Privacy Policy

Effective and last updated: October 2, 2026

Karga Games (“Karga Games,” “we,” “us,” or “our”) makes and publishes video games. This Privacy Policy explains how we process personal data in all of our games on every platform where they are available, on our websites, in our newsletter, in our communications with press, content creators and business partners, and in player support (together, the “Services”).

1. Who we are

The data controller is:

2. What this policy covers

• every video game, demo, playtest, beta, update, and downloadable content that Karga Games develops or publishes, on any platform (see Section 3);
• our websites, including game pages, press pages, and the newsletter and unsubscribe pages;
• our newsletter and the service emails that belong to it;
• our communications with journalists, content creators, publishers, platform contacts, and other business partners, including sending review copies, game keys, and press material;
• player support, bug reports, feedback, and other messages you send us.

It does not cover services run by others, such as the stores and platforms where you obtain or play our games, social networks, video platforms, or payment providers. They process data under their own privacy policies. Where a game is distributed in a country by a separate local publisher or operator, that company’s notice applies to the data it collects.

3. Platforms

Our games may be offered on any of the following kinds of platform. This policy applies in the same way whichever platform you use; the details that differ between platforms are described in Section 4.

The platform operator (for example Valve, Epic Games, GOG, Microsoft, Sony Interactive Entertainment, Nintendo, Apple, Google, Meta, or the operator of a cloud or subscription service) controls your platform account, purchases, payments, friends lists, platform-wide communication and safety tools, and parental controls. It acts as an independent controller under its own privacy policy. We receive from it only the data described in Section 4 that a game needs for the features you use.

4. Personal data we process

4.1 When you play our games

• Platform account data: the identifier and public name that the platform gives the game, such as a Steam ID, Epic Account ID, GOG ID, Xbox user ID and gamertag, PlayStation Network online ID, Nintendo Account nickname, Game Center or Google Play Games player ID, or Meta user ID; your ownership or license status for the game; and your platform’s country, region, and language settings.
• Multiplayer, cross-play and account linking: lobby, session, matchmaking and invitation data, and the network information needed to connect players. If a game supports cross-play or cross-progression, it may link your platform accounts through a service such as Epic Online Services, which assigns a cross-platform player ID. Linking is optional unless a mode you choose needs it.
• In-game communications: live voice and text chat are transmitted to the other players in your session. We do not record or store chat. Platforms may apply their own moderation and safety tools to communications.
• Gameplay analytics: pseudonymous installation or device identifiers, game and platform version, operating system, device characteristics, approximate region, sessions, progression, feature use, and settings, and the IP address that the analytics service technically receives. Analytics identifiers are kept separate from platform account IDs.
• Crash and error diagnostics: crash reports, error messages, stack traces, game and system versions, device characteristics, timestamps, pseudonymous identifiers, and technical network information.
• Platform features: cloud saves, achievements and trophies, leaderboards, and friends or presence information, which the platform processes and shares with the game when you use these features.
• Purchases and downloadable content: if a game offers purchases or downloadable content, the store handles payment. We receive only what is needed to deliver and support the purchase, such as the item, a transaction or receipt identifier, the country, and the purchase status. We never receive your payment card details.
• Phone and tablet versions: device model, operating-system version, app version, language, and app-specific identifiers. Our games do not ask for your location, contacts, photos or camera. A version that offers voice chat asks for microphone permission, and a version that offers notifications asks for notification permission and a push token; you can refuse either. Our games do not access advertising identifiers (such as Apple’s IDFA or Google’s Advertising ID) and do not track you across apps and websites owned by other companies.
• Browser versions: a browser version may keep save data and settings in your browser’s local storage. If you play on a game portal, the portal may use its own cookies or advertising under its own policy.
• Reports and feedback: if a game has a report or feedback feature and you use it, we receive your message, your platform account ID, the game version, approximate playtime, and the time of submission.

The in-game privacy screen of each game names the analytics and crash-reporting services that the game uses. The services we use are listed in Section 7.

4.2 When you visit our websites

Our web host records technical and security logs such as IP address, time, requested page, response status, browser type, and referring page. Cookies are described in Section 12. When a game connects to a Karga Games server, the same kind of log is created.

4.3 Newsletter

If you subscribe, we process your email address and chosen language; the consent text and its version, the IP address and time of sign-up and of confirmation; your subscription, unsubscribe, bounce and complaint status; email delivery events and, where enabled, opens and link clicks; and the confirmation and unsubscribe tokens that operate the subscription. You can unsubscribe at any time with the link in every email or on our website.

4.4 Press, content creators and business partners

To introduce our games to people who cover or create content about games, and to work with partners, we process business contact data: name or channel name, business email address, the channels, websites or publications where you work, the platforms and languages you cover, audience size, our notes about our communication, the review copies, game keys or press material we send you, and email delivery, open and click events.

We collect this information from you, from public sources where you publish it for business enquiries (such as a channel’s “About” page, a website, or a press listing), or from colleagues and partners who introduce you. We use it only for business communication about games. You can object at any time by using the unsubscribe link in our emails or by writing to us; we then stop contacting you and keep only what we need to respect that choice.

4.5 Support and other messages

When you contact us, we process your email address, your message, any attachments, logs or screenshots you send, and our replies.

4.6 Security and abuse prevention

To protect our Services and players, we process IP addresses, session and device identifiers, platform IDs, reports of cheating, harassment or other misconduct, and any enforcement decisions.

We do not intentionally collect sensitive personal data, such as health information, religious or political views, or biometric data. Please do not include it in messages or chat.

5. Why we use personal data and our legal bases

Where the GDPR, the UK GDPR, or a similar law applies, we rely on the following legal bases. The bases under Türkiye’s data protection law are set out in the Turkish version of this policy.

Where we rely on legitimate interests, we have balanced them against your interests and rights. You can ask us for more information about this balancing.

6. Analytics choices and automated decisions

Where the law requires consent, optional gameplay analytics stay switched off until you agree on the game’s privacy screen. You can change your choice in the game’s privacy settings at any time; this stops future optional analytics. Crash diagnostics that are strictly necessary for stability and security may run on the basis of our legitimate interest where the law allows it.

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

7. Who receives personal data

We do not sell personal data and we do not share it for targeted or cross-context behavioral advertising. We disclose personal data only as follows.

Service providers working for us

These providers process personal data only on our instructions and under data processing agreements.

Platform operators

The platforms in Section 3 receive the data needed to run the game features you use on their platform (for example, achievements, leaderboards, cloud saves and multiplayer sessions), as independent controllers.

Publishing partners

Some games are released together with a publishing partner (for example, Teneke Kafalar for Chained Wheels). Unless a game’s privacy screen says otherwise, publishing partners do not receive player personal data from us.

Others

We may disclose personal data to professional advisers; to courts, authorities and law enforcement when required by law; to protect the rights, safety or property of players, Karga Games or others; and to a buyer or successor in a merger, acquisition, reorganization or sale of assets, subject to applicable law.

8. International transfers

Karga Games is established in Türkiye. Our hosting is in Germany and our email service in Sweden. Our other providers and the platform operators may process data in the European Economic Area, Türkiye, the United States, Japan, or other countries where they or their subprocessors operate. When personal data is transferred to a country that does not provide an adequate level of protection, we use a safeguard recognized by the applicable law, such as an adequacy decision, standard contractual clauses (including the standard contracts under Türkiye’s data protection law), or another lawful transfer mechanism. You can ask us for information about these safeguards.

9. How long we keep personal data

• Website, server and security logs: up to 90 days, unless needed longer for an active security incident.
• Support correspondence: up to 24 months after the request is closed.
• Reports and feedback sent from a game: up to 24 months after submission.
• Newsletter subscriber data: until you unsubscribe or the newsletter ends.
• Unsubscribe, bounce, complaint and consent records: up to 5 years after the last related event, so that we keep respecting your choice and can show that we did.
• Press, content creator and business partner records, including the game keys we sent: until you object, and no longer than 3 years after our last communication.
• Player-level data in GameAnalytics: up to 24 months. User-level and event-level data in Google Analytics: up to 14 months. Crash diagnostics in Sentry: up to 90 days.
• Multiplayer and communication data: only for the session, or as long as technically needed to transmit it.

We keep data longer only where the law requires it or where it is needed for an ongoing dispute or legal claim. After that, we delete or anonymize it.

10. Your rights

Depending on where you live, you may have the right to know whether we process your data and to receive a copy of it; to have it corrected; to have it deleted; to restrict or object to its processing (including objecting to direct marketing at any time); to receive it in a portable format; to withdraw consent at any time without affecting earlier processing; to be told who received it; and to complain to a data protection authority.

To use these rights, follow the steps on the Data Requests and Deletion page or write to legal@kargagames.com. We may ask for information that lets us find your records and confirm that they are yours, such as the platform and account ID you play with. We reply within the time your law requires: for example one month under the GDPR, 30 days under Türkiye’s law, and 45 days under US state laws, extended only where the law allows and with notice to you. Using your rights is free of charge unless a request is manifestly unfounded or excessive.

Deleting the data we hold does not delete your platform account (for example your Steam, PlayStation, Xbox, Nintendo, Apple or Google account). To manage that account and the data it holds, contact the platform.

11. Children

Our games and websites are intended for people aged 13 and older and are not directed to children under 13. Platform age ratings, child accounts and parental controls also apply. If you have not reached the age at which you may agree to terms on your own where you live, a parent or legal guardian must review and accept them for you. We do not knowingly collect personal data from children under 13, or from older minors where the law requires parental consent, without that consent. If you believe a child has given us personal data, please contact us and we will delete it.

12. Cookies and similar technologies

Our public website uses only strictly necessary cookies:

• PHPSESSID: a session cookie that protects the newsletter and unsubscribe forms against cross-site request forgery. It is deleted when you close your browser.
• kg_cookie_consent: remembers, together with a matching local-storage entry, that you closed the cookie notice. It expires after one year.

The website does not use advertising, tracking or analytics cookies. Administration areas use strictly necessary session and security cookies. Browser versions of our games may store saves and settings in your browser’s local storage, as described in Section 4.1. If we ever add optional cookies, we will ask for your consent first where the law requires it.

13. Security

We use technical and organizational measures to protect personal data, including encrypted connections, access controls with two-factor authentication, encryption of stored credentials, and access to data limited to the people who need it. No system is completely secure, so we cannot guarantee absolute security.

14. Third-party services and links

Our games and websites link to or work with services run by others, such as stores, platforms, social networks and video sites. We are not responsible for their privacy practices. Please read their privacy policies.

15. Information for specific regions

European Economic Area, Switzerland and United Kingdom

You have the rights described in Section 10, including the rights to restriction, portability and objection, and you may complain to the data protection authority where you live, where you work, or where you believe an infringement occurred.

Türkiye

The Turkish version of this policy is our information notice (aydınlatma metni) under Law No. 6698 on the Protection of Personal Data (KVKK). It sets out the categories of data, the legal reasons under the KVKK, transfers, your rights under Article 11, and how to apply to us under the Communiqué on the Procedures and Principles of Application to the Data Controller.

United States

In the last 12 months we collected these categories of personal information for the purposes in Section 5: identifiers (such as email address, platform IDs and IP address); internet or other electronic network activity (gameplay and website use); approximate location derived from IP address; audio information (live voice chat, which is transmitted but not stored); professional information (for press and content creators); and records of products obtained. We collect it from you, your device, the platforms you play on, and public sources as described in Section 4. We disclose it to the service providers and platforms in Section 7 for business purposes.

We do not sell or share personal information for cross-context behavioral advertising, we do not use it for targeted advertising or for profiling with legal or similarly significant effects, and we do not collect sensitive personal information. We have not sold or shared the personal information of consumers under 16. Retention periods are in Section 9.

Residents of California and of other states with consumer privacy laws (such as Colorado, Connecticut, Virginia, Utah, Texas and Oregon) may have the rights to know, access, correct and delete their personal information, to data portability, and to opt out of sale, targeted advertising and profiling. You may use an authorized agent; we may ask the agent for proof of authority. We will not discriminate against you for using your rights. If we decline your request, you may appeal by replying to our decision; if we deny the appeal, you may contact your state attorney general.

Canada

You may request access to and correction of your personal information and may complain to the Office of the Privacy Commissioner of Canada.

Brazil

Under the LGPD you may ask for confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or excessive data, portability, information about the public and private entities with which we share data, and information about the possibility and consequences of refusing consent, and you may withdraw consent. Our data protection contact (encarregado) can be reached at legal@kargagames.com. You may also complain to the ANPD.

Japan

When we provide personal data to recipients in other countries, we do so as described in Sections 7 and 8. You may request disclosure, correction, suspension of use or deletion of retained personal data, and information about the data protection systems of the countries where recipients are located, by contacting us.

Republic of Korea

You may request access to, correction, deletion or suspension of processing of your personal information. At the end of a retention period we delete electronic files so that they cannot be restored. Our privacy officer can be reached at legal@kargagames.com.

China

If one of our games is published in mainland China, it is operated through a locally licensed publisher or operator, whose privacy notice applies to the data it collects. We will provide any additional notice and obtain any separate consent that Chinese law requires before we process personal data for that version.

Other countries

If you live elsewhere, you have the rights your local law gives you. Contact us and we will help you use them.

16. Changes to this policy

This policy already covers all of our games and all of the platforms in Section 3, so releasing a game or bringing it to another platform does not by itself change it. Before we start a new kind of processing — for example advertising, Karga Games player accounts, anti-cheat software, recording of communications, or a new analytics or crash-reporting provider — we will update this policy and ask for consent where the law requires it. We will change the date at the top and give additional notice of significant changes where the law requires it.

17. Contact