e.g. requests from authorities): Legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)).
We currently do no processing based on consent. If we add something like an optional newsletter or analytics, we'll ask for your consent first.
4. How we collect it
Through the sign-up and comment forms, the session cookie and server logs, partly by automated means.
5. Who we share it with
We don't sell your data or share it with anyone for advertising. It may only be shared with these parties as needed to run the service:
- Hosting provider: [PROVIDER NAME, COUNTRY]
- Content delivery and attack protection: [E.G. CLOUDFLARE, USA — if data is transferred abroad, the KVKK Art. 9 conditions must be explained here]
- Competent public authorities: Where legally required, and only to the extent requested.
6. How long we keep it
- Account data, comments and favorites: For as long as your account is open; deleted or anonymised within [30] days after you ask us to delete your account.
- Session records: Deleted automatically after the session ends (at most 30 days).
- Server logs: [PERIOD — to be confirmed with a legal adviser].
7. Your rights
You can ask us to tell you whether we process your data and what we process; to correct or delete it; to tell you who it's been shared with; and to object to decisions made solely by automated means. Under the GDPR you also have the rights to restrict processing and to data portability, and you can complain to your local data protection authority.
Send your request to merhaba@hyphaegames.com from the email address on your account. We'll reply free of charge within 30 days.
8. Children
Our games can be played without an account. You must be at least 13 to create an account. [WHETHER PARENTAL CONSENT IS NEEDED UNDER 18 IS TO BE CONFIRMED WITH A LEGAL ADVISER.] If you notice a child has created an account without permission, write to us and we'll delete it.
9. Changes
When we update this notice we change the date at the top of the page and notify account holders of important changes by email.