Privacy Policy.

1. Who we are and what this covers

MOON PUNCH SOFTWARE TECHNOLOGIES LIMITED COMPANY ("MOON PUNCH", "we", "us", or "our") is a game development company based in Istanbul, Türkiye. We are the data controller when we decide why and how personal data is processed.

This Privacy Policy applies to moonpunchgames.com and to MOON PUNCH games, apps, websites, customer support, online features, and related services that link to this policy (collectively, the "Services"). Third-party platforms and services are governed by their own privacy notices.

2. Data we may collect

Depending on the Service and how you use it, we may collect the following categories:

We may receive data directly from you, automatically from your device, or from platform operators, sign-in providers, analytics providers, advertising partners, and other vendors used by a particular Service. We may also process aggregated or de-identified information that cannot reasonably identify you.

3. How and why we use data

We use personal data to:

• provide, operate, personalize, save, and improve the Services;
• create and manage accounts, multiplayer features, purchases, and customer support;
• measure performance, understand usage, fix bugs, balance gameplay, and develop new features;
• protect users, enforce our terms, prevent cheating, fraud, abuse, and security incidents;
• send service messages and, with consent where required, marketing communications;
• show or measure advertising where a Service is ad-supported; and
• comply with law, resolve disputes, and protect legal rights.

Where applicable law requires a legal basis, we rely on performance of a contract, our legitimate interests, consent, and compliance with legal obligations. You may withdraw consent at any time, without affecting processing already carried out lawfully.

4. How we disclose data

We may disclose data only as reasonably necessary to:

• Service providers: hosting, cloud storage, analytics, crash reporting, customer support, security, moderation, email, payment, and development vendors working for us;
• Platforms and product partners: app stores, console networks, game platforms, login providers, publishers, and co-development partners involved in delivering a Service;
• Advertising partners: if a Service includes ads, subject to your consent and opt-out choices where required;
• Legal and safety recipients: authorities, advisers, or other parties when reasonably necessary to comply with law, protect rights and safety, or investigate misuse; and
• Business transaction recipients: parties involved in a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

Public or multiplayer features may make your chosen username, profile, scores, or user-generated content visible to other users. Product-specific notices will identify material third-party SDKs or partners where appropriate.

5. Advertising, analytics, and cookies

Some future Services may use analytics, attribution, or advertising SDKs. These partners may process device identifiers, IP address, approximate location, app activity, and ad interactions under their own notices. Where required, we will request consent and provide controls to limit personalized advertising.

We do not sell personal data for money. Some laws may define certain advertising disclosures as a "sale" or "sharing". Where those rules apply, we will provide a legally required opt-out and honor applicable browser or device-based preference signals.

Our website may use essential cookies, server logs, and similar technologies. Embedded content, externally hosted images, or linked services may also receive technical information such as your IP address. Any non-essential cookie or advertising use will be disclosed through appropriate controls where required.

6. Retention and deletion

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including providing the Service, maintaining security, meeting legal or accounting obligations, resolving disputes, and enforcing agreements. Retention periods depend on the data type, the product, account status, legal requirements, and operational need. We then delete or de-identify the data, unless continued retention is legally required.

Account and data deletion

If a Service offers accounts, use its in-app deletion option where available. You may also request deletion by emailing kemal@moonpunchgames.com with the subject "Account Deletion Request" and the product and account details needed to locate your data. We may verify your identity before acting. We will delete or de-identify associated data unless we must retain limited information for legal, security, fraud-prevention, or dispute-resolution purposes.

7. Your privacy rights

Depending on where you live, you may have rights to be informed, access, correct, delete, restrict or object to processing, withdraw consent, obtain a portable copy, opt out of targeted advertising or certain sharing, and lodge a complaint with a data protection authority. You will not be discriminated against for exercising an applicable right.

Residents of Türkiye may exercise the rights available under Article 11 of Law No. 6698 on the Protection of Personal Data. Residents of the EEA or United Kingdom may have rights under the GDPR or UK GDPR. California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service.

To make a request, email kemal@moonpunchgames.com and identify the Service and right you wish to exercise. We may ask for information reasonably necessary to verify your identity and authority. Authorized agents may submit requests where permitted by law.

8. Children's privacy

Unless a product-specific notice states otherwise, the Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal data from a child under 13 without legally required parental notice and verifiable consent.

Before publishing a Service directed to children, we will provide an appropriate supplemental notice and age-appropriate protections. If you believe a child provided personal data contrary to this section, contact us so we can investigate and delete it as required.

9. International data transfers

We are based in Türkiye, and our providers or partners may process data in other countries. Those countries may have different data protection laws. Where required, we use recognized safeguards for international transfers, such as adequacy decisions, contractual protections, consent, or another lawful transfer mechanism.

10. Security and third-party services

We use reasonable administrative, technical, and organizational measures designed to protect personal data. No system or transmission is completely secure, so we cannot guarantee absolute security.

The Services may link to or integrate third-party stores, platforms, social networks, or services. Their handling of data is governed by their own privacy policies, and we encourage you to review them.

11. Changes and contact

We may update this policy when our Services, partners, or legal obligations change. We will post the revised policy here, update the "Last updated" date, and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

Data controller:
MOON PUNCH SOFTWARE TECHNOLOGIES LIMITED COMPANY
Istanbul, Türkiye
kemal@moonpunchgames.com