1. Scope
This policy covers personal data processed when you use the Varyscode website (varyscode.com), our digital agency services, and the mobile, PC and web games we develop or publish. It is written to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR and the Turkish Personal Data Protection Law (KVKK), where applicable.
By using our services you acknowledge that you have read this policy. If you do not agree with it, please do not use our services.
2. Data controller
3. Data we collect
Agency clients and website visitors
- Name, company, email address, phone number and job title
- Content you share through contact forms, quote requests and project briefs
- Contract, invoice and payment details (we do not store card numbers; our payment provider does)
- Project materials you send us, such as logos, images, copy and account access details
- Technical data: IP address, browser and device type, operating system, pages visited, referring site and approximate location
Game players
- Device information: model, operating system, language, screen settings, device ID and advertising ID (IDFA / GAID)
- Gameplay data: progress, scores, inventory, settings, in-app purchases and event logs
- Account data (if any): username, email, and sign-in provider details (Google, Apple, Steam, etc.)
- Performance data: crash reports, error logs and loading times
- Information you provide when contacting support
- If a game has chat or user-generated content, the messages and content you submit
Applicants and partners
For job or collaboration applications we process your CV, portfolio and contact details.
4. How we use data
- Prepare quotes, perform contracts and deliver projects
- Provide our games, keep your account and progress, and process purchases
- Fix bugs, measure performance and improve game balance and features
- Respond to support requests
- Show and measure ads (only where our games include ads, and based on your consent where required)
- Prevent cheating, fraud and abuse, and keep our services secure
- Meet legal obligations such as tax, accounting and lawful requests from authorities
- Send news and newsletters (only with your consent; you can opt out at any time)
We do not sell your personal data.
5. Legal bases
- Contract: providing services, running the game, processing payments
- Legitimate interests: security, debugging, fraud prevention, improving our services
- Consent: marketing emails, personalized ads, non-essential cookies
- Legal obligation: retention and reporting duties required by law
8. International transfers
Some of our providers may store data on servers outside your country. Where this happens, we use appropriate safeguards such as Standard Contractual Clauses, adequacy decisions or your explicit consent, as required by GDPR and KVKK Article 9.
9. Retention
We keep data only as long as needed for the purpose it was collected. As a general rule:
- Quote and contact records: up to 3 years
- Contracts and invoices: for the legally required period (usually 10 years)
- Game accounts and progress: while the account is active, and deleted promptly on request
- Analytics and crash logs: up to 26 months
- Job applications: up to 2 years
After that, we delete, destroy or anonymize the data.
10. Security
We protect your data with encrypted connections (HTTPS), access controls, limited permissions and regular backups. No system is completely secure, but if a breach occurs we will notify affected people and authorities as the law requires.
11. Children's privacy
Our website and agency services are not directed at children. Our games may be aimed at a general or family audience. We do not knowingly collect personal data from children under 13 (or the higher age set by local law, up to 16 in some EU countries) without parental consent. If you believe a child has given us data, email privacy@varyscode.com and we will delete it promptly. We do not show personalized ads to children.
12. Your rights
Under GDPR and KVKK Article 11, you have the right to:
- Know whether we process your data and request information about it
- Access your data and get a copy
- Correct inaccurate or incomplete data
- Request deletion or destruction of your data
- Object to or restrict processing
- Receive your data in a portable format (GDPR)
- Withdraw your consent at any time
- Object to decisions made solely by automated processing that affect you
Send requests to privacy@varyscode.com. We reply within 30 days. If you are not satisfied with our response, you can complain to the Turkish Personal Data Protection Board or to the data protection authority in your country.
13. Changes
We may update this policy from time to time. We will announce significant changes on this page and, where appropriate, by email or in-game notice. The date at the top shows when it was last updated.
14. Contact
For privacy questions and requests:
Varyscode
Email: privacy@varyscode.com