Legal
Privacy Policy
Last updated: 25 July 2026 · Version: 2.0
Data controller: Atekian · Contact: atekiandev@gmail.com
The app — sections 1–9
1. Summary
- The game is playable without an account. You get an anonymous identifier on first launch; we never ask for your name, email, or phone number.
- If you want to secure your progress, you can optionally link your account to Apple or Google. If you do, the provider may send us your email address and name.
- Playing online creates a persistent profile: your nickname, game statistics, and leaderboard points are stored on our servers. Your nickname and statistics are visible to other players.
- The app contains Google AdMob ads, Firebase Analytics measurement, and purchases via RevenueCat.
- Our servers are inside the European Union (Google Cloud, europe-west1). Service providers may transfer data outside the EU, including to the United States.
- You can delete your account and server-side data from inside the app, immediately and irreversibly.
- In-game coins have no real-world monetary value and cannot be cashed out; the game contains no gambling or betting.
2. Data controller and contact
We develop this app under the name Atekian and we are the party responsible for processing your data. For anything privacy-related — including access, correction, and deletion requests — there is one address: atekiandev@gmail.com
We respond to requests within 30 days at the latest.
3. Data we process
The table below covers every category of data the app actually processes.
An honest note about retention: today the app has no mechanism that automatically deletes finished match records or past leaderboard periods. Where the table says "indefinitely", it genuinely means indefinitely — we would rather write this plainly than promise a retention period we do not enforce. What happens to your share of these records when you delete your account is listed item by item in section 9.
| Data | Examples | Why we process it | Legal basis | How long it stays |
|---|---|---|---|---|
| Your device preferences | Display name, language, theme/deck/pawn choice, sound settings, tutorial seen | Opening the game with your settings | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c (performance of a contract) | Only on your device; deleting the app deletes it |
| Anonymous identifier | A randomly generated code | So online play can recognise you | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Until you delete your account |
| Linked account (optional) | Apple/Google provider identity; email and name received from the provider | Keeping your progress across devices | GDPR Art. 6(1)(a) · KVKK Art. 5/1 (explicit consent) | Until you delete your account |
| Your nickname — public | The unique name you choose (3–16 characters) | Being recognised at the table and on the leaderboard | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Until you delete your account or change the name |
| Nickname reservation | The lowercased form of your name → your identifier | Preventing two people from taking the same name | GDPR Art. 6(1)(f) · KVKK Art. 5/2-f (legitimate interest) | Released immediately when you delete your account |
| Your game statistics — public | Matches played/won, hands played, safe/reverse choices, successful Jack hunts, highest hand score, win streaks | Profile and competition | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Until you delete your account |
| Your coins and cosmetics — private | Coin balance, owned themes/decks/pawns, reward counters | Game economy and anti-cheat | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Until you delete your account |
| Your daily streak and Lucky Game | Which day of the streak you are on, when you last claimed it, how many games you have finished today | Granting the daily rewards | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Until you delete your account |
| Your mission progress | The state of your daily and weekly missions, rewards claimed, which match was counted | Running the missions and not counting the same match twice | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Until you delete your account |
| Your table style — the label is public | A summary of your last 20 online matches (hands played, reversed picks, Jack hunts, whether you won) and the style label derived from it | Showing how you play on your profile | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Until you delete your account |
| Your profile frame — public | The id of the frame you have equipped | Profile appearance | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Until you delete your account |
| Your feedback note — private | The topic you choose and any optional text you write (up to 1200 characters) | Improving the game and understanding problems | GDPR Art. 6(1)(a) · KVKK Art. 5/1 (optional submission) | Until you delete your account; the raw note is deleted with it |
| Anonymous feedback totals | Total counts for feedback topics and optional account-deletion reasons | Understanding product trends independently of identity | GDPR Art. 6(1)(f) · KVKK Art. 5/2-f | Indefinitely; contains no identity, raw text, or re-identification key |
| Match state | Seats and names at the table, moves, game state, winner | Running the server-authoritative match and being able to audit fairness | GDPR Art. 6(1)(b), 6(1)(f) · KVKK Art. 5/2-c, 5/2-f | Indefinitely (no deletion mechanism) |
| Your personal match history | Score, rank, and opponent names for your recent matches | So you can see your match history in your profile | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Last 20 matches; older entries deleted automatically |
| Your matchmaking ticket | Your identifier, the name shown at the table, a rough skill estimate, when you joined the queue | Matching you through "Quick Play" | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Deleted automatically within 10 minutes |
| Your leaderboard entry — public | Your nickname, points, match and win counts, equipped pawn | Weekly and monthly rankings | GDPR Art. 6(1)(b) · KVKK Art. 5/2-c | Indefinitely (past periods are not deleted) |
| Ad and purchase receipts | Transaction id, your identifier, coins granted, product id | Making sure the same reward is not granted twice; fraud defence | GDPR Art. 6(1)(f) · KVKK Art. 5/2-f | Indefinitely — deliberate; survives account deletion |
| Analytics events | Game started/ended, hand ended, store opened, cosmetic purchased, ad watched, queue joined/matched + the app instance id generated by Firebase, device/OS/country | Measuring where the game gets hard and what works | GDPR Art. 6(1)(f) · KVKK Art. 5/2-f | Subject to Google's Firebase Analytics retention setting |
| Advertising data | Advertising identifier (Android AAID / iOS IDFA), IP address and coarse (country/region) location derived from it, impressions and clicks | Serving, capping, and measuring ads | GDPR Art. 6(1)(a) · KVKK Art. 5/1 if you consented; Art. 6(1)(f) for non-personalised ads if you did not | Subject to Google's policy |
| Remote configuration | Downloading settings such as queue wait time and table size | Changing settings without shipping a release | GDPR Art. 6(1)(f) · KVKK Art. 5/2-f | Sends no user data |
| Abuse prevention | Your identifier + how many times per minute you called an operation | Stopping automated or runaway requests | GDPR Art. 6(1)(f) · KVKK Art. 5/2-f | 60 seconds; held only in server memory, never written to the database |
| Server logs | Your identifier + the event that occurred (e.g. "account deleted") | Debugging and security | GDPR Art. 6(1)(f) · KVKK Art. 5/2-f | Google Cloud Logging default retention |
We never put personal data in analytics events. Your nickname, room code, invite details, and identifier are not parameters of any analytics event.
When you play on a single device (solo, pass-and-play, against bots), no game data leaves your device apart from ads and analytics.
4. Your nickname is public
The nickname you choose and your game statistics are visible to other players. You are listed on the leaderboard; any player who taps your row can see your name, your equipped pawn and profile frame, your table-style label, your rank, and your statistics.
So do not put your real name, email, phone number, school, workplace, or anything else identifying into your nickname. The nickname is entirely your choice; nowhere in the game do you need to share your real identity.
What is not visible: your coin balance, the cosmetics you own, your reward counters, your daily streak, your mission progress, the feedback notes you send, and the email of the Apple/Google account you linked are shown to no player. For table style only the label is public; the match summary behind it stays private.
Moderation. Nicknames pass three server-side checks: a format rule (3–16 characters, must start with a letter, letters/digits/underscore only), an inappropriate-content filter, and a uniqueness check. If an inappropriate name gets past the filter, we reset it on the server upon report and the player has to choose a new one. If you believe a nickname is harassing you, write to atekiandev@gmail.com.
Changing your name: the first nickname is free and immediate. Later changes cost 200 coins and can be made once every 7 days (both values may be updated; the value the app shows you is the one in force).
5. Third parties and international transfers
Our servers are in Google Cloud's europe-west1 (Belgium) region; the database and server functions run there. The providers below may transfer data outside the EU and Türkiye, including to the United States, while processing it.
| Service | What is sent | Purpose |
|---|---|---|
| Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Logging, Remote Config) — policy | Your anonymous identifier, nickname, statistics, match and queue data | The entire online infrastructure |
| Firebase Analytics (Google) — policy | Event names and numeric parameters, app instance id, device/OS/country | Product measurement |
| Google AdMob — how Google uses data for ads | Advertising identifier, IP, coarse location, ad interaction | Ad serving and measurement |
| Google User Messaging Platform — policy | Your ad consent choice | EEA/UK/TR consent screen |
| RevenueCat — policy | Your Firebase identifier, purchase and receipt data, device/country | Validating purchases and crediting coins to your account |
| Apple — policy | Your identity details if you link with Apple; App Store purchases; iOS tracking permission status | Account linking, payment, tracking permission |
| Google Play — policy | Your identity details if you link with Google; Play purchases | Account linking, payment |
Basis for transfers: these transfers are necessary to provide the service (GDPR Art. 44–49, KVKK Art. 9). Providers process the data under EU Standard Contractual Clauses (SCCs) and their own commitments. For consent-based processing such as ad personalisation, the basis is your explicit consent, which you can withdraw at any time.
"Hide My Email" when linking with Apple. If you use Apple's "Hide My Email" option while linking, we receive a relay address generated by Apple rather than your real email address. We recommend it.
6. Your consent and choices
- Ad consent. In regions such as Europe (EEA/UK) and Türkiye, a consent screen (Google User Messaging Platform) appears before the first ad; you choose personalised or non-personalised ads there. If you decline, ads continue but are not personalised.
- iOS tracking permission. On iOS, the system App Tracking Transparency prompt appears. If you decline, you see non-personalised ads.
- Device settings. You can reset your advertising identifier or turn personalisation off entirely at any time (Android: Settings → Google → Ads · iOS: Settings → Privacy & Security → Tracking).
- Removing ads. A one-time "Remove Ads" purchase turns off interstitial ads. Rewarded ads (the ones you optionally watch to earn coins) remain.
- Account linking is entirely optional. If you do not link, no identity data of yours goes to Apple or Google. If you change your mind, deleting your account also removes the link.
- An honest note about analytics: there is currently no switch inside the app that turns analytics off. We write this plainly rather than present an option that does not exist. Analytics events contain no identifier of yours; if you nevertheless want to be excluded from all measurement, write to atekiandev@gmail.com.
7. Children's privacy
The app is for people aged 13 and over. It is not directed specifically at children, is not in the stores' "Kids/Families" category, and does not knowingly collect personal data from anyone under 13. Ads are for a general audience.
If you notice that a child under 13 has sent us data, write to atekiandev@gmail.com and we will delete the record.
8. Your rights
Under GDPR and KVKK Art. 11 you have the following rights:
- Information and access: to learn which of your data is processed and request a copy
- Rectification: to have incorrect or incomplete data corrected
- Erasure: to have your data deleted (you can do this instantly from inside the app — section 9)
- Objection: to object to processing based on legitimate interest
- Withdrawal of consent: to withdraw consent for consent-based processing (ad personalisation, account linking)
- Data portability: to receive your data in a structured format
- Compensation: to claim damages for harm caused by unlawful processing
- Complaint: to complain to the Turkish Personal Data Protection Authority (kvkk.gov.tr) or, in the EU, to your country's data protection authority
How to apply: write to atekiandev@gmail.com. Mentioning your in-app nickname (if you have one) helps us verify your request. We respond within 30 days at the latest, free of charge.
9. Deleting your data
You can delete your account from inside the app: Profile → Account and data → Delete account → two-step confirmation. Deletion is immediate and irreversible; you do not need to email us or wait.
What is deleted: your nickname and its reservation (the name is released immediately), your public profile, your game statistics, your coin balance and purchased cosmetics, your daily streak and mission progress, your table style and profile frame, the raw text of any feedback notes you sent, your personal match history, your leaderboard entries from all periods, your pending matchmaking ticket, the invite rooms you hosted, and your anonymous identity itself (together with any Apple/Google link).
What is not deleted, and why:
- Finished match records — they contain other players' data too; the name you used at that table remains as a seat name in the match history of the people you played with.
- Ad reward and purchase receipts — these records prevent the same reward being granted twice and defend against fraud. They contain no personal data beyond your identifier.
- Store purchase records (App Store / Google Play / RevenueCat) — these are tied to your store account and we have no authority to delete them.
Two exceptions:
- Your account cannot be deleted while a match is in progress. Try again once the match ends (a few minutes at most).
- Data on your device is separate. To remove your preferences, delete the app from your device.
If you have lost access to the app, write to atekiandev@gmail.com; we will resolve your request within 30 days. Step-by-step walkthrough: Account & Data Deletion.
The website — section 10
10. About this website
This section covers only the jackhunt13.com website; the sections above were about the app. The site has no sign-in, membership, or comments; we ask you for nothing.
Cookies and measurement
The site uses Google Analytics 4 for measurement, running under Google Consent Mode v2. The default state is denied: until you accept, analytics and ad storage are off, which means no cookie is written to your browser. If you do not consent, Google receives only a cookieless, aggregated measurement signal.
If you choose Accept in the consent box at the bottom of the page, analytics storage is enabled and these are written:
| Name | Type | What it does | Duration |
|---|---|---|---|
_ga | Google Analytics cookie | Distinguishes your browser across repeat visits | 2 years |
_ga_<measurement id> | Google Analytics cookie | Keeps session state | 2 years |
jh13-consent | Browser storage (localStorage — not a cookie) | Remembers your choice in the consent box so it is not asked on every page | Until you clear it |
Changing your mind: clearing this site's data (cookies and site storage) in your browser is enough — the consent box appears again on your next visit. You can also block cookies entirely in your browser settings; the site works fully without them.
There are no ads on this site and no advertising cookies are written. Fonts are served from our own server; no request goes to a font CDN.
Hosting
The site is hosted on Vercel. As with any website, the server processes your IP address, browser information, and the page you requested in technical logs while serving the request; this is necessary to run the site and prevent abuse (GDPR Art. 6(1)(f) · KVKK Art. 5/2-f). Vercel keeps these for its own retention periods and its servers may be outside your country.
11. Changes
We may update this policy from time to time. For a material change, the "Last updated" date and version number change; changes that expand how the app processes data are written here before they take effect.
Version history: 2.0 (25 July 2026) — added persistent profile, nicknames, leaderboards, account linking, analytics, RevenueCat, and the account deletion flow. 1.0 — initial release text.
Related pages: Terms of Use · Account & Data Deletion · Support