FAUL! - PRIVACY POLICY

Effective date: 13 September 2026

This Privacy Policy explains which personal data is processed through the Faul! website (faul.app) and the Faul! mobile application (together, the "Platform"), for what purposes and on which legal bases. It has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and other applicable data protection legislation.

1. CONTROLLER
1.1. Your personal data is processed by the operator of the Platform in its capacity as data controller.
1.2. The controller may be contacted at hello@faul.app.

2. CATEGORIES OF PERSONAL DATA PROCESSED
2.1. Connection and security data: IP address, time of connection and of joining a lobby, lobby records.
2.2. Data provided by you: nickname, selected avatar and interface language.
2.3. Communication content: chat messages sent in lobbies.
2.4. Game statistics: score, duration of play and number of rounds. These statistics are not linked to your nickname or account.
2.5. Account data (only if you sign in to the mobile application with Google or Apple): your username and tag, the user identifier transmitted by the sign-in provider, a session token, the avatar image you upload (if any) and your list of blocked users. Your e-mail address is not stored.
2.6. Report data: when a player is reported, the selected reason, the optional note, the nicknames and account tags (if any) of the reporting and the reported player, the IP address of the reporting player, the avatar of the reported player and the most recent chat messages of the reported player in that lobby as evidence.
2.7. Feedback and contact data: the message text, nickname, interface language and IP address. Where the contact form is used, also the name, e-mail address and subject provided.
2.8. Data stored only on your device: nickname, avatar choice, interface language, a randomly generated player identifier and, for users without an account, the list of blocked players. This data is deleted when you uninstall the application or clear your browser data.

3. PURPOSES OF PROCESSING
a) Providing the service and operating the game;
b) Examining reports of insult, harassment, cheating and similar breaches and taking action against abusive users;
c) Ensuring system and transaction security and preventing abuse;
d) Measuring and improving the quality of the service;
e) Responding to requests and complaints.

4. LEGAL BASES
Personal data is processed on the bases of the performance of a contract, compliance with a legal obligation and the legitimate interests of the controller, as set out in Article 5/2 of KVKK. For users located in the European Economic Area, the corresponding bases under the GDPR are performance of a contract, compliance with a legal obligation and legitimate interests.

5. SHARING AND SERVICE PROVIDERS
5.1. Personal data is not sold, not used for advertising and not transferred for marketing purposes. The Platform does not contain advertising or third-party analytics tools.
5.2. Data is shared only with service providers strictly necessary for providing the service: server hosting, Cloudflare (content delivery and storage of avatar images, fonts and legal texts) and, if you choose to sign in, Google or Apple as sign-in providers. These providers may process data on servers located outside Turkey.
5.3. Data may be disclosed to competent authorities where required by law.

6. VISIBILITY TO OTHER USERS
Your nickname, avatar and chat messages, and your voice where voice chat is used, are visible or audible to the other users in the same lobby.

7. VOICE COMMUNICATION
7.1. Voice chat is available on the website and in the mobile application and is provided over the Platform's own voice infrastructure. Conversations are transmitted in real time only; they are not recorded, not stored and not shared with third parties.
7.2. The mobile application accesses the microphone only while you are in a lobby where voice chat is enabled, and only if you have granted permission. You can mute your microphone at any time. The mobile application does not access the camera.

8. PHOTO ACCESS (MOBILE APPLICATION)
The mobile application requests access to your photos only when you choose to upload an avatar. Only the image you select is uploaded, and it is used solely as your avatar.

9. CONTENT FILTER AND MODERATION
Chat messages and nicknames pass through an automatic filter. The original form of content caught by the filter may be displayed only in an authorised administration interface, solely for the purpose of examining breach reports.

10. BLOCKING AND REPORTING
10.1. You can block or report another player from the player menu in the mobile application. A blocked player's chat messages are hidden from you and their voice is muted for you.
10.2. The block list of a signed-in user is stored with their account so that it remains effective on other devices; the block list of a user without an account is stored only on their device.

11. RETENTION PERIODS
11.1. Lobby, team, score and card data kept during play is deleted when the lobby closes.
11.2. Account data (Section 2.5) is kept until you delete your account. When you delete your account, your account record, uploaded avatar and block list are deleted immediately.
11.3. Security and moderation records (connection logs, chat logs, reports, feedback and contact messages) are currently not subject to automatic deletion. They are deleted upon your request, subject to retention obligations laid down by law.
11.4. Game statistics that are not linked to any person may be kept without time limit.

12. DELETING YOUR ACCOUNT AND DATA
You can delete your account in the mobile application from the Settings menu (DELETE ACCOUNT). Instructions for deleting your account, or for requesting the deletion of other data without the application, are available at https://faul.app/delete-account.txt.

13. CHILDREN
The Platform is not intended for persons under the age of 13. Where the processing of data belonging to this age group is identified, the relevant records are deleted.

14. YOUR RIGHTS
Under Article 11 of KVKK and other applicable legislation, you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of processing and whether the data is used in line with that purpose; to know the third parties to whom the data is transferred; to request the rectification of incomplete or inaccurate data and the erasure or destruction of your data; to request that such operations be notified to third parties to whom the data has been transferred; to object to a result to your detriment arising from analysis by exclusively automated means; and to claim compensation for damage suffered as a result of unlawful processing. Requests may be sent to hello@faul.app.

15. DATA SECURITY
The Platform takes appropriate technical and organisational measures to prevent the unlawful processing of personal data and unauthorised access to it. Access to the administration interface is limited to authorised persons.

16. AMENDMENTS
This Policy may be updated. The current version is published on the Platform together with its effective date.

17. CONTACT
hello@faul.app