This Privacy Policy explains how Stoneity Yazılım Anonim Şirketi (“Stoneity”, “we”) processes personal data when you play Map Instinct on iOS or Android and when you visit https://mapinstinct.stoneity.com. If anything is unclear, write to us at info@stoneity.com.
Who is responsible
The data controller is Stoneity Yazılım Anonim Şirketi, İçerenköy Mahallesi Üsküdar-İçerenköy Yolu Caddesi Bodur İş Merkezi, 34752 Ataşehir/İstanbul, Türkiye. You can contact us about anything in this policy at info@stoneity.com.
We process personal data in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for players in the European Economic Area, the United Kingdom and Switzerland, the General Data Protection Regulation (GDPR) and its UK and Swiss equivalents.
At a glance
- You can play without an account and without giving us your name or email address.
- Other players can see your username, flag, level, public game statistics and medals, for example when they tap your avatar on a leaderboard. Your settings and sign-in details are never shown to them.
- The game is free and shows ads through Google AdMob. Where the law requires it, we ask for your consent before ads are personalised, and you can change your choice at any time.
- We do not sell your personal data.
- You can delete your account and all data linked to it from the app.
Information we process
The data we process depends on how you use the game. This table lists every category.
| Category | What it includes | Why we use it |
|---|---|---|
| Game profile | A random player ID created on first launch, your username (generated for you or chosen by you), your flag country, the date you joined and your in-game settings, such as language, sound, haptics, region preference and notification choices. Your flag country is the country of your App Store or Google Play account, or your device's region setting when that cannot be read, until you choose another country or no flag. | To run your profile, keep your settings and show your name in the game. |
| Gameplay and progress | Your scores, the answers you give and how long they took, accuracy, combos, streaks, the XP, level and medals you earn, a history of your ranked games and your Daily Challenge results and streak. | To score games, check that submitted scores are genuine, award XP and medals, show your statistics and run the leaderboards and the Daily Challenge. |
| Duels and friends | Your duel rating and record, the duels you played including your opponent and the answers given, your friends and friend requests, the players you block, reports you send or that are made about you, including the reason and any details written, and any suspension of your account. | To match players, run duels fairly, let you play with friends and keep players safe. |
| Linked sign-in (optional) | If you link Sign in with Apple or Google: the account identifier the provider gives us, the email address it shares (Apple may share a private relay address) and, for Apple, a token we keep only so we can revoke the link when you delete your account. | To let you restore your profile on another device. |
| Device and session | Sign-in session tokens, which we store only as irreversible hashes, your platform and app version, a notification token, the app language and your time zone offset. | To keep your profile secure and to send the notifications you allowed, such as a duel invitation or a Daily Challenge reminder at a suitable local time. |
| Usage events and crash reports | Events inside the app, for example that a round started or ended, which mode was played or that an ad was shown, with the time, platform and app version, and, when the app fails, the error message and technical trace. | To understand how the game is used, fix problems and improve it. |
| Advertising data | Processed by Google AdMob as described in the section on advertising: your device's advertising identifier where permitted, IP address, device and app information, ad interactions and your consent choice. | To show ads, measure them and prevent ad fraud. |
| Technical data | Your IP address and the time of each request when the app or your browser contacts our servers. | To protect the service against abuse, for example by limiting the number of requests. It is not stored in the game database. |
The app does not ask for or collect your precise location, contacts, photos, camera or microphone.
What other players can see
Map Instinct is played with and against other people, so part of your profile is visible to other players inside the game.
Leaderboards and duels
Leaderboards show your flag, your username, your rank and your score. During a duel, your opponent sees your flag, your username and your score as the match goes on.
Your player profile
When another player taps your avatar or username, for example on a leaderboard, in a duel or in their friends list, the game shows them your player profile. It contains:
- your username, your flag and the date you joined
- your total games, best score, best combo, accuracy and current streak
- your level and its league, and the medals you have earned, with the date of each and what each asks for
- after your first duel: your ranked duels, wins, losses, draws and win rate, and your duel rating and highest rating once your first duels have settled it
- whether you are friends or have a pending friend request with that player and, only if you are friends or recently played a duel against each other, whether you are on a duel screen at that moment
Your player profile never shows your settings, whether you linked Apple or Google, your email address, your game history, your device data or any report.
Your choices
- Choose a username that does not reveal your real name. You can change it in the app at any time.
- Your flag starts as the country of your App Store or Google Play account. You can choose another country, or show no flag at all, on your profile at any time.
- If you block a player, they can no longer open your profile, it looks to them as if you do not exist, and any friendship or friend request between you ends. They are not told that you blocked them, and you can unblock them later.
- You can report a player's username or behaviour from their profile with Report.
- Deleting your account removes your profile, your leaderboard entries and your friend connections.
Reports and suspensions
We review reports within 24 hours. If a player breaks the rules in our Terms of Service, we may suspend their account: it is removed from all leaderboards, its username is reset and it can no longer be used to play.
Why we process data and on which legal basis
| Purpose | Legal basis |
|---|---|
| Providing the game: your profile, scores, leaderboards, the Daily Challenge, duels, friends and linked sign-in | Performance of our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Showing your public profile information to other players | Performance of our contract with you, because leaderboards and duels are part of the game (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Security, abuse prevention, checking scores and keeping players safe | Our legitimate interest in a fair and safe game (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Usage events and crash reports to fix and improve the game | Our legitimate interest in a working game that keeps getting better (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Personalised ads and, on iPhone and iPad, access to the advertising identifier | Your consent, which you can withdraw at any time (GDPR Art. 6(1)(a); KVKK Art. 5(1)) |
| Non-personalised ads | Our legitimate interest in keeping the game free, and your consent where the law requires it for storing or reading information on your device |
| Push notifications | Your permission, which you control in your device settings |
| Keeping records and responding to authorities | Compliance with legal obligations (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
Advertising and your consent
Map Instinct is free because it shows ads. The ads are provided by Google AdMob. Google processes the data it collects for ads under its own privacy policy.
- Consent in Europe. In the European Economic Area, the United Kingdom and Switzerland, the game shows Google's consent form before ads can be personalised. You can change your choice at any time in Settings, under Support and legal, with Ad privacy options.
- iPhone and iPad. The app asks for permission to use your device's advertising identifier through Apple's App Tracking Transparency. If you decline, it is not used.
- Without consent you still see ads, but they are not personalised based on your activity in other apps and websites. Google may still use limited data to deliver and count ads and to prevent fraud.
- Other ad networks. If we add other ad networks through AdMob, they are named in the consent form and receive data only in line with your choices.
Learn more in Google's Privacy Policy and on how Google uses information from apps that use its services. You can also reset or delete your advertising identifier in your device settings.
Who receives data
We do not sell your personal data. We share it only with these recipients, and only as far as they need it:
- Google: AdMob for ads, Firebase Cloud Messaging for notifications and Sign in with Google if you link it.
- Apple: Sign in with Apple if you link it and Apple's notification service.
- Cloudflare: traffic between the app, this website and our servers passes through Cloudflare's network, which protects it against attacks.
- Other players: the public profile information described above.
- Authorities: when we are legally required to, or to protect the rights and safety of players and Stoneity.
The game's map images come with the app or are loaded from our website, https://mapinstinct.stoneity.com, so no outside map service receives your data.
Our servers are operated by Stoneity in Türkiye. Service providers work for us under contracts that limit how they may use the data.
International transfers
Your data is stored on servers in Türkiye. Some of the recipients above, such as Google, Apple and Cloudflare, process data in other countries, including the United States and member states of the European Union. When data leaves Türkiye, the European Economic Area or the United Kingdom, we rely on the safeguards the law provides, such as standard contractual clauses, or on your explicit consent where the law requires it.
How long we keep data
| Data | Kept for |
|---|---|
| Profile, settings, statistics, level, XP, medals, friends and duel rating | Until you delete your account |
| Ranked game history and the all-time leaderboard | Until you delete your account |
| Daily and weekly leaderboard entries | 14 days for daily boards and 60 days for weekly boards |
| Score checks for submitted games | 30 days |
| Daily Challenge results | 400 days |
| Answers recorded during duels | 30 days |
| Sign-in sessions | Up to 365 days after they were last used |
| Notification tokens | 60 days after the app last checked in |
| Usage events | 30 days, after which only daily totals remain that do not identify anyone |
| Crash reports | 30 days |
| Linked sign-in, reports and suspensions | Until the account they belong to is deleted |
| Technical server logs | A short time, in logs that are overwritten automatically |
When your account is deleted, finished duels remain in your opponents' match history with an identifier that no longer leads to your name or profile.
Deleting your account
You can delete your account yourself in the app: open Settings, go to Account, tap Delete account and confirm with Delete permanently. Your profile and the data linked to it are deleted straight away. See exactly what is deleted.
If you can no longer open the app, write to info@stoneity.com.
Your rights
Depending on where you live, you have the right to:
- find out whether we process your data and receive a copy of it
- have inaccurate data corrected
- have your data deleted
- restrict processing, or object to processing based on our legitimate interests
- receive your data in a portable format
- withdraw your consent at any time, without affecting processing that took place before
- find out who received your data, including abroad, and claim compensation for damage caused by unlawful processing
Under the KVKK these are your rights in Article 11. To use any of them, write to info@stoneity.com. To protect your profile, we may ask you to show that it is yours, for example with your username and the email address of a linked account. We reply within 30 days.
You can also complain to a data protection authority: in Türkiye the Personal Data Protection Authority (KVKK), or the authority in the country of the European Economic Area or the United Kingdom where you live.
If you live in a US state with a privacy law: we do not sell personal data. You can stop ads from being personalised by turning off ad personalisation or ad tracking in your device settings.
Children
Map Instinct is made for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13, or under the age of digital consent in their country. If you believe a child has given us personal data, write to us and we will delete it.
Security
Connections to our servers are encrypted, session tokens are stored only as hashes, access to our systems is limited to the people who need it, and we keep data only as long as described above. No system is perfectly secure, but we work to protect your data, and where the law requires it we will inform you and the authorities of a breach.
This website
https://mapinstinct.stoneity.com uses no cookies, no analytics and no content from other websites; even its fonts come from our own server. Your language choice is saved in your browser's storage on your device and is never sent to us. As with any website, our server and Cloudflare receive your IP address and the pages you open, which we use only to deliver and protect the site.
Changes to this policy
We update this policy when the game or the law changes. The date at the top shows the current version. If a change significantly affects how we use your data, we will also tell you in the app.
Contact
Stoneity Yazılım Anonim Şirketi, İçerenköy Mahallesi Üsküdar-İçerenköy Yolu Caddesi Bodur İş Merkezi, 34752 Ataşehir/İstanbul, Türkiye. Email: info@stoneity.com.