AppOrbis

1. Introduction

This Privacy Policy describes how Sohonova İnteraktif Hizmetler ve Ticaret A.Ş. ("we", "us", "our", or the "Provider") handles, collects, and processes information in connection with your use of our mobile player-versus-player (PvP) game Match Cubes Battle (the "App"), available on the Apple App Store and Google Play Store.

By downloading, installing, or playing the App, you consent to the data practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not use the App.

2. Information We Process

2.1 Account and Identity Data

The App provides an online multiplayer environment and manages identities through the following layers via Google Firebase Authentication:

• Anonymous Accounts: Upon launching the App, a guest profile is automatically generated in the background using a unique, random identity string (Firebase UID) and an automated placeholder tag (e.g., Guest_XXXX). No email or passwords are required for guest access.
• Optional Account Upgrades: You may voluntarily choose to link your guest account to a permanent profile using Sign in with Apple or Google Sign-In. If upgraded, the system registers your verified email address (or an Apple-obfuscated proxy email like @privaterelay.appleid.com), username, and authorized avatar selections.
• No Real Names Collected: We do not request the fullName scope from Apple Sign-In, and we automatically clear any display name returned by Google Sign-In before storing it. Your real first or last name is not collected, stored, or displayed within the App. Your only visible identity inside the App is your chosen username (e.g., Guest_XXXX or a custom username such as EagleEye).

2.2 Online Gameplay and Infrastructure Data

To maintain fair matchmaking, ELO rankings, and multiplayer synchronization, the following values are stored across Cloud Firestore and the Firebase Realtime Database:

• Ranked & Competitive Metrics: Your current ELO rating points, win/loss records, and tier placements (Bronze, Silver, Gold, Platinum, Diamond).
• Match Ledger Logs: A historical compilation of matches played containing match identification tokens, match formats (quick, ranked, custom), chronological timestamps, win/loss tags, final scores, and abrupt disconnection flags.
• Real-Time Battle States: During an active match, only minor milestone intervals (25%, 50%, 75%, 90% progress thresholds) and vitality flags (alive/dead status) are synced dynamically to transmit your operational state to your opponent.

2.3 Device Configuration and Telemetry

• Local Preferences: Your selected localized language (tr or en), audio toggles, music setups, instructional tutorial progress, and system evaluation logs are stored locally on your device via sandbox storage engines (SharedPreferences or NSUserDefaults).
• Technical Telemetry: Basic hardware strings, operating system versions, and specific App build versions are parsed purely for compatibility checks and system optimizations.
• Force Update Controls: At boot, the App runs a minor digital handshake via a secure GET request directly to https://www.apporbis.com/match-cubes-battle/version.json to verify runtime versions.

2.4 Notifications and Store Tokens

• Push Notifications: If you explicitly grant system-level notification permissions, a unique Firebase Cloud Messaging (FCM) push token is logged securely to deliver notifications regarding matchmaking, opponent statuses, administrative ban updates, friend requests, and other gameplay-related alerts. Invalid or stale tokens are systematically flushed.
• Transactional Entitlements: Purchase logs, receipt verifications, and user entitlement tags (e.g., active remove_ads status or current booster pack totals) are matched directly to your Firebase UID via secure infrastructure pipelines managed via RevenueCat.

2.5 Data We Do NOT Track or Collect Natively

We operate under strict data minimization standards. The Provider does not natively collect or access real first or last names, physical home addresses, phone numbers, financial banking strings, IBANs, GPS positioning arrays, microphone captures, camera hardware, device contact rosters, or local physical file trees.

We currently do not integrate third-party analytics or runtime crash reporting SDKs (such as Firebase Analytics, Mixpanel, Crashlytics, or Sentry). If these technical diagnosis tools are integrated in future updates to maintain performance stability, this policy will be updated accordingly.

3. Data Disclosure to Other Users (Social Features)

Pursuant to privacy regulations (such as GDPR and KVKK), the processing activity of disclosing specific operational gameplay data to other players within the multiplayer ecosystem is executed under the following conditions:

• Username Search & Discoverability: Other registered players can actively search for your custom user profile by typing your exact username into the friend system interface.
• Friend Lists & Statuses: If a mutual connection is established, your online presence status, total ELO rankings, and tier details become visible to that specific friend.
• Public Leaderboards: Your custom username, ELO ranking scores, and historical tier status are publicly displayed to other players on both global League Leaderboards and localized Friend Leaderboards.
• Custom Lobbies: If you participate in or share a 6-digit access code/link for a custom lobby match, your customized profile elements are visible to all current participants within that room.

4. Legal Basis for Processing

We process your technical data under the following legitimate regulatory principles:

• Performance of a Contract: Necessary to execute real-time online matchmaking, maintain synchronized competitive battles, track virtual asset inventories, and preserve your profile progression.
• Legitimate Interests: Required to enforce anti-cheat protocols, issue match-abandonment safety restrictions, verify build version health, and secure infrastructure channels.
• Consent: Collected where you actively trigger specific features, such as enabling runtime push notifications or approving sign-in upgrades via Apple or Google profiles.

5. First-Party Advertisements and Cross-Promotion

The App currently features zero external third-party ad networks (such as Google AdMob). There are no dynamic third-party tracking pixels or behavioral ad cookies deployed.

• Internal Cross-Promotions: Upon finishing every 10 complete match cycles, a local, pre-packaged video advertisement promoting our separate application (tube_pop) will play. Tapping this internal announcement redirects you natively to the official Apple App Store or Google Play Store download page. No background tracking tags are deployed.
• Opt-Out: Players can entirely and permanently remove these internal cross-promotional videos by purchasing the optional "Remove Ads" item within the store interface.
• Future Implementations: If third-party advertising networks (such as Google AdMob) are integrated in future updates, we will update this policy accordingly and request the necessary operating system-level tracking permissions, including the App Tracking Transparency (ATT) prompt for iOS users.

6. Third-Party Subprocessors and Global Transfers

To deliver robust, scalable multiplayer servers, the Provider securely collaborates with select cloud entities who operate strictly under data processing agreements as "Data Processors":

• Google Firebase Infrastructure: Cloud Firestore data points reside within the European Union region cluster (eur3), Realtime Database and Cloud Functions operate out of the europe-west1 node, and FCM manages token distribution across secure multi-region architectures. (Privacy Link: https://policies.google.com/privacy)
• Apple & Google Identity Engines: Authenticates valid profile links and executes transaction validations. (Privacy Links: https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy)
• RevenueCat Inc.: Assesses store entitlements and monitors in-app virtual purchases via encrypted anonymous tags tied to your random Firebase UID. (Privacy Link: https://www.revenuecat.com/privacy)

Cross-Border Data Transfers: Because these subprocessors operate globally, certain secure authentication hashes or metadata vectors may transit through structures across the European Union and the United States. We utilize Standard Contractual Clauses (SCCs) to guarantee compliance with regional frameworks (including GDPR and KVKK).

7. Data Retention and Destruction

• Profile Records: Your anonymous or verified user profiles remain active until you initiate a manual erasure request or following 24 months of total, continuous account inactivity.
• Match Ledger Logs: Historical match records and operational multiplayer scores are retained for the duration necessary to provide matchmaking, global rankings, statistical displays, and dispute resolution services. We periodically review data retention frameworks and may transition to standardized time-limited retention patterns (such as a rolling 90-day automated deletion cycle) as the application service matures.
• Enforcement Disconnection Logs: Disconnection histories and ban records are maintained for up to 12 consecutive months to evaluate recurring offenses and secure anti-cheat integrity.
• Active Match Data: Real-time synchronization metrics inside the Realtime Database layer are automatically purged immediately post-match or dropped after 1 hour of session stagnation.

8. Children's Privacy

The App is tailored for competitive general audiences and is rated 13+ (Apple App Store) / Teen (Google Play Console). It is not structurally intended for or directed toward children under 13 years of age under COPPA and local child protection codes. We do not knowingly harvest information from individuals under 13. If you suspect an individual under 13 has established local database profiles, please notify us immediately at info@apporbis.com to facilitate immediate erasure.

9. Data Security

We incorporate modern technical strategies to defend our data layers, executing TLS 1.2+ encryption for all transit requests and employing Google's native at-rest encryption protocols across Firestore and Realtime Database systems. Despite these safeguards, no electronic storage platform or network transmission can ever be certified as completely impenetrable.

10. Your Rights (GDPR / KVKK)

Depending on your regional residency (such as under GDPR Chapters or KVKK Article 11), you hold distinct data protection rights. You maintain the right to access your registered datasets, correct alphanumeric usernames, request overall restrictions, or enforce the total erasure of your user history.

In strict compliance with global platform mandates (including Apple App Store Guideline 5.1.1(v) and Google Play Account Deletion policies), the App provides a direct, native account deletion mechanism within the game interface. Users can permanently wipe their entire structural data portfolio (including Firebase Auth data, Cloud Firestore profiles, and associated records) instantly by navigating to Settings → Delete Account inside the App. Alternatively, administrative support queries or manual data export requests can be directed to info@apporbis.com.

11. Changes to This Privacy Policy

The Provider reserves the right to revise this Privacy Policy at any time to reflect structural additions, multiplayer updates, or regulatory shifts. Revisions instantly become binding upon updating the "Effective Date" at the top of this document.

12. Contact Us

For any inquiries regarding data protection practices, you may reach us at:

Sohonova İnteraktif Hizmetler ve Ticaret A.Ş.
Email: info@apporbis.com
Website: https://www.apporbis.com
Country: Turkey

Note for local compliance: Pursuant to KVKK frameworks within the Republic of Turkey, a localized Turkish translation of this document must be published and accessible alongside this English version to satisfy statutory information obligations for Turkish residents.

1. Acceptance of Terms

By downloading, installing, accessing, or playing Match Cubes Battle (the "App"), you explicitly agree to be legally bound by these Terms and Conditions ("Terms"). These Terms form a legally binding contract between you (the "User" or "Player") and Sohonova İnteraktif Hizmetler ve Ticaret A.Ş. ("we", "us", "our", or the "Provider"). If you do not accept these provisions, you must immediately remove the App and cease all interactions with our multiplayer services.

2. License to Use

The Provider grants you a limited, personal, non-exclusive, non-transferable, non-sublicensable, and revocable license to download and play the App on authorized personal mobile devices solely for private, non-commercial entertainment purposes. This license does not grant you any ownership stake or intellectual property rights in the underlying software code, algorithmic systems, or creative assets.

3. Account Creation, Player Visibility, and Matchmaking Mechanics

3.1 Eligibility and Age Requirements

By utilizing our online matchmaking framework, you represent that you have reached at least 13 years of age (or the minimum applicable age of digital consent required in your specific country of residence). If you are at least 13 but under 18 years of age (or under the age of majority where you live), you represent that you have reviewed these Terms with a parent or legal guardian who explicitly agrees to be bound by these criteria.

3.2 Registration, Profile Visibility, and Automated Matchmaking

• Profile Configuration: The App automatically builds an unlinked anonymous profile in the cloud upon execution, generating a placeholder nickname (e.g., Guest_XXXX). Players may link this guest tracking layer to verified identities utilizing Sign in with Apple or Google Sign-In protocols to safeguard records across multi-device configurations.
• Username Regulations: Users must configure custom usernames between 3 and 16 characters. Usernames must comply with public decency standards. The system automatically restricts the utilization of the word Guest_ as a prefix, reserving it for systemic allocations. The Provider retains the absolute right to strip, rename, or ban profiles containing vulgar, offensive, or infringing naming strings.
• Social and Data Visibility: Because Match Cubes Battle is an inherently multiplayer competitive environment, your selected username, active avatar, league standing, and ELO metrics are considered public-facing game elements. This data may be displayed to, searched by, or made visible to other players via global leaderboards, friend lists, custom matchmaking lobbies, and active match pairing screens.
• Automated Matchmaking (Bots): To ensure optimal queue times and continuous gameplay functionality, if a suitable human opponent is not found within a short matchmaking window, the App may match you with an automated opponent (bot). The App does not visually distinguish bots from human players in-game, and these sessions will interact normally with your ELO ranking metrics.

3.3 Native Account Deletion

In strict compliance with global digital marketplace distribution requirements, the App provides a direct, fully functional, and native account deletion mechanism within the user interface. Users can permanently delete their entire profile and cloud data footprint instantly by navigating to Settings → Delete Account inside the game. Triggering this option permanently destroys your profile logs, rankings, and cloud records.

4. Prohibited and Acceptable Conduct

The online nature of our match arrays demands strict compliance with balanced performance rules. You explicitly agree that you shall not, under any circumstance:

• Decompile, reverse engineer, disassemble, modify, parse, or scrape the source files, matchmaking network scripts, or operational packages of the App.
• Implement, distribute, or utilize cheats, trainers, macro engines, automation scripts, bot plugins, modified APK/IPA packages, or unauthorized external software tools designed to disrupt gameplay balance, inflate ELO thresholds, or modify virtual inventory counts.
• Bypass, disable, exploit, or falsify server-authoritative validation rules or purchase confirmation certificates.
• Intentionally create or utilize multiple alternative profiles for the express purpose of evading active administrative bans, manipulating matchmaking mechanics, or "smurfing" inside lower competitive ELO tiers.

5. In-App Purchases and Billing

5.1 Virtual Asset Categories

The App offers virtual transaction routes processed via Apple StoreKit and Google Play Billing, which map to entitlement profiles utilizing RevenueCat:

• Consumable Products: Multi-pack booster units (Color Packs, Row Packs, Bomb Packs, Combo Packs) that yield short-term strategic modifications during active matches.
• Non-Consumable Products: "Remove Ads" options that permanently strip first-party static video advertisements and cross-promotions from your interface layout.

5.2 Payment Gateways and Pricing

All economic payments are handled completely and directly by Apple Inc. or Google LLC transaction nodes. The Provider never views, intercepts, or catalogs your banking numbers, debit card digits, or billing invoices. Regional costs, currencies, and localized tax adjustments are governed directly by Apple or Google store matrices.

5.3 Refund Commitments, Recovery, and Statutory Rights

• Refund Framework: Except as outlined below, all virtual purchases are final and non-refundable by the Provider. If you seek structural reversals or billing disputes, you must contact Apple or Google platform support channels directly.
• Booster Inventory Restoration: Your consumable booster balances are secured via cloud architecture database layers tied directly to your user authentication ID. If you have linked your game profile using Sign in with Apple or Google Sign-In, your consumable asset balances will automatically restore upon re-logging into your account. Unlinked anonymous Guest accounts, however, risk losing virtual booster balances permanently if the App storage data is cleared or uninstalled prior to establishing an identity link.
• Statutory Consumer Protection Override: Where mandatory consumer protection laws (including the Turkish Consumer Protection Law No. 6502 and EU Consumer Rights Directives) grant you explicit statutory withdrawal, retraction, or cooling-off rights regarding digital content, those rights shall apply notwithstanding the foregoing general final-sale restriction. However, you acknowledge that performance begins immediately upon tapping to buy, which may exhaust your right of withdrawal for immediate digital fulfillment under local statutes.

6. Gameplay Integrity, Anti-Cheat, and Abandon Penalties

To defend the competitive multi-user space against disruptive behaviors, the App uses server-controlled metrics to manage player etiquette:

• Match Disconnection Suspensions: Intentionally or repeatedly leaving, closing, or abandoning active live matches triggers automated penalty timers. Suspensions scale incrementally from 60 minutes up to permanent multiplayer locks for systemic infractions based on rolling operational analysis windows.
• Rank Reductions: Abandoning an active competitive match triggers automated reductions in your competitive ELO parameters, counting as an automatic defeat while preserving the victory ranking and ELO rewards of the remaining player.

7. Advertisements and Cross-Promotions

The App contains static cross-promotional videos for our secondary product (tube_pop) played after every 10 completed matches. These materials are self-contained first-party bundle media assets and do not call out to external tracking pixels or third-party behavioral advertisement servers (such as Google AdMob). You acknowledge that these first-party cross-promotional video assets may appear during standard use unless muted via the "Remove Ads" permanent store purchase.

8. Intellectual Property

The App, including all original source code repositories, underlying matchmaking algorithms, server-authoritative functions, visual art layouts, game balance grids, animations, background audio tracks, level design parameters, and the proprietary "Match Cubes Battle" name and branding trademarks, is the exclusive property of Sohonova İnteraktif Hizmetler ve Ticaret A.Ş. and is protected under global trademark, patent, and copyright conventions.

9. Disclaimer of Warranties

THE APP IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, OPERATIONAL FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. THE PROVIDER DOES NOT WARRANT THAT MULTIPLAYER SESSIONS WILL BE ENTIRELY UNINTERRUPTED, FREE OF TEMPORARY LATENCY SPIKES, ERROR-FREE, OR FULLY COMPATIBLE WITH EVERY WIRELESS NETWORK INFRASTRUCTURE.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAWS, IN NO EVENT SHALL SOHONOVA İNTERAKTİF HİZMETLER VE TİCARET A.Ş. BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF COMPETITIVE ELO RANKS, DELETION OF LOCAL BOOSTER INVENTORIES, CORRUPTION OF GUEST PROFILES, OR MOBILE HARDWARE FAILURES. OUR CUMULATIVE LIABILITY ARISING OUT OF THESE TERMS SHALL NOT EXCEED THE TOTAL AGGREGATE FINANCIAL SUMS PAID BY YOU TO US WITHIN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE CLAIM.

11. Modification, Force Updates, and Forward-Looking Terms

• Force Updates: We reserve the right to deploy mandatory software updates via our servers. The Provider may require you to download and update to a minimum supported runtime version of the App; older versions may cease to function entirely until updated.
• Virtual Item Modifications: We reserve the right to modify gameplay balance configurations or level design criteria to preserve ecosystem health. However, in strict accordance with consumer protection mandates, material balance adjustments directly depreciating or changing the fundamental utility of unconsumed, paid virtual products will be handled transparently with fair notice or equivalent structural alternatives.
• Seasonal Content and Future Features: The Provider may introduce recurring seasonal events, league tier resets, competitive tournaments, or time-limited challenges in future software updates. These forward-looking events may be governed by additional dynamic terms, which will be incorporated into this agreement upon their active implementation.

12. Governing Law and Jurisdiction

These Terms shall be governed by, interpreted, and construed exclusively under the national laws of the Republic of Turkey, without regard to its conflict of law principles. Any legal actions, proceedings, or contractual disputes arising from this multi-user software shall be submitted to the exclusive jurisdiction of the Central Courts and Enforcement Offices of Istanbul, Turkey.

13. Severability

If any single provision or clause outlined in these Terms is declared unlawful, void, or unenforceable by a court of competent jurisdiction, that specific clause shall be severed from the document without impacting the validity, legality, and enforceability of all remaining clauses.

14. Contact Us

For clarifications, dispute notices, or technical policy questions concerning these Terms, please contact us at:

Sohonova İnteraktif Hizmetler ve Ticaret A.Ş.
Email: info@apporbis.com

Note for local compliance: Pursuant to regulatory consumer and information frameworks within the Republic of Turkey, a localized Turkish translation of this document must be published and accessible alongside this English version to satisfy statutory information obligations under the Law on Protection of Consumers No. 6502.