Privacy Policy

1. Who we are

The controller responsible for your information (the "data controller", or veri sorumlusu under Türkiye's personal data law KVKK) is:

• Mesut Duman, individual developer
• Location: Istanbul, Türkiye
• Email: support@tankgol.com

This policy covers the TankGol app on iOS and Android, our game servers and www.tankgol.com. Players in Türkiye can read the Turkish notice under KVKK Article 10 on our KVKK Aydınlatma Metni page.

2. Your TankGol account

The first time you open TankGol, the app creates a guest account on our servers automatically. You do not type anything to get one. Your account has:

• an internal account number that is never shown in the game;
• a public Player ID, such as TG-7K4XQ2M;
• a starting player name, such as Tanker1234, which you can change;
• a starting country flag, based on the country Cloudflare derives from your IP address. We do not store your IP address for this. You can change the flag later.

Your progress (gold, diamonds, energy, items, quests, league and match history) is saved on our servers. The app keeps a copy on your device, together with a random sign-in key, your Player ID and your settings (sound, graphics, controls and language).

Guest accounts can only be reached from the device that created them, through that sign-in key. If you delete the app, reset or lose the device, or switch the device to another account before connecting Apple or Google, you can no longer open the guest account, and it stays on our servers as described in section 12. If you want a guest account's data deleted, use Delete Account in the app before you uninstall it.

Connected accounts. In Settings > Account you can connect Sign in with Apple, Google, or both. You can then open the same account on another device. We receive and store only the user ID that Apple or Google creates for TankGol. We do not ask for your email address or name: Apple sign-in requests neither, and Google sign-in asks only for the basic "openid" permission. On Android, the token Google sends can also contain your email address and name; our server reads only the user ID from it and does not store the rest.

If you use Sign in with Apple, Apple also gives us a token. We keep it only so we can tell Apple to disconnect TankGol when your account is permanently deleted.

Some features need a connected account: sending and accepting friend requests (and so friend matches and tournament invitations), adding profile text, reporting players in the game, sending and receiving gifts, creating tournaments and being picked for the season tournament. Blocking works with any account. If you sign in with an Apple or Google account that already belongs to another TankGol account, the app offers to switch to that account; the progress of the guest account on the device is not merged into it.

Log Out is offered once Apple or Google is connected: it makes the device forget the account and start a new guest account, and you can return by signing in again. If you played an earlier version of TankGol that saved progress only on your device, the app can copy that saved progress to your account once.

3. Information we collect

We get information from the app as you play (partly automatically), from Apple, Google and RevenueCat when you sign in or buy something, and from you when you write to us.

• Account and sign-in: internal account number, Player ID, a hashed (scrambled) form of the app's sign-in key (never the key itself), your Apple and/or Google user ID, the Apple token described above, and the dates your account was created, updated or scheduled for deletion.
• Device and app: the platform (iOS or Android), the app version and a random ID created for each installation, which keeps your game actions in order and stops them from being applied twice. When your account is created, the app also sends a device identifier that the operating system gives to apps from the same developer (on iOS the "identifier for vendor"; on Android an ID derived from the Android ID), which we store with your account. We use it only for security and abuse prevention, such as detecting fake or mass account creation and ban evasion. It is not an advertising identifier, and it is deleted when your account is permanently deleted.
• Approximate location: only the country, which Cloudflare derives from your IP address. We use it when your account is created, to set your starting flag; each time the app starts, to send it the list of game servers near that country; and when you look for or set up an online match, to count match requests and matches per country for server planning (see section 8). For those counts, if Cloudflare cannot tell the country, we use the flag on your profile for a league search, and for your other requests and matches the country of your last match request in the past few hours. We do not store your IP address for any of this. Apart from the starting flag, we do not save this country in your account. For server planning, our server keeps the link between your account and this country only in memory, for a few hours at most, so that your friend and tournament matches are counted under the right country. The statistics themselves hold the country only in daily totals, which for about five weeks can still be checked against an account with our secret key (see section 8).
• Profile: player name, country flag, level, title, player icon, equipped tank and items, the achievements you choose to show, the dates of your last name or flag change (to apply the change limits) and, if you add them, a short profile quote (up to 120 characters) and social media usernames (up to 8, of which 2 are shown).
• Game progress: gold, diamonds, EXP, energy, items and loadout, shop and wheel results, quests, achievements, reward road progress and league and season statistics.
• Shop sales: for each shop item you buy with diamonds, the item, the diamonds paid, the time and whether you bought it from the Featured shelf. We use it to run the shop (best sellers, prices) and to handle support requests.
• Matches: matchmaking information, results and summaries of league, friend and tournament matches, your history of the last 100 matches, and replays of your matches. See section 8.
• Social: friends, friend requests, friend match requests and blocked players (each with its date), your privacy, gift and notification settings, and when you were last seen online.
• Tournaments: tournaments you create (with the name and settings you choose), invitations you send and receive, tournaments you join or watch, your check-ins (with your connection delays and game version), the match times you pick in the season tournament, and your matches and results.
• Gifts: for each gift, the sender, recipient, item, price, transaction ID, time and status, and, from the time it was sent, both players' countries and whether they were friends. See section 6.
• Inbox: the messages in your in-game inbox and whether you have read or claimed them. See section 9.
• Reports and moderation: reports you send (in the game or by email), reports about you with a snapshot of the reported profile, and any action we take, with its reason. See section 7.
• Purchases: the product, store transaction IDs, the diamonds added, the store, the purchase status and any refunds. No card or bank details. See section 10.
• Technical: when the app talks to our servers, your IP address, the time, the address requested and the app version; the network delay measured to our regional servers; after an online match, your device model and performance measurements (such as frame times, stalls, connection delay and jitter), stored with the match (see section 8); and the server log entries described in section 12.
• Notifications: your notification settings and any Notify me when found request; and, once you have answered the notification question (on Android 12 and older, at every start), your device's push token, platform, notification permission status and app version. See section 9.
• Support: your email address and whatever you tell us when you write to us.

We do not collect your real name, phone number, contacts, photos, precise location, microphone or camera data, or any advertising identifier. We only have your email address if you email us.

Account, gameplay and technical information is needed to provide the online game; without it you cannot play. Connecting Apple or Google, profile text, friends, friend matches, tournaments and gifts are optional. Receiving push notifications is optional too: you can turn them off at any time, although on Android 12 and older the app still registers its push token at every start (see section 9).

4. How we use it and why

We use information only for the purposes below. For players in the European Economic Area and the UK, the legal bases come from Article 6 of the GDPR and UK GDPR. For players in Türkiye, they come from Article 5 of the Personal Data Protection Law No. 6698 (KVKK).

• Running your account and the game: creating your account, saving and syncing your progress, sign-in with Apple or Google, matchmaking and match relays, friend matches, tournaments (including the season tournament), leaderboards, match history and replays, quests and rewards, the inbox, friends, gifts and the other features you choose to use. Legal basis: performing our contract with you, the Terms of Use (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• Delivering purchases: checking purchases with RevenueCat, adding diamonds, keeping our purchase ledger and handling refunds and chargebacks. Legal basis: contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)); our legitimate interest in handling refunds, chargebacks and fraud (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)); and, where tax or accounting law requires records, legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
• Fair play, safety and security: checking that both players report the same match result, detecting cheating (including letting players watch each other's match replays), limiting requests and new accounts to stop abuse, using the device identifier to detect fake or mass account creation and ban evasion, filtering names, profile text, social usernames and tournament names for offensive words (and profile text and social usernames also for links, email addresses and phone numbers), handling reports and moderation, flagging unusual gift patterns (such as many gifts to strangers, or gifts sent after a refunded purchase) for a person to review, and protecting our servers. Legal basis: our legitimate interest in a fair and safe game (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) and, where needed, establishing or defending legal claims (KVKK Art. 5(2)(e)).
• Your starting flag and nearby servers: picking a sensible first flag from the country of your IP address, and giving the app the list of game servers near that country. Legal basis: legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)). You can change the flag.
• Fixing problems and improving the game: troubleshooting, and balancing the game with gameplay and match data held on our own servers. Legal basis: legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• Planning game servers: counting match requests, connection delays, waiting times and matches played per day, country and server region, so we can decide where and how many game servers we need (see section 8). Legal basis: legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• Support: answering your messages. Legal basis: contract and legitimate interest (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
• Inbox and push notifications: delivering messages to your in-game inbox and, if notifications are allowed on your device (on Android 12 and older they are unless you turn them off), sending the kinds of push notifications you chose (see section 9). Legal basis: providing the service you asked for (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)). You can turn push notifications off at any time in Settings > Notifications or in your device settings.
• Legal obligations: keeping records the law requires and answering lawful requests from authorities (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).

Matchmaking, rate limits, text filters, match-result checks and gift flags run automatically, and so do the refund rules in section 10. Decisions on reports are made by a person. If an automatic check leads to action on your account, you can ask a person to review it by writing to support@tankgol.com. Where we rely on legitimate interests, you have the right to object; see section 16.

5. What other players can see

TankGol is an online game, so some information is visible to others:

• Leaderboard: rank, player name, Player ID, flag, league, league points and season statistics (such as wins, losses, draws and goals). The leaderboard is public: anyone can view it, even without the app or an account, and it can be filtered by country. The season champion (the winner of the season tournament) is marked on it.
• Player search: any player in the app, including guest accounts, can search by part of a name (at least 3 characters) or an exact Player ID and see a player card: name, Player ID, flag, level, league, title, icon and basic statistics such as wins and goals. Guest accounts appear in results too. Players who have blocked you do not appear in your results, and neither do accounts waiting to be deleted.
• Profiles: any player in the app, including guest accounts, can open your profile, for example from the leaderboard, Social, their inbox or a match history. It shows your player card; the tank, turret, ball, stadium and icon you have equipped; your profile text (see below); your achievement showcase and achievement progress; the cosmetic items you own (your collection); and your match history (see below). Players you have blocked cannot open it, and nobody can while your account is waiting to be deleted.
• Match opponents and match history: opponents see your player card at the start of a match: name, Player ID, flag, level, title, equipped tank and items, and season statistics. They keep that snapshot in their match history, and the replay of the match shows your Player ID and the items you used (see section 8). Your profile shows your last 100 matches: match type, date, score, duration, league point change, both sides' possession, shots, saves, damage and destroys, goal times and hardest shot. There, each opponent is shown with their current name, Player ID, flag, level, title and league; an opponent whose account is deleted or waiting to be deleted, or who has blocked the viewer, appears as "Player". Emotes are not listed in the history. Any player who can open your profile can also watch the replay of each of these matches until 30 days after the match, from your side; the replay they receive has no Player IDs in it, but it shows the emotes sent and the items each side used (see section 8).
• Profile text: the quote and the social media usernames you choose to show (up to 2) are part of your public profile and are meant to be seen by other players, so only add what you are happy to share publicly. Tapping a username opens that platform (a Discord name is copied instead), which has its own privacy policy.
• Requests and gifts: players you send a friend request, friend match request, tournament invitation or gift to see your player card with it.
• Tournaments: the name of a tournament you create is shown with your player card to the friends you invite. Everyone taking part in a tournament (host, players and spectators) sees each player's name, Player ID, flag, level, league and icon, the bracket and the results. A public tournament can be opened by any player who has its tournament ID; a private one only by the people in it. The season tournament is open to all players, and the season champion's name and flag are announced to all players in the game.

Your online status and "last seen" time are not public; see section 6. Other players never see your IP address, device identifier, push token, Apple or Google account, email address, payment details or purchase records (such as store transaction IDs or prices paid). The cosmetic items you own are visible in your collection, but not how or when you got them.

6. Friends, tournaments, gifts and blocking

With a connected account you can send and accept friend requests (up to 100 friends). We store your friends, pending requests and blocked players, each with its date.

Online status. While the app is open, it checks in with our server regularly. You count as online if it checked in within the last few minutes or you are in a match. We store when you were last seen (updated at most once a minute). You choose who can see this with Show Status in Settings > Privacy (it does not hide anything else, such as your profile, match history or replays):

• All (default): your friends, and players you have sent a friend request to, while the request is pending;
• Friend: your friends only;
• No: nobody.

Other players never see your online status. Players who send you a friend request do not see it unless you become friends. While your account is waiting to be deleted, nobody sees it.

Friend matches. You can challenge a friend who is online to a friendly match with MATCH REQUEST in Social. Your friend gets the request in the game and, if they allow it, as a push notification. A request lasts 5 minutes. When it is accepted, the match is played through our relays like a league match, costs each player 5 energy, gives no match rewards or league points (it still counts toward friend-match quests and achievements), and is saved in both players' match history as Friendly. If your Show Status is No, a friend who sends you a match request is not told whether you are online or in a match.

Tournaments. With a connected account you can create a tournament: you give it a name (3 to 24 characters, checked by our text filter), choose its region, size and whether it is public or private and open to spectators, and invite friends. Players can also join a public tournament's lobby with its tournament ID if the host allows it. We store the tournament, its invitations, players and spectators, each player's check-ins (with connection delays and game version), the bracket and results, and a log of forfeits, disqualifications and closures. At the end of each season, the top 16 players on the leaderboard (connected accounts that played at least one league match that season) are entered into the season tournament; before each round they pick two of three match times in their inbox, and the winner becomes the season champion.

Gifts. With a connected account at level 10 or higher you can buy a shop item with diamonds as a gift for another player (up to 3 a day), from your friends list or by Player ID; the app shows the recipient's card before you pay. We keep a gift ledger: sender, recipient, item, price, transaction ID, time, status (waiting, claimed, returned or removed), when it was claimed or closed and why, and, from the time it was sent, both players' countries and whether they were friends. We use it to deliver gifts, handle refunds and detect abuse. The recipient sees your name with the gift, and you are told when it is claimed. Gifts carry no messages. You choose who can send you gifts with Accept Gifts in Settings > Privacy (All, Friend or No); guest accounts cannot send or receive gifts.

Blocking works with any account, both ways and silently. You can block a player from the … menu on their card in Social (your friends, requests and search results) or with Block Player on their profile. Blocking removes the player from your friends, cancels any requests between you, and you are never matched against each other in league matches. The other player is not told, neither of you can send the other a friend request or a gift, and you no longer appear in their search results. You can unblock players in Settings > Blocked Players.

No free chat. In matches you can send emotes from a fixed list (GG, Hi, Easy, Sleeps, Cry, Anger), at most one every 3 seconds. They are saved with the match record and the replay.

7. Reports and moderation

Community Rules. Before you first set a player name, write profile text or name a tournament, the game shows our Community Rules and asks you to agree to the Terms of Use. The app remembers on your device that you agreed.

Reporting. With a connected account you can report a player in the game: use the report button on their profile, or REPORT in the … menu on their card in Social. You choose a reason (Cheating / Hack, Abusive behaviour, Offensive name, Offensive profile, Spam or scam) and can add details (up to 300 characters). We receive your Player ID, the reported player's ID, the reason, your details and the time, with a snapshot of the reported player at that moment (name, title, flag, level, profile quote, the social usernames shown on their profile and your last 5 matches against each other), so we can review it even if they change it later. You can report the same player once every 24 hours and send up to 20 reports a day. You can also report a player by emailing support@tankgol.com with their name or Player ID, what happened and when. We do not tell the reported player who reported them, unless the law requires it.

What we can do. A person reviews each report and may close it without action, reset the player's name to a default name (such as Player#123456; their next name change is then free), remove their profile quote and social usernames, send a warning, or suspend the account for a number of days or permanently. The player is told in the game: name resets, text removals and warnings arrive in their inbox with the reason, and a suspended player sees an "Account suspended" message with the end date (or "permanently"), the reason if we give one, and our support address. A suspended account cannot use online features, such as matchmaking, friend and tournament matches, friends, gifts, reports or purchases, until the suspension ends; it can still read its inbox and delete the account. To ask for a review, email support@tankgol.com with your Player ID.

Records. Every action is written to a log that cannot be edited, with the date, the action, the account number and our reason; the log never contains what the player wrote. A removed name or text is kept separately as evidence of the action and is deleted when that account is permanently deleted. To review a case, we look at the information needed for it, such as the player's account details, reports, matches, gifts, purchases and refunds, and earlier actions.

We keep reports for 12 months after the case is closed, and moderation records for 2 years after the action ends (for a permanently closed account, as long as its de-identified account entry exists), to deal with repeated abuse and defend legal claims.

8. Matches and replays

Finding a match. When you look for a league match, ask to be notified when one is found, or set up a friend or tournament match, the app first sends a few tiny network packets to the regional servers in its server list to measure the connection delay, so each of these servers receives your IP address (held only in memory). It does not do this in the background. The app sends these measurements with the request so we can match you with players in a suitable region and league. The app downloads the server list from our content server each time it starts. The list is chosen by the country Cloudflare derives from your IP address: it contains the servers near that country, and always those in Germany and the United States. Today it is the same for every country: our servers in Germany, Czechia, the United States and Türkiye.

During a match, both players' game inputs pass through one of our relay servers, which may be in another region when that gives the best connection. This applies to league, friend and tournament matches. The relay needs your IP address to forward the traffic and does not read or save the content of the match. It also writes your IP address and port, with the match number, to its server log when you join a match; see section 12 for how long logs are kept. Other players never see your IP address. Our game server logs each match's account numbers, region, relay and connection delay.

After a match, each player's app reports the result: the score, when and how the match ended, a checksum of the game simulation and a short summary (such as goals, kills, skills used, time played and emotes). We compare the two reports to confirm the result and spot cheating. We store the match record with both players' internal account numbers, the type of match, the season, region and relay, the scores, the outcome and league point changes. After an online match each app also sends its device model and performance measurements (the frame-rate limit, frame times, stalls while waiting for the other player, the delay and jitter to the relay, late packets and the input delay). We store them with that player's match report and use them to find and fix lag; they are not shown to other players.

Server planning statistics. To decide where and how many game servers we need, we keep daily totals for each country and server region (normally the region with your lowest measured connection delay): the number of league searches and of other match requests that measure connection delay (Notify me when found, friend matches and tournaments), the lowest delay of each league search and the waiting time until a league match is found (both only as counts per range), how many league matches were found and how many of them were placed in another region, how many matches were played, and an approximate number of different players who made these requests. These totals contain no account number, Player ID, name or IP address. The approximate player count is built from a keyed one-way code of your internal account number; the code itself is not stored. For about five weeks (normally 35 to 37 days, until our daily clean-up runs), someone holding both our secret key, which is kept only on our main server and in its backups, and these statistics could check whether a given account was probably counted in a day's totals for a country and region. After that, only the estimated number remains, and no account can be linked to it (older copies in server backups can still be checked until those backups expire; see section 12). We keep these statistics for at most 13 months and use them only for this planning.

Match history. Your last 100 matches (none older than 24 months) are kept in your account, including friend and tournament matches: time, opponent card or bot level, scores, duration, league point change, both sides' statistics (such as possession, shots, saves and damage), goal times, hardest shot and emotes. Summaries of matches against bots are also sent to our server for quests, achievements and history. Other players can see your match history on your profile (without emotes) and watch the replays of the matches in it (see section 5).

Replays. When a match ends, the app saves a replay of it, so you can watch it again with Watch Replay. A replay contains the match settings (such as the random seed, rules and bot level), both sides' control inputs, the emotes sent, the game version, both players' Player IDs and the tank, turret, ball and stadium each side used at the start of the match. It contains no video, audio, IP address or anything else from your device. Your device keeps the replays of your last 20 matches (replays of other players' matches are not saved on your device), and the app uploads each replay of 512 KB or less to our server with your account. In an online match both players' apps upload the replay; when the two recordings show the same match, we keep one copy, which each player watches from their own side (if they differ, we keep both).

Who can watch a replay:

• the players of the match (in a bot match, you), from their own match history;
• any other player in the app, including guest accounts, from the match history on a player's profile (that player's last 100 matches), for bot, league, friend and tournament matches alike, so that anyone can check a match for cheating. They watch it from the side of the player whose profile they opened, and the replay they receive has no Player IDs in it; the names they see come from the match history, where an opponent whose account is deleted or waiting to be deleted, or who has blocked them, appears as "Player". A profile they cannot open (because its player has blocked them or the account is waiting to be deleted) gives them no replays. To limit abuse, each account and each network address can download only a limited number of other players' replays per minute;
• tournament matches: also, from the tournament, its host, players, spectators and invited players who accepted, and, for the season tournament and public tournaments open to spectators, any player.

Live spectating of matches is not available. We keep replays on our server for 30 days after the match and then delete them. For bot matches we keep only your newest 100 replays (and at most 8 MB of them), so older ones may be deleted sooner. What happens to replays when an account is deleted is described in section 13.

9. Inbox and notifications

Inbox. The in-game inbox (Notifications on the main menu) holds messages from TankGol and about your account: rewards and items we send you (such as season tanks), gifts from other players and their delivery, return or removal, league promotions, season, maintenance and other announcements, tournament match times and results, the season champion announcement, and notices about moderation actions or refunds on your account. Friend, match and tournament requests are listed there too. A message with a reward stays until you claim it; other messages are removed after about a week, or when the event or shop item they are about has passed. Announcements sent to all players are written by us and do not come from other players.

Asking for permission. The game asks for permission to send notifications only after you ask us to tell you about a league opponent: when you tap Notify me when found (shown after searching for a league match for 2 minutes), or Notify Me in the question the game shows when you leave a league search. It never asks when you first open the game, and No Thanks requests nothing; if you have already turned notifications off, the game does not ask when you leave a search. After you have answered that question (and, on Android 12 and older, where apps may send notifications without asking, whenever the app starts), the app sends our server your device's push token (an address Apple or Google provides so notifications reach this app on this device), the platform (iOS or Android), on iPhone the Apple push environment of the token, whether notifications are allowed for TankGol in your device settings, and the app version. We store up to 10 devices per account. If notifications are turned off in your device settings, we keep the token but send nothing to it.

What we send. Push notifications tell you about a friend match request, a tournament invitation, a tournament match about to start, a gift, a reward we sent you, an announcement such as planned maintenance, and the Notify me when found alert. Settings > Notifications has four switches: Friend Requests, Match Requests, Tournament Requests and System Notifications (all on until you change them; friend requests currently appear only in the game). The Notify me when found alert follows only your device setting, because you asked for it. We do not send push notifications while you are playing an online match or while the game is open (it tells you itself), and we never send advertising push notifications.

Notify me when found. Tapping it, or Notify Me when you leave a league search, turns your league search into a request: we store your connection delays and game version and tell you, once, when a player you could be matched with starts searching (for example, "12 players are in the league queue now"). It does not put you into a match. With notifications allowed, the request stays active for up to 12 hours; without them, it ends when you close the game (our server notices after about 5 minutes).

Delivery. Notifications reach iPhones through Apple Push Notification service and Android phones through Firebase Cloud Messaging, a Google service the app starts using only when it registers for notifications (on Android 12 and older, at every start). Apple or Google receive the push token, the notification text (for example the name of the friend who sent a request) and a short reference, such as a Player ID or tournament number, that tells the game which screen to open.

Notifications are never required to play. You can turn them off at any time in Settings > Notifications or in your device settings. We delete a push token when you log out or switch accounts on that device, when Apple or Google tell us it is no longer valid, and when your account is permanently deleted.

10. Purchases

Diamond packs are sold through Apple's App Store or Google Play, which process the payment under their own terms and privacy policies. We never see your card or bank details.

To confirm purchases, the app uses RevenueCat (RevenueCat, Inc., USA). RevenueCat receives the purchase receipt and transaction details, an app user ID made of "tg" and your internal account number (not your name or email), basic device and app information (such as operating system and app version) and your IP address. Our server confirms each purchase with RevenueCat, adds the diamonds to your account and records it in our purchase ledger: your internal account number, the store transaction ID, the product, the diamonds added, the store (App Store or Google Play), whether it was a test purchase, and the time. The ledger makes sure a purchase is never delivered twice and lets us handle refunds. See RevenueCat's privacy policy.

If a purchase is refunded or charged back, Apple or Google tell RevenueCat, and RevenueCat tells our server. We record the refund and adjust your account as described in the Terms of Use: the diamonds from that purchase are removed, gifts sent afterwards can be taken back from the players who received them, and repeated refunds lead to a ban on sending gifts and then to suspension. A notice in your inbox explains what was removed and how to appeal. We do not tell Apple or Google how you used a purchase unless you agree to it in the game.

Our purchase ledger and refund records are kept after your TankGol account is deleted, linked only to the de-identified account entry (see section 13). RevenueCat also keeps its record of your purchases. That record contains no name or email address, but it is linked to your former internal account number. Both are kept while refunds, chargebacks or disputes for those purchases are still possible, and for as long as tax or accounting law requires, based on our legitimate interest in handling them (see section 4).

11. Service providers and transfers

We use the providers below. Providers that process information for us may use it only to provide their service to us, under written terms that require them to protect it at least as well as this policy does. Apple, Google, Unity and Discord also act for their own services under their own policies.

• Hosting provider for our main server in Germany (EU): the server that runs the database, the game API, the content server and the European match relay. The provider also keeps automatic backups (snapshots) of this server (see section 12).
• Storage provider for our database backups in the European Union: an encrypted copy of the database, made each night (see section 12). Only we hold the key that decrypts it.
• Hosting providers for our relay servers in Czechia (EU), the United States and Türkiye: match relays and connection-delay checks only (no database).
• Cloudflare (Cloudflare, Inc., USA): network protection and delivery for our game API, content server (cdn.tankgol.app) and this website. It processes IP addresses and tells us the country of a player's IP address (for the starting flag, the server list and the server planning statistics). See Cloudflare's privacy policy.
• RevenueCat (RevenueCat, Inc., USA): purchase checks and refund notices. See section 10.
• Apple and Google: the app stores, payments, Sign in with Apple and Google sign-in, and push notification delivery (Apple Push Notification service on iPhone; Firebase Cloud Messaging on Android, see Firebase's privacy information).
• Unity Technologies: TankGol is built with the Unity engine, which may send limited technical information (such as device model, operating system version and performance or crash data) to Unity. See Unity's player privacy policy.
• Our email provider (EU data centre): support email.
• Discord: only if you choose to join our community. Discord's own terms and privacy policy apply there.

International transfers. We are based in Türkiye. Our main server and our email provider are in the EU (the main server in Germany); our relay servers are in Germany, Czechia, the United States and Türkiye; and some providers are in the United States. When you look for a match or set up a friend or tournament match, the app contacts the servers in its server list to measure connection delay (see section 8; today in Germany, Czechia, the United States and Türkiye), so these servers receive your IP address (held only in memory), and a match may be relayed through any of our relay servers (players normally connect to the nearest). When information leaves the EEA, the UK or Türkiye, we use appropriate safeguards, such as standard contractual clauses, where the law requires them. You can ask us about these safeguards at support@tankgol.com.

If TankGol changes hands. If TankGol, or the business that runs it, is sold, merged or transferred, player information may pass to the new owner as part of the game and stay protected under this policy. We will tell you in the game or on this site if that happens.

12. How long we keep it

• Account, progress and social data: while your account exists. After you ask to delete it: 30 more days, then permanent deletion (see section 13).
• Guest accounts you can no longer open (for example after the app is deleted, the phone is lost or the device switched to another account) stay on our servers until they are deleted. You can ask us to delete one by email with its Player ID (see our account deletion page). Guest accounts that were never connected to Apple or Google and have not been used for 12 months may be deleted.
• Your match history: your last 100 matches, and none older than 24 months; older ones drop off automatically.
• Match records and match reports (results and statistics): while we need them for match history, leaderboards and fair-play or abuse investigations, and for at most 24 months after the match. Tournament records (brackets, results and the tournament log) are kept in the same way. Aggregated or anonymised statistics may be kept longer. After your account is permanently deleted, match records stay linked to the internal account number until they are deleted (see section 13).
• Server planning statistics (daily totals per country and server region, see section 8): at most 13 months. The approximate player count can be checked against an account only for about the first five weeks (and in server backups from that time, until they expire).
• Replays: on our server for 30 days after the match (for bot matches, only your newest 100). Your device keeps your last 20.
• Inbox messages: messages with a reward until you claim them; other messages for about a week, or until the event or shop item they are about has passed. All are deleted with your account.
• Push tokens: until you log out or switch accounts on that device, Apple or Google tell us the token is no longer valid, or your account is permanently deleted. Notify me when found requests: up to 12 hours with notifications allowed, otherwise until about 5 minutes after the game closes.
• Gift ledger, purchase ledger and refund records: while refunds, chargebacks, disputes or abuse checks are still possible, and as long as tax or accounting law requires, also after your account is deleted (then linked only to the de-identified account entry). The shop sales record is kept the same way, for shop statistics; after deletion it is linked only to the de-identified account entry. Apple and Google keep their own purchase records; RevenueCat keeps its record as described in section 10.
• Relay servers: IP addresses are held in memory during the match and written to the relay's server log (see server logs below).
• Server logs: at most 30 days. They include the account number, Player ID and starting name when an account is created, the account numbers of each match, gift and refund events, IP addresses in relay logs and abuse-limit warnings, and web server access logs.
• Server backups: our hosting provider keeps automatic backups (snapshots) of our main server, including the database, and each night we store an encrypted copy of the database with a storage provider in the European Union. Each backup is kept for a limited period and then overwritten or deleted. Deleted data, including deleted accounts, can remain in a backup until that backup expires, and then it is gone. Backups are used only to recover from failures; if we ever restore one, we apply again the account deletions requested after it was made.
• Reports and moderation records: reports for 12 months after the case is closed; moderation records for 2 years after the action ends, or for a permanently closed account as long as its de-identified account entry exists. Evidence kept from an action (such as a removed name or text) is deleted when that account is permanently deleted.
• Support emails: 2 years after the last message in the conversation.
• On your device: the app's copy of your account stays until you log out, start a new account or uninstall the app. Your device settings, your saved replays and the record that you agreed to the Community Rules stay on the device until you uninstall the app.

13. Deleting your account

In the app, open Settings > Account > Delete Account, tick the box and confirm. If you no longer have the app, follow the steps on our account deletion page.

For 30 days the account is frozen: it cannot play, buy, rename, join matchmaking, create or join tournaments, claim rewards or gifts, or connect a sign-in, and it is hidden from the leaderboard, search and friend lists and cannot receive friend requests, match requests or gifts. To undo the deletion, tick I want to restore my account. and tap RESTORE ACCOUNT on the waiting screen. Any device signed in with the same Apple or Google account can do this; a guest account can only be restored on the device that created it.

After 30 days (within about an hour), we permanently delete your sign-in keys, your Apple and Google user IDs and the Apple token (and ask Apple to revoke TankGol's access), all your progress and items, league statistics, match history, profile text, friends, requests and blocks, your inbox (including unclaimed gifts and rewards), your push tokens, notification settings and any Notify me when found request, the replays of your bot matches, your tournament invitations, spectating and chosen match times, the details you wrote in reports, and the evidence kept from moderation actions against you.

What remains after permanent deletion:

• a de-identified account entry: the internal number stays, the Player ID becomes DEL-<number>, the name becomes "Deleted Player", and the flag, level, title, equipped items, device identifier, platform, app version and privacy settings are cleared. The creation and deletion dates remain;
• match records and match reports, linked to the internal number in that entry. This makes them pseudonymous rather than anonymous. They are kept as described in section 12;
• your opponents' match history, which keeps the snapshot of your name, Player ID, flag, level, title and league from the time of the match until it drops out of their last 100 matches, their account is deleted or 24 months have passed since the match, whichever comes first (other players who open their profile see you there as "Player");
• replays of your online matches, until 30 days after the match or until your opponent's account is deleted too: your opponent can still watch them, with your former Player ID in the file, and other players can watch them from your opponent's match history, where you appear as "Player" and the replay they receive has no Player IDs;
• your place in tournament brackets and results, shown as "Deleted Player"; a tournament you created is renamed "Tournament" with its tournament ID;
• the gift ledger entries for gifts you sent or received, shown as "Deleted Player" and without your country. Items you gave other players stay with them; gifts still waiting for you are cancelled;
• our purchase ledger and refund records, for accounting and refunds (see section 10), and RevenueCat's purchase record;
• the shop sales record of items you bought with diamonds (item, diamonds paid, time, whether it was on the Featured shelf), linked only to the de-identified account entry, for shop statistics;
• reports you sent or received and our moderation log, without your text (the details you wrote and the names and texts in the report snapshot are removed), as described in section 7;
• the server planning statistics (see section 8), which contain no account number and are not changed by deleting an account; after about five weeks they cannot be linked to any account;
• copies in server backups and server logs, until they expire (see section 12).

Deleting your account does not refund purchases.

14. Security

• Connections between the app and our game API and content server are encrypted (HTTPS), including replay uploads.
• Match traffic between the app and our relays is not encrypted. It carries match numbers and game inputs, never your sign-in key or account details, and each player's entry to a match is checked with a signed ticket.
• Sign-in keys are stored on our server only in hashed form.
• Database backups are encrypted on our server before they are stored elsewhere; the key that decrypts them is not kept on our servers.
• The database and our moderation tools cannot be reached from the internet, only from our own server. Access to our servers is limited to us.
• Relay servers do not save the content of matches.

No system is completely secure. If a breach affects your information, we will inform you and the authorities as the law requires.

15. Children

TankGol is intended for players aged 13 and over. It is not directed at children under 13, and we do not knowingly collect personal information from them. If we learn that we collected personal information from a child under 13 without verifiable parental consent, we delete it. If you believe a child under 13 is playing, email us with the Player ID and we will delete the account.

Because some of our players are teenagers, TankGol has extra protections: there is no free chat, and gifts carry no messages; names may use only letters, digits, _ and -; names, profile text and tournament names are filtered for offensive words, and profile text cannot contain links, email addresses or phone numbers; the game asks you to agree to our Community Rules before you write them; players can be reported in the game and blocked; friend match requests and tournament invitations come only from friends; only your friends, and players you send a friend request to, can see when you are online, and you can turn this off; the game asks for notification permission only after you ask us to tell you about a league opponent (on Android 12 and older, where the phone does not ask, notifications are on until you turn them off); and there are no ads. If you are under 18, please read this policy with a parent or guardian.

16. Your rights

Depending on where you live, you have rights over your information. Under the GDPR and UK GDPR you can ask to access it and get a copy, correct it, delete it, restrict its use, receive it in a portable format and, where we rely on consent, withdraw it at any time (this does not affect earlier use).

Right to object: where we rely on legitimate interests (section 4), you can object at any time for reasons relating to your situation. We will stop unless we have compelling legitimate grounds or need the information for legal claims. Email support@tankgol.com.

Under KVKK Article 11 you can ask whether we process your data and for information about it, learn why it is processed and whether it is used for that purpose, learn which third parties in Türkiye or abroad receive it, ask for it to be corrected, deleted or destroyed and for those recipients to be told, object to a result against you that comes only from automated analysis, and claim compensation for damage caused by unlawful processing. The same information is available in Turkish in our KVKK Aydınlatma Metni.

US state privacy rights

If you live in a US state with a consumer privacy law, such as California: we collect identifiers (Player ID, internal account number, IP address, Apple or Google user ID, device identifier, push token), commercial information (purchase and gift records), internet or other network activity (gameplay, match data, replays and server logs), approximate location (country only) and the content you write (profile text, tournament names and report details). We get it from you, your device, Apple, Google and RevenueCat, use it for the purposes in section 4 and disclose it only to the service providers in section 11. We do not sell or share personal information (for cross-context behavioural advertising) and have no actual knowledge of selling or sharing the information of consumers under 16. You can ask to know, delete or correct your information, and we will not treat you differently for asking. You can use an authorised agent; we verify requests as described below. We do not track users across sites, so Do Not Track and Global Privacy Control signals have nothing to change here.

How to use your rights

In the app you can change your name and flag (Settings > Account), edit or remove your profile text (your profile), choose who sees your online status and who can send you gifts (Settings > Privacy), choose which notifications you get (Settings > Notifications), unblock players (Settings > Blocked Players) and delete your account (Settings > Account > Delete Account).

For anything else, email support@tankgol.com from the address you want us to reply to. Include your Player ID (Settings > Account, top right) and what you are asking for. TankGol accounts have no email or password, and Player IDs are public, so before acting we may ask for something only the account owner has, such as the order ID of a purchase or a detail we ask you to read from the app. Applications under KVKK are made the same way, by email to support@tankgol.com; if you want to use another method the KVKK application rules allow (such as registered electronic mail), email us first and we will tell you how. We answer free of charge within one month (GDPR) or 30 days (KVKK).

Complaints. You can complain to a data protection authority: in the EEA, the authority where you live or work; in the UK, the Information Commissioner's Office; in Türkiye, the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu), after first applying to us: within 30 days of learning our answer, and in any case within 60 days of your application.

17. What we do not do

• We do not show ads, use advertising identifiers or include advertising SDKs or analytics services. The Unity engine itself sends limited technical data to Unity (see section 11).
• We do not track you across other companies' apps or websites.
• We do not sell or rent personal information, or share it for advertising.
• We do not send advertising push notifications.
• There is no free-text chat and no voice chat, and gifts carry no messages.
• We set no cookies on this website, run no analytics on it and load nothing from other sites. Cloudflare hosts it, processes IP addresses to deliver and protect it, and may set strictly necessary security cookies.

18. Changes

We update this policy when TankGol changes, and before a new feature uses information in a new way (for example, if we add messages to gifts or live spectating). The date at the top of this page shows the latest version. If a change is significant, we will also tell you in the game where possible, or on this site.

19. Contact

Mesut Duman · Istanbul, Türkiye · support@tankgol.com