Our Data Philosophy: Control, Clarity, & Respect.

We build tools for game developers. Your trust is our foundation. This policy isn't just legal text—it's our engineering specification for data handling. We treat your information with the same precision we apply to rendering engines.

Mockup of a privacy control dashboard showing user data management options
Visual Anchor: A hypothetical control panel interface. All user-facing data controls are designed to be this transparent and accessible.

What We Actually Collect

We collect only what is strictly necessary to provide and improve our services. The scope is defined by functional need, not data appetite.

Account & Contact Data

Name, email address, and company affiliation. Used for account creation, service delivery, and transactional communication only.

Technical & Usage Data

IP address, device type, browser information, and anonymized interaction data (e.g., feature usage frequency). This helps us diagnose performance issues and prioritize development.

Payment Information

Processed exclusively by our PCI-DSS compliant payment partners (e.g., Stripe). We do not store full credit card numbers on our servers.

Executive Summary: You own your data. We act as a processor, not an owner. Our retention is tied to active use, not indefinite hoarding. And you can delete your footprint at any time via one-click controls in your account dashboard.

When We Share Data

Data sharing is a deliberate act, governed by strict contractual agreements. We do not sell your personal information to third-party advertisers. Ever.

  • Service Providers

    Cloud hosting (AWS), email delivery (SendGrid), and payment processing. All are bound by our Data Processing Addendum.

  • Legal Compliance

    If required by law, court order, or a valid government request. We will attempt to notify you beforehand unless legally prohibited.

Diagram illustrating encrypted data transmission
Security Posture: All data in transit is encrypted via TLS 1.2+ and AES-256 for data at rest.

Your Data Rights

These are not abstract concepts—they are executable controls in your Gamelyx account.

Access & Portability

Download all your account data in a machine-readable JSON format. Critical for audits or switching platforms.

Rectification

Correct inaccurate personal information directly from your profile settings, no support ticket required.

Erasure (Right to Delete)

Request deletion of your account and associated data. This action is irreversible after a 30-day grace period.

Underlying Assumptions & Constraints

Core Assumptions

  • Users are game developers or studio leads who value privacy as a technical prerequisite.
  • Data minimization is more valuable than data enrichment for our use cases.
  • Transparency reduces support overhead and builds long-term trust.

Operational Constraints

  • Must comply with GDPR and Turkish KVKK regulations simultaneously.
  • Budget allocated for legal review is fixed; policy must be simple enough to self-explain.
  • Infrastructure must support user data export within 48 hours of request.

What Would Change Our View?

A regulatory ruling that mandates data retention beyond user intent. In such a case, we would implement separate "opt-in" tracking for compliance with full transparency and granularity controls for users.

Questions or Concerns?

Our Data Protection Officer is available to address any privacy-related inquiries. For policy updates, we'll notify active users via email at least 30 days before changes take effect.

Istiklal Caddesi No: 123, Beyoğlu, Istanbul
Mon-Fri: 9:00-18:00 (TRT)

Last Updated: 2026. This policy is a living document. We review it quarterly. Terms of Service | Cookie Policy