SuperDuck Games Teknoloji A.Ş.
Global Privacy Policy
*Last Updated: 25 July 2025*
SuperDuck Games Teknoloji A.Ş. (“SuperDuck,” “we,” “us,” “our,” and “the ducks") develops and publishes free‑to‑play mobile and online games (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, transfer, and store information when you use any of our games, websites, forums, or other online offerings—regardless of platform—so that you may understand your rights and our responsibilities.
SuperDuck Games Teknoloji A.Ş.
Global Privacy Policy
*Last Updated: 25 July 2025*
SuperDuck Games Teknoloji A.Ş. (“SuperDuck,” “we,” “us,” “our,” and “the ducks") develops and publishes free‑to‑play mobile and online games (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, transfer, and store information when you use any of our games, websites, forums, or other online offerings—regardless of platform—so that you may understand your rights and our responsibilities.
SuperDuck Games Teknoloji A.Ş.
Global Privacy Policy
*Last Updated: 25 July 2025*
SuperDuck Games Teknoloji A.Ş. (“SuperDuck,” “we,” “us,” “our,” and “the ducks") develops and publishes free‑to‑play mobile and online games (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, transfer, and store information when you use any of our games, websites, forums, or other online offerings—regardless of platform—so that you may understand your rights and our responsibilities.
1 Quick Reference
Information We Collect
Why & How We Use Information
Legal Bases (GDPR)
Sources of Data
When We Share Data
Website & Cookie Technologies
Regional Privacy Notices
Your Privacy Choices & Rights
Managing Accounts, Ads, & Communications
Data Security
Data Retention
Children’s Privacy
International Transfers
Contact Us
Changes to This Policy
1 Quick Reference
Information We Collect
Why & How We Use Information
Legal Bases (GDPR)
Sources of Data
When We Share Data
Website & Cookie Technologies
Regional Privacy Notices
Your Privacy Choices & Rights
Managing Accounts, Ads, & Communications
Data Security
Data Retention
Children’s Privacy
International Transfers
Contact Us
Changes to This Policy
2 Information We Collect
The categories of personal data we collect depend on how you interact with the Services. We may collect:
Category | Examples (non‑exhaustive) |
|---|---|
Identifiers / Contact Data | Player name, platform ID, device ID/advertising ID, email address, IP address, country |
Protected Demographics | Date of birth, age bracket, gender (where permitted) |
Commercial & Transaction Data | Purchases, virtual‑item balances, subscription status, refund history |
Gameplay & Telemetry | Level progression, session length, clicks/taps, crash logs |
Device / Technical Info | Device model, OS version, screen resolution, language, connection type |
Location Data | Approximate location (country/region); precise GPS only with express consent |
User Content | Chat messages, forum posts, avatars, support tickets, survey responses |
Marketing Preferences | Opt‑ins/opt‑outs, push‑notification settings |
Inferences & Segments | Engagement profile (e.g., “puzzle enthusiasts”), predicted spending tier, churn risk |
2 Information We Collect
The categories of personal data we collect depend on how you interact with the Services.
We may collect:
Category | Examples (non‑exhaustive) |
|---|---|
Identifiers / Contact Data | Player name, platform ID, device ID/advertising ID, email address, IP address, country |
Protected Demographics | Date of birth, age bracket, gender (where permitted) |
Commercial & Transaction Data | Purchases, virtual‑item balances, subscription status, refund history |
Gameplay & Telemetry | Level progression, session length, clicks/taps, crash logs |
Device / Technical Info | Device model, OS version, screen resolution, language, connection type |
Location Data | Approximate location (country/region); precise GPS only with express consent |
User Content | Chat messages, forum posts, avatars, support tickets, survey responses |
Marketing Preferences | Opt‑ins/opt‑outs, push‑notification settings |
Inferences & Segments | Engagement profile (e.g., “puzzle enthusiasts”), predicted spending tier, churn risk |
2 Information We Collect
The categories of personal data we collect depend on how you interact with the Services.
We may collect:
Category | Examples (non‑exhaustive) |
|---|---|
Identifiers / Contact Data | Player name, platform ID, device ID/advertising ID, email address, IP address, country |
Protected Demographics | Date of birth, age bracket, gender (where permitted) |
Commercial & Transaction Data | Purchases, virtual‑item balances, subscription status, refund history |
Gameplay & Telemetry | Level progression, session length, clicks/taps, crash logs |
Device / Technical Info | Device model, OS version, screen resolution, language, connection type |
Location Data | Approximate location (country/region); precise GPS only with express consent |
User Content | Chat messages, forum posts, avatars, support tickets, survey responses |
Marketing Preferences | Opt‑ins/opt‑outs, push‑notification settings |
Inferences & Segments | Engagement profile (e.g., “puzzle enthusiasts”), predicted spending tier, churn risk |
3 Why & How We Use Information
We process personal data to:
Provide the Services – create accounts, enable gameplay, remember progress, process payments, and deliver social features.
Operate & Improve – fix bugs, analyse performance, run LiveOps events, operate anti‑cheat systems, personalise features, and develop new content.
Protect Players & SuperDuck – detect fraud, enforce our Terms of Service, ensure fair play, and maintain security.
Communicate with You – respond to support requests, send service messages, and deliver transactional receipts.
Market & Monetise – show contextual or personalised offers, in‑game ads, emails, and push notifications (with opt‑out options).
Comply with Law – satisfy tax, accounting, consumer‑protection, and regulatory obligations.
3 Why & How We Use Information
We process personal data to:
Provide the Services – create accounts, enable gameplay, remember progress, process payments, and deliver social features.
Operate & Improve – fix bugs, analyse performance, run LiveOps events, operate anti‑cheat systems, personalise features, and develop new content.
Protect Players & SuperDuck – detect fraud, enforce our Terms of Service, ensure fair play, and maintain security.
Communicate with You – respond to support requests, send service messages, and deliver transactional receipts.
Market & Monetise – show contextual or personalised offers, in‑game ads, emails, and push notifications (with opt‑out options).
Comply with Law – satisfy tax, accounting, consumer‑protection, and regulatory obligations.
3.1 Legal Bases under the EU/UK GDPR
Where the EU/UK GDPR applies, we rely on the following bases:
Contract – processing necessary to perform our contract with you (e.g., provide gameplay).
Legitimate Interests – fraud prevention, analytics, marketing to existing players, and product improvement (balanced against your rights).
Consent – push notifications, personalised ads, precise location, or marketing emails (you may withdraw anytime).
Legal Obligation – records retention, taxation, children’s‑privacy compliance.
Vital Interests – protect the safety of players or others.
3.1 Legal Bases under the EU/UK GDPR
Where the EU/UK GDPR applies, we rely on the following bases:
Contract – processing necessary to perform our contract with you (e.g., provide gameplay).
Legitimate Interests – fraud prevention, analytics, marketing to existing players, and product improvement (balanced against your rights).
Consent – push notifications, personalised ads, precise location, or marketing emails (you may withdraw anytime).
Legal Obligation – records retention, taxation, children’s‑privacy compliance.
Vital Interests – protect the safety of players or others.
4 Sources of Data
Directly from you – account creation, purchases, surveys, support.
Automatically – via SDKs, cookies, and similar tracking as you play or browse.
Platform Providers – Apple, Google, Facebook, or other sign‑in services (subject to their privacy settings).
Payment Processors – if you make a purchase.
Advertising & Analytics Partners – device IDs and event tags used for attribution and performance measurement.
4 Sources of Data
Directly from you – account creation, purchases, surveys, support.
Automatically – via SDKs, cookies, and similar tracking as you play or browse.
Platform Providers – Apple, Google, Facebook, or other sign‑in services (subject to their privacy settings).
Payment Processors – if you make a purchase.
Advertising & Analytics Partners – device IDs and event tags used for attribution and performance measurement.
5 When We Share Data
We disclose personal data only:
With service providers (cloud hosting, customer support, analytics, anti‑fraud, payment processing) bound by confidentiality and data‑processing agreements.
For advertising & measurement with ad networks/attribution partners (limit‑ad‑tracking honoured; opt‑out mechanisms provided).
With other players through leader boards, guilds, or public chat (information you choose to display).
For legal or safety reasons (court orders, regulatory audits, enforcing terms, protecting rights).
With acquirers in connection with mergers, acquisitions, or asset sales (subject to due diligence and notice).
With your consent – e.g., if you link an external social‑media account.
We do not sell personal data for monetary value and, where required (e.g., California), provide opt‑out choices for “sale” or “sharing” for cross‑context behavioural advertising.
5 When We Share Data
We disclose personal data only:
With service providers (cloud hosting, customer support, analytics, anti‑fraud, payment processing) bound by confidentiality and data‑processing agreements.
For advertising & measurement with ad networks/attribution partners (limit‑ad‑tracking honoured; opt‑out mechanisms provided).
With other players through leader boards, guilds, or public chat (information you choose to display).
For legal or safety reasons (court orders, regulatory audits, enforcing terms, protecting rights).
With acquirers in connection with mergers, acquisitions, or asset sales (subject to due diligence and notice).
With your consent – e.g., if you link an external social‑media account.
We do not sell personal data for monetary value and, where required (e.g., California), provide opt‑out choices for “sale” or “sharing” for cross‑context behavioural advertising.
6 Platform‑Specific Disclosures
6.1 Apple App Store Privacy Labels
For each iOS/iPadOS/tvOS/macOS app, we submit Apple’s required Nutrition Labels detailing:
Data Linked to You – identifiers, usage data, diagnostics, purchases, and contact info necessary for gameplay and support.
Data Used to Track You – device ID for ad attribution and analytics (opt‑in via App Tracking Transparency prompt).
You can view an app’s label on its App Store product page.
6.2 Google Play Data Safety Section
For Android apps we disclose, via Google Play Console, the categories of data collected, purposes, sharing, and security practices. Within each app you can review:
Data collected automatically (e.g., crash logs, analytics)
Data you provide (e.g., chat, payment info)
Sharing with third parties (e.g., ad networks)
6.3 Advertising Identifier Controls
iOS – Settings › Privacy & Security › Tracking (toggle per‑app) or “Reset Advertising Identifier.”
Android – Settings › Privacy › Ads › “Delete advertising ID” or opt‑out of personalised ads.
6.4 Website & Cookie Technologies
We use cookies, software development kits (SDKs), web beacons, pixels, and local storage (collectively, “cookies”) on our websites and in‑app browsers to recognise you and your devices, enhance functionality, measure performance, and serve relevant advertising.
Cookie Category | Purpose | Examples |
Essential | Enable core site functionality, security, and network management | Session‑ID cookie, CSRF token, Cloudflare edge cookie |
Functional | Remember choices to provide enhanced, personalised features | Language preference, region selector |
Performance / Analytics | Help us understand usage patterns and improve performance | Google Analytics (_ga), Mixpanel (_mixpanel), crash‑reporting SDKs |
Advertising & Social Media | Deliver personalised ads, limit ad frequency, measure campaign efficacy, enable social sharing | Meta Pixel (_fbp), Google Ad Manager (IDE), TikTok Pixel (_ttp) |
Managing Cookies & Similar Technologies
Cookie Banner & Preference Centre – the first time you visit our website, a banner lets you accept, reject, or customise non‑essential cookies. You can revisit these choices anytime via the “Cookie Settings” link in the footer.
Browser Controls – most browsers allow you to block or delete cookies. Essential cookies are required for core site features; blocking them may impair the Service.
Global Privacy Control (GPC) & Do Not Track (DNT) – we honour GPC signals and, where legally required, DNT headers as opt‑outs for sale/sharing and tracking.
Mobile App Tracking – you can limit SDK‑level tracking via device settings (see §6.3) or through in‑app privacy options, which disable analytics or personalised ads on request.
6 Platform‑Specific Disclosures
6.1 Apple App Store Privacy Labels
For each iOS/iPadOS/tvOS/macOS app, we submit Apple’s required Nutrition Labels detailing:
Data Linked to You – identifiers, usage data, diagnostics, purchases, and contact info necessary for gameplay and support.
Data Used to Track You – device ID for ad attribution and analytics (opt‑in via App Tracking Transparency prompt).
You can view an app’s label on its App Store product page.
6.2 Google Play Data Safety Section
For Android apps we disclose, via Google Play Console, the categories of data collected, purposes, sharing, and security practices. Within each app you can review:
Data collected automatically (e.g., crash logs, analytics)
Data you provide (e.g., chat, payment info)
Sharing with third parties (e.g., ad networks)
6.3 Advertising Identifier Controls
iOS – Settings › Privacy & Security › Tracking (toggle per‑app) or “Reset Advertising Identifier.”
Android – Settings › Privacy › Ads › “Delete advertising ID” or opt‑out of personalised ads.
6.4 Website & Cookie Technologies
We use cookies, software development kits (SDKs), web beacons, pixels, and local storage (collectively, “cookies”) on our websites and in‑app browsers to recognise you and your devices, enhance functionality, measure performance, and serve relevant advertising.
Cookie Category | Purpose | Examples |
Essential | Enable core site functionality, security, and network management | Session‑ID cookie, CSRF token, Cloudflare edge cookie |
Functional | Remember choices to provide enhanced, personalised features | Language preference, region selector |
Performance / Analytics | Help us understand usage patterns and improve performance | Google Analytics (_ga), Mixpanel (_mixpanel), crash‑reporting SDKs |
Advertising & Social Media | Deliver personalised ads, limit ad frequency, measure campaign efficacy, enable social sharing | Meta Pixel (_fbp), Google Ad Manager (IDE), TikTok Pixel (_ttp) |
Managing Cookies & Similar Technologies
Cookie Banner & Preference Centre – the first time you visit our website, a banner lets you accept, reject, or customise non‑essential cookies. You can revisit these choices anytime via the “Cookie Settings” link in the footer.
Browser Controls – most browsers allow you to block or delete cookies. Essential cookies are required for core site features; blocking them may impair the Service.
Global Privacy Control (GPC) & Do Not Track (DNT) – we honour GPC signals and, where legally required, DNT headers as opt‑outs for sale/sharing and tracking.
Mobile App Tracking – you can limit SDK‑level tracking via device settings (see §6.3) or through in‑app privacy options, which disable analytics or personalised ads on request.
7 Regional Privacy Notices
7.1 European Economic Area & United Kingdom
Controller – SuperDuck Games Teknoloji A.Ş.
DPO – privacy@superduck.games
EU Representative – privacy@superduck.games
Rights – access, correction, deletion, restriction/objection, portability, and complaint to a Supervisory Authority.
7.2 California (CCPA/CPRA)
Residents of California have the rights to:
Know categories and specific pieces of personal information collected.
Delete personal information (subject to exceptions).
Opt‑out of sale/sharing (cross‑context ads).
Correct inaccurate information.
Limit use/disclosure of sensitive personal information.
Submit requests at privacy@superduck.games or in‑app. We verify identity as required by law.
7.3 Brazil (LGPD), Japan (APPI), Türkiye (KVKK), & Other Jurisdictions
We honour local rights to access, correct, delete, or object to processing, subject to verification and applicable statutes.
7 Regional Privacy Notices
7.1 European Economic Area & United Kingdom
Controller – SuperDuck Games Teknoloji A.Ş.
DPO – privacy@superduck.games
EU Representative – privacy@superduck.games
Rights – access, correction, deletion, restriction/objection, portability, and complaint to a Supervisory Authority.
7.2 California (CCPA/CPRA)
Residents of California have the rights to:
Know categories and specific pieces of personal information collected.
Delete personal information (subject to exceptions).
Opt‑out of sale/sharing (cross‑context ads).
Correct inaccurate information.
Limit use/disclosure of sensitive personal information.
Submit requests at privacy@superduck.games or in‑app. We verify identity as required by law.
7.3 Brazil (LGPD), Japan (APPI), Türkiye (KVKK), & Other Jurisdictions
We honour local rights to access, correct, delete, or object to processing, subject to verification and applicable statutes.
8 Your Privacy Choices & Rights (Global)
Right | How to Exercise |
Access / Portability | Request a copy of data via in‑app form or email. |
Correction | Edit profile in‑app or contact support. |
Deletion | Use in‑app delete account tool or email privacy@superduck.games |
Withdraw Consent | Toggle push/marketing settings, deny tracking prompts, or email us. |
Opt‑out of Personalised Ads | Device settings (see §6.3) or privacy controls in game settings. |
Appeal (where available) | If we deny a request, you may appeal via privacy@superduck.games |
8 Your Privacy Choices & Rights (Global)
Right | How to Exercise |
Access / Portability | Request a copy of data via in‑app form or email. |
Correction | Edit profile in‑app or contact support. |
Deletion | Use in‑app delete account tool or email privacy@superduck.games |
Withdraw Consent | Toggle push/marketing settings, deny tracking prompts, or email us. |
Opt‑out of Personalised Ads | Device settings (see §6.3) or privacy controls in game settings. |
Appeal (where available) | If we deny a request, you may appeal via privacy@superduck.games |
9 Managing Accounts, Ads, & Communications
Push Notifications – disable in your device notifications settings or in‑game options.
Emails & SMS – click “unsubscribe” or reply “STOP.”
Cookies & Similar Tech – adjust browser settings or use industry opt‑out tools (DAA/NAI/EDAA). Our websites honour Global Privacy Control (GPC) signals where required.
9 Managing Accounts, Ads & Communications
Push Notifications – disable in your device notifications settings or in‑game options.
Emails & SMS – click “unsubscribe” or reply “STOP.”
Cookies & Similar Tech – adjust browser settings or use industry opt‑out tools (DAA/NAI/EDAA). Our websites honour Global Privacy Control (GPC) signals where required.
10 Data Security
We implement administrative, technical, and physical safeguards—encryption in transit/rest, least‑privilege access, secure coding practices—to protect data. No system is 100% secure, but we continuously test and improve our defences.
10 Data Security
We implement administrative, technical, and physical safeguards—encryption in transit/rest, least‑privilege access, secure coding practices—to protect data. No system is 100% secure, but we continuously test and improve our defences.
11 Data Retention
We retain personal data only as long as necessary for the purposes described (game operation, legal compliance, dispute resolution). When data is no longer required, we delete or de‑identify it in accordance with our retention schedule.
11 Data Retention
We retain personal data only as long as necessary for the purposes described (game operation, legal compliance, dispute resolution). When data is no longer required, we delete or de‑identify it in accordance with our retention schedule.
11 Data Retention
We retain personal data only as long as necessary for the purposes described (game operation, legal compliance, dispute resolution). When data is no longer required, we delete or de‑identify it in accordance with our retention schedule.
12 Children’s Privacy
Our Services are intended for a general audience. We do not knowingly collect personal data from children under 13 (US/COPPA) or under the applicable age of digital consent without verifiable parental consent. If you believe we have mistakenly collected such data, please contact us so we can delete it.
12 Children’s Privacy
Our Services are intended for a general audience. We do not knowingly collect personal data from children under 13 (US/COPPA) or under the applicable age of digital consent without verifiable parental consent. If you believe we have mistakenly collected such data, please contact us so we can delete it.
13 International Transfers
We are headquartered in Türkiye, with servers and partners worldwide. When we transfer personal data to countries without “adequate” protection under EU/UK law, we rely on:
Standard Contractual Clauses approved by the European Commission/UK ICO.
Data Privacy Framework participation (where applicable) or equivalent safeguards.
13 International Transfers
We are headquartered in Türkiye, with servers and partners worldwide. When we transfer personal data to countries without “adequate” protection under EU/UK law, we rely on:
Standard Contractual Clauses approved by the European Commission/UK ICO.
Data Privacy Framework participation (where applicable) or equivalent safeguards.
14 Contact Us
Email: privacy@superduck.games
Postal (Head Office): Üniversite Mah, Sarıgül Sk. B Blok, No:37/1, İç Kapı No:28 Avcılar/İstanbul
If you are an EEA resident, you may also contact our EU Representative (details on our website) or lodge a complaint with your local Supervisory Authority.
14 Contact Us
Email: privacy@superduck.games
Postal (Head Office): Üniversite Mah, Sarıgül Sk. B Blok, No:37/1, İç Kapı No:28 Avcılar/İstanbul
If you are an EEA resident, you may also contact our EU Representative (details on our website) or lodge a complaint with your local Supervisory Authority.
15 Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced in‑game or on our website. Where required, we will seek your consent. Continued use of the Services after the effective date constitutes acceptance of the revised policy.
© 2025 SuperDuck Games Teknoloji A.Ş. All rights reserved.
15 Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced in‑game or on our website. Where required, we will seek your consent. Continued use of the Services after the effective date constitutes acceptance of the revised policy.
© 2025 SuperDuck Games Teknoloji A.Ş. All rights reserved.