IOCODO Back to site

Starglax

Privacy policy

Effective date:

In brief: Starglax has no user accounts and never asks for your name, email address or phone number; your progress, stars and settings stay on your device, and star packs are bought through Apple or Google. The app fetches its configuration from Google Firebase with a random installation identifier. In the European Economic Area, Canada and Brazil, usage statistics start only after you allow them, and in Türkiye they stay off until you turn them on in Privacy choices. Elsewhere, on iPhone and iPad and in Switzerland, they start when you tap OK on a short notice the app shows you once, which links to Privacy choices, so you can turn them off before you tap; on Android in other countries they run unless you turn them off. If your App Store or Google Play country is Russia or China mainland, the app neither fetches its configuration nor sends usage statistics. You can change usage statistics at any time in SETTINGS > Privacy choices.

In Brazil: processing some of your data is a condition for using the features of Starglax that rely on it, because they cannot work without it. That data is listed in What we use data for, under each use whose legal basis is performance of our contract with you. To use your rights under article 18 of the LGPD (Lei 13.709/2018), write to support@iocodo.com, as described in Your rights.

1. Who we are

Starglax is made by IOCODO LLC, a limited liability company registered in Wyoming, United States. We decide why and how the data described on this page is used, so under European data protection law we are its controller.

Postal address: 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States
Email: support@iocodo.com

Use this email for anything about your data, including the requests described in Your rights.

2. What this policy covers

This policy covers the Starglax app on iOS and Android, and this page. Starglax is an arcade space shooter in which you fly a ship through 26 sectors of enemy waves and bosses on several difficulties, upgrade your ship, weapons and pilot with stars that you earn by playing or buy in the app, and play a daily challenge that is scored on your device.

Here, "personal data" means any information about you as a person who can be identified, directly or indirectly. That includes identifiers such as a user ID or an installation ID, even when they do not contain your name.

3. Data that stays on your device

Starglax keeps the following on your device, in the app's own storage:

  • your progress: the sectors and difficulties you unlocked, the runs you completed, your medals and achievements, your best score and the best score of each sector, your daily challenge results, the pilot, weapon and skills you chose, and the upgrades you bought
  • your stars: the balance, which store purchases the app has already credited, whether you have bought the one-time welcome pack, and a random identifier the app creates for your purchases
  • your settings: language, sound and music volume, vibration, REDUCE FLASHING, LEFT-HANDED LAYOUT, and whether to replay the tutorial
  • your answer about usage statistics: whether you allowed them, when, the version of the text you saw, the app's version, and the countries your phone, your app store and your time zone pointed to
  • the app's configuration from Firebase Remote Config, with the installation identifier and token the app uses to fetch it
  • if you played an earlier version of Starglax: the random sign-in identifier and its token that the Android version used for the cloud copy and the leaderboards, your Game Center player identifier on iPhone and iPad, the callsign the app generated for you, and scores that were waiting to be sent to the leaderboards. This version keeps them on your device but does not use or send them
  • which version of our terms of use you accepted, and when

We do not receive any of this, unless another section of this policy says otherwise. If you back up your device with iCloud or Google, the backup can include a copy of this data, under Apple's or Google's terms. Uninstalling the app deletes this data from your device.

To know which privacy rules apply, the app reads on your device the country your phone is set to, the country of your app store and the country of your time zone, and keeps them only with your answer about usage statistics.

When you write to us from the app, it opens your email app with our address and adds at the end of the message the app's version and build and your device's operating system and its version, which you can delete before you send it.

4. Accounts and sign-in

Starglax has no user accounts: you do not register or sign in. Versions of Starglax for Android up to 1.0.12 signed in to Firebase Authentication, a Google service, in the background with a random user identifier, to keep a cloud copy of your progress and your entries on the leaderboards. This version does not sign in and sends neither, and what those versions stored stays with us until you ask us to delete it, as described in How long we keep data.

5. What we use data for, and on what legal basis

European data protection law (the GDPR and the UK GDPR) requires a legal basis for each use of personal data. For each use, here is the data involved and the basis we rely on.

  • Running the app: managing its configuration, and telling you when an update is needed or the game is under maintenance

    Data: an installation identifier and its token, the language you chose in the app and the operating system version of your device.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

  • Selling star packs and crediting them in the app

    Data: the pack you choose, a random identifier the app creates on your device and attaches to each of your purchases so that it recognises them, and the confirmation of the purchase that Apple or Google send to the app, which the app keeps on your device so that it credits each purchase once.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

  • Counting how the app is used

    Data: usage events, the app-instance identifier, device model, operating system version, the app's language and version, and an approximate location that Google derives from your IP address (the app has no access to your phone's location).

    Legal basis: Your consent, which the app asks for before this starts in the European Economic Area, Canada and Brazil (in the European Union and the European Economic Area, GDPR art. 6(1)(a)). In Türkiye, it stays off until you turn it on in the app (SETTINGS > Privacy choices). In other countries it is on unless you turn it off, except on iPhone and iPad and in Switzerland, where it starts when you tap OK on a short notice the app shows you once, which links to Privacy choices, so you can turn it off before you tap, and when your App Store or Google Play country is Russia or China mainland, in which case it does not run at all. In the United Kingdom, the legal basis is our legitimate interests (UK GDPR art. 6(1)(f)): knowing which parts of the game are played, where players give up and which versions of the app and which devices are in use, so that we can improve the game and decide what to fix. In Thailand and Saudi Arabia, the legal basis is our legitimate interests (section 24(5) of Thailand's Personal Data Protection Act; article 6(4) of Saudi Arabia's Personal Data Protection Law). Everywhere, you can turn it off at any time in the app (SETTINGS > Privacy choices).

    Right to object in the United Kingdom: you can object to this use at any time, by turning it off in the app (SETTINGS > Privacy choices) or by writing to us at support@iocodo.com.

  • Running the cloud copy and the leaderboards of the versions of Starglax for Android up to 1.0.12

    Data: a random user identifier, a copy of your progress with the time it was saved, and for each leaderboard your best score, when you set it and the callsign the app generated for you (such as PILOT-CEE3); and the IP address of your connection, which Firebase Authentication logs.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

  • Answering you when you write to us

    Data: your email address, your message, any attachments and, when you write from the app, the app's version and build and your device's operating system and its version.

    Legal basis: Our legitimate interests (GDPR art. 6(1)(f)): answering your request, and keeping a record of how we handled it. You can object at any time by writing to us.

6. Who receives data

We use these service providers to run Starglax. Each one receives only the data listed, for the purpose listed:

  • Google Analytics for Firebase (Google LLC)

    What for: counts how the app is used.

    Data: the events Firebase records automatically (first open, app opens, sessions and app updates, and in-app purchases with their price and currency when the store reports them) and the game events the app sends (the screens you open; runs started and ended, with the mode, sector, difficulty, ship and weapon, the result, how long the run lasted, the score and the stars earned, and the weapon and its level at the end of the run; sectors cleared, with the difficulty and the new medals; items unlocked, with their cost; the tips shown the first time you play; the tutorial completed; the star packs viewed, and purchases started, completed or failed, with the product), the app's language and version, an app-instance identifier, device model, operating system version and an approximate location that Google derives from your IP address.

    Google LLC processes this data on our behalf, under its data processing terms. Google Analytics for Firebase privacy information

  • Firebase Installations (Google LLC)

    What for: gives your installation the identifiers that Firebase Remote Config and Google Analytics use.

    Data: installation identifiers and their tokens.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Installations privacy information

  • Firebase Remote Config (Google LLC)

    What for: manages the app's configuration, for example switching a feature on or off remotely, setting the oldest version of the app that can still be played, or announcing maintenance.

    Data: the installation identifier and its token, the language you chose in the app and the operating system version of your device.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Remote Config privacy information

  • Firebase Authentication (Google LLC)

    What for: gives the versions of Starglax for Android up to 1.0.12 the random identifier that your cloud copy and leaderboard entries are stored under.

    Data: a random user identifier, and the IP address of the request, which Firebase Authentication keeps for a few weeks.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Authentication privacy information

  • Cloud Firestore (Google LLC)

    What for: stores the cloud copy of your progress and the leaderboards of the versions of Starglax for Android up to 1.0.12, and shows the leaderboards to the players of those versions.

    Data: your random user identifier, a copy of your progress with the time it was saved, and for each leaderboard your best score, when you set it and the callsign the app generated for you.

    Google LLC processes this data on our behalf, under its data processing terms. Cloud Firestore privacy information

  • GoDaddy Professional Email (GoDaddy Operating Company, LLC)

    What for: receives the emails you send to support@iocodo.com and keeps them with our replies.

    Data: your email address, your message and any attachments, and our replies.

    GoDaddy Operating Company, LLC processes this data on our behalf, under its data processing terms. GoDaddy Professional Email privacy information

  • IT service providers (United States)

    What for: tools we may use to read the emails you send us and to draft our replies.

    Data: the text of your email and your email address, when we use these tools for it.

    These providers handle this data under their own terms.

Apple (App Store) and Google (Google Play) also handle your download and any purchase, under their own privacy policies.

We do not sell your personal data.

7. Where data is processed

IOCODO LLC is registered in the United States. Our service providers may process your personal data in the United States and other countries where Google, GoDaddy or their sub-processors have facilities.

Where European, UK or Swiss data protection law requires a safeguard for this, we rely on:

  • the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework, for providers certified under them (you can check a provider on dataprivacyframework.gov)
  • the Standard Contractual Clauses approved by the European Commission, with the UK Addendum and the Swiss adjustments, which are part of our providers' data processing terms

The IT service providers listed in Who receives data are in the United States and are not covered by these safeguards, by an adequacy decision or by UK adequacy regulations.

You can ask us for a copy of these safeguards at support@iocodo.com.

8. How long we keep data

Here is how long we keep each kind of personal data. Items marked automatic are deleted on a fixed schedule, without anyone having to ask.

  • Usage events in Google Analytics

    Up to 14 months. automatic

  • IP addresses logged by Firebase Authentication

    A few weeks. automatic

  • The cloud copies, leaderboard entries and random user identifiers stored by the versions of Starglax for Android up to 1.0.12

    Until you ask us to delete them. Leaderboard entries stay visible to the players of those versions until then.

  • Installation identifiers

    Until we delete them through Firebase, which the app does not do on its own; Firebase then removes them from its systems within 180 days.

  • Emails you send us, and our replies to you

    Until you ask us to delete them. We set no fixed end date: we keep them as the record of our support, to answer you if you write again and to show how we handled your request. If you are in South Korea, we keep them for at most 3 years after our last message about your request, on the basis of article 15(1)(vi) of the Personal Information Protection Act (our legitimate interest in showing how we handled your request). If a law or a legal claim requires us to keep an email, we keep it until that ends.

  • What the app keeps on your device

    Until you uninstall the app or delete its data. In SETTINGS, Reset campaign removes your campaign progress, the stars you earned, skills, upgrades, medals and records, and keeps the stars you bought, up to the balance you have; everything else stays until you uninstall the app.

When you ask us to delete your data, we delete it as described here, unless the law requires us to keep part of it.

9. How we protect data

Data travels between the app and our service providers over encrypted connections (HTTPS).

Our providers encrypt the data they store for us, and the access rules of our database limit what each user can read and change. Access to our systems is limited to the people who run Starglax, and only to run and support it.

If a security incident puts your personal data at risk, we tell you and the competent authorities when the law requires it.

10. Your rights

Wherever you live, you can ask us to:

  • tell you what personal data we have about you, and give you a copy
  • send that copy to you, or to another company, in a machine-readable format
  • correct data that is wrong or incomplete
  • delete your data
  • stop or limit a use of your data, including any use based on our legitimate interests

To ask, write to support@iocodo.com. It is free. We reply within one month, unless this policy gives a different time for where you live, and we may ask you to confirm that the data is yours before we act. In the European Union, the European Economic Area and the United Kingdom, if a request is complex or you send us several, we may take up to two more months: we tell you why within the first month. In the United Kingdom, the month starts only when we receive the information we asked for to confirm that the data is yours. In the European Union and the European Economic Area, when you ask to see your data, the month does not run while we wait for that information. In Switzerland, we give you access to your data within 30 days, or tell you within those 30 days when you will have it. In Vietnam, we reply within 2 working days and carry out your request within the time limits of Vietnamese law. In Japan, we reply without delay, as Japanese law requires.

You can also withdraw any consent you gave, at any time, in the app (SETTINGS > Privacy choices). What we did with your consent before you withdrew it stays lawful.

Deleting your data

You can delete your data:

Usage statistics that were already sent are deleted on their own, within the periods in How long we keep data.

Data that stays on your device is deleted when you uninstall the app.

Complaints

You also have the right to complain to an authority:

In the United Kingdom, you can also complain to us about how we use your personal data, by writing to support@iocodo.com.

If you are in Brazil, you have the rights listed in article 18 of the LGPD (Lei 13.709/2018), and you can use them as described above. If you ask us for your data, we send a complete answer within 15 days, not one month.

11. Privacy rights in US states

Several US states, including California, Colorado, Connecticut, Oregon, Texas and Virginia, give their residents privacy rights. We give the same rights to everyone in the United States:

  • to know what personal information we collect, use and disclose, and to get a copy of it
  • to correct it
  • to delete it
  • to opt out of the sale of your personal information, of its use for targeted advertising and of profiling that has legal or similarly significant effects
  • to appeal if we turn down your request
  • not to be treated differently for using any of these rights

The personal information we collect comes from you and from the app on your device. Why we use it and who receives it are described in What we use data for and Who receives data. We do not sell your personal information. In the current version of Starglax, we do not use or share it for targeted advertising.

To use these rights, write to support@iocodo.com or to the postal address under Who we are, or have someone you authorise write for you. We reply within 45 days. If a request is complex or you send us several, we may take 45 more days, and we tell you why within the first 45 days. If we turn your request down, you can appeal by replying with the word "Appeal" in the subject. We answer an appeal in writing within 60 days, and if you still disagree you can contact the attorney general of your state.

12. Notices for some countries

Canada

The service providers listed in Who receives data collect and keep data for us. They may process it outside Canada, in the United States and other countries where Google, GoDaddy or their sub-processors have facilities. The courts, law enforcement and national security authorities of those countries can have access to it under their laws.

Japan: information the app sends to other companies

When you use Starglax, the app sends this information from your device to other companies:

  • Google Analytics for Firebase (Google LLC)

    Information sent: the events Firebase records automatically (first open, app opens, sessions and app updates, and in-app purchases with their price and currency when the store reports them) and the game events the app sends (the screens you open; runs started and ended, with the mode, sector, difficulty, ship and weapon, the result, how long the run lasted, the score and the stars earned, and the weapon and its level at the end of the run; sectors cleared, with the difficulty and the new medals; items unlocked, with their cost; the tips shown the first time you play; the tutorial completed; the star packs viewed, and purchases started, completed or failed, with the product), the app's language and version, an app-instance identifier, device model, operating system version and an approximate location that Google derives from your IP address.

    Our purpose: to count how the app is used.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Installations (Google LLC)

    Information sent: installation identifiers and their tokens.

    Our purpose: to give your installation the identifiers that Firebase Remote Config and Google Analytics use.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Remote Config (Google LLC)

    Information sent: the installation identifier and its token, the language you chose in the app and the operating system version of your device.

    Our purpose: to manage the app's configuration, for example switching a feature on or off remotely, setting the oldest version of the app that can still be played, or announcing maintenance.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Authentication (Google LLC)

    Information sent: a random user identifier, and the IP address of the request, which Firebase Authentication keeps for a few weeks.

    Our purpose: to give the versions of Starglax for Android up to 1.0.12 the random identifier that your cloud copy and leaderboard entries are stored under.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Cloud Firestore (Google LLC)

    Information sent: your random user identifier, a copy of your progress with the time it was saved, and for each leaderboard your best score, when you set it and the callsign the app generated for you.

    Our purpose: to store the cloud copy of your progress and the leaderboards of those versions, and show the leaderboards to their players.

    Purpose of Google LLC: it uses the information only to provide this service to us.

In SETTINGS > Privacy choices, you can turn off usage statistics (Google Analytics for Firebase). The other transmissions cannot be turned off in the app; Firebase Authentication and Cloud Firestore receive data only when you play a version of Starglax for Android up to 1.0.12.

Korea: personal information, entrustment and transfer abroad

Personal information: under Korea's Personal Information Protection Act (the Act), the personal information we process is the emails you send to support@iocodo.com, with what you write in them. The installation and app-instance identifiers, usage events, the device information listed in Who receives data, and the random identifier, callsign, progress copy and scores that the versions of Starglax for Android up to 1.0.12 stored cannot be linked to you with anything we hold or could lawfully obtain at reasonable cost in time, money and technology, so under the Act they are not personal information (the definition in What this policy covers is broader), and we handle them without identifying you.

Processed without your consent: we process your emails to us without asking for your consent, on the basis of article 15(1)(iv) of the Act, which covers what is needed to carry out our contract with you (our terms of use) or, in the process of concluding a contract, to act on your request. Once we have handled your request, we keep your emails to us and our replies, with your email address, as the record of how we handled it, in case you write to us again about it or a dispute arises, on the basis of article 15(1)(vi) of the Act (our legitimate interests, where they clearly outweigh your rights and stay within a reasonable scope). If you are in Korea, we keep them for 3 years after our last message about that request, then delete them; we delete them sooner if you ask us to.

Entrustment and transfer abroad: we entrust the work below to this company, which receives the personal information outside Korea. The legal basis for the transfer is article 28-8(1)(iii) of the Act: we entrust this work to it to carry out our contract with you, and this policy discloses the details the Act lists. The company uses the information only to do this work for us, and keeps it for the periods in How long we keep data.

  • GoDaddy Operating Company, LLC

    Work entrusted: receiving the emails you send to support@iocodo.com and keeping them with our replies.

    Personal information transferred: your email address, your message and any attachments, and our replies.

    Countries: the United States and the Cayman Islands.

    When and how: when you send us an email or we reply to you, over the internet.

    Contact: Office of the Data Privacy Officer, 100 S. Mill Ave, Suite 1600, Tempe, AZ 85281, United States, privacy@godaddy.com.

    How to refuse: do not write to us by email; to remove the emails you already sent, ask us to delete them.

    If you refuse: we cannot answer you by email, and the app works the same.

    Sub-processors: the list published by GoDaddy Operating Company, LLC

Where we process it: we have no servers of our own; the company above stores this personal information for us, in the countries listed above.

Destruction: when the period in How long we keep data ends, or when you ask us, we delete the personal information without delay, permanently and so that it cannot be recovered. We keep none of it on paper.

Automatic collection: the app collects information automatically through the software development kits (SDKs) of these services. What each one collects is listed in Who receives data, and how long it is kept in How long we keep data.

  • Google Analytics for Firebase
  • Firebase Installations
  • Firebase Remote Config

Firebase Authentication and Cloud Firestore receive data only when you play a version of Starglax for Android up to 1.0.12: that is not automatic collection.

How to refuse: on Android, usage statistics (Google Analytics for Firebase) is on by default in Korea; on iPhone and iPad it starts when you tap OK on a short notice the app shows you once. You can turn it off at any time in SETTINGS > Privacy choices. The other services in this list are needed for the app to work: to refuse them, stop using the app and delete it. You can also write to us at support@iocodo.com.

Your requests: you can make the requests described in Your rights. If you are in Korea, we answer within 10 days, not one month. If a valid reason keeps us from showing you your data within those 10 days, we tell you the reason within that time and show you the data as soon as the reason ends. A legal guardian of a child under 14 can make the same requests for the child.

Privacy officer: IOCODO LLC, Privacy team, support@iocodo.com. You can also send complaints about how we handle personal information to this address.

Aviso de privacidad para México

Aviso de privacidad simplificado: en IOCODO LLC, con domicilio en 30 N Gould St Ste N, Sheridan, WY 82801-6317, Estados Unidos, tratamos los datos de tu dispositivo, los datos sobre cómo usas la app, los datos de tus compras de paquetes de estrellas y, si nos escribes, tu mensaje y tu correo electrónico; si usaste una versión de Starglax para Android hasta la 1.0.12, también el identificador aleatorio, la copia de tu progreso y los puntajes que esa versión guardó en las clasificaciones. Los usamos para que Starglax funcione y para responderte, que son finalidades primarias, y también para las estadísticas de uso, que son finalidades secundarias, en las condiciones que se indican abajo. No tratamos datos personales sensibles. Puedes limitar el uso de tus datos en AJUSTES > Opciones de privacidad o escribiéndonos a support@iocodo.com. Puedes consultar el aviso de privacidad integral en esta página.

Si usas Starglax en México, esta página es nuestro aviso de privacidad integral. Esto es lo que la ley mexicana nos pide decirte:

Responsable: IOCODO LLC, con domicilio en 30 N Gould St Ste N, Sheridan, WY 82801-6317, Estados Unidos. Puedes escribirnos a support@iocodo.com.

Datos personales que tratamos: los detallamos para cada uso en la sección “Para qué usamos los datos y con qué base jurídica” y para cada servicio en la sección “Quién recibe los datos”. No tratamos datos personales sensibles.

Para qué los usamos: para que Starglax funcione y para responderte cuando nos escribes. Estas son finalidades primarias: son necesarias para prestarte el servicio.

Finalidades secundarias: si no te opones, también los usamos para:

  • estadísticas de uso (Google Analytics para Firebase)

Cómo limitar el uso de tus datos: en AJUSTES > Opciones de privacidad puedes desactivar cuando quieras las estadísticas de uso. La app sigue funcionando igual. También puedes escribirnos a support@iocodo.com.

Transferencias: cuando usamos un asistente de inteligencia artificial para leer un correo y preparar la respuesta, su proveedor, ubicado en Estados Unidos, recibe estos datos: el texto de tu correo y tu dirección de correo electrónico. Los trata conforme a sus propios términos. Esto constituye una transferencia de datos, cuya finalidad es ayudarnos a leer tus mensajes y a redactar nuestras respuestas. Si no la aceptas, escribe “SIN IA” en el asunto de tu correo a support@iocodo.com: atenderemos ese mensaje sin usar el asistente. Si no manifiestas tu negativa, entenderemos que la aceptas.

Derechos ARCO: puedes pedirnos acceso a tus datos, su rectificación o su cancelación, y oponerte a su uso. Nuestro departamento de datos personales atiende estas solicitudes en support@iocodo.com: dinos qué derecho quieres ejercer y sobre qué datos. Te comunicamos nuestra decisión en un plazo máximo de 20 días hábiles desde que recibimos tu solicitud y, si procede, la hacemos efectiva dentro de los 15 días hábiles siguientes. Si las circunstancias del caso lo justifican, podemos ampliar cada uno de estos plazos una sola vez por un periodo igual.

Tecnologías que recopilan datos automáticamente: mientras usas la app, los componentes de software (SDK) de estos servicios recopilan datos de forma automática:

  • Google Analytics para Firebase
  • Firebase Installations
  • Firebase Remote Config

En la sección “Quién recibe los datos” puedes ver qué recopila cada uno. En AJUSTES > Opciones de privacidad puedes desactivar Google Analytics para Firebase. Para que los demás dejen de recopilar datos, tendrías que desinstalar la app.

Cambios a este aviso: los publicamos en esta página, con la fecha de la nueva versión. Si un cambio afecta la forma en que usamos los datos que ya tenemos de ti, te avisamos en la app antes de aplicarlo.

South Africa

If you are in South Africa, you can object at any time to our use of your personal information. In SETTINGS > Privacy choices, you can turn off usage statistics (Google Analytics for Firebase); for any other use, write to us at support@iocodo.com. You can also lodge a complaint with the Information Regulator: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191, South Africa; email POPIAComplaints@inforegulator.org.za; telephone +27 10 023 5200.

Türkiye: Aydınlatma Metni

Bu metin, Starglax uygulamasını Türkiye'de kullanan kişileri 6698 sayılı Kişisel Verilerin Korunması Kanunu'nun (“Kanun”) 10. maddesi uyarınca aydınlatmak amacıyla hazırlanmıştır.

Bu metin yalnızca bilgilendirme amaçlıdır. Açık rızanız, bu metinden ayrı olarak uygulama içinde alınır.

Veri sorumlusu: Starglax uygulamasını geliştiren IOCODO LLC. IOCODO LLC, Amerika Birleşik Devletleri'nin Wyoming eyaletinde kayıtlı bir sınırlı sorumluluk şirketidir.

Posta adresi: 30 N Gould St Ste N, Sheridan, WY 82801-6317, Amerika Birleşik Devletleri
E-posta: support@iocodo.com

Amaçlar ve hukuki sebepler: Kişisel verilerinizi aşağıdaki amaçlarla işliyoruz.

  • Uygulamanın çalışması: yapılandırmasının yönetilmesi ve bir güncelleme gerektiğinde ya da oyun bakımdayken size haber verilmesi

    Veriler: kurulum tanımlayıcısı ve belirteci, uygulamada seçtiğiniz dil ve cihazınızın işletim sistemi sürümü.

    Hukuki sebep: bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (Kanun md. 5/2-c).

  • Yıldız paketlerinin satılması ve satın aldığınız yıldızların uygulamada bakiyenize eklenmesi

    Veriler: seçtiğiniz paket, uygulamanın cihazınızda oluşturduğu ve satın alımlarınızı tanıyabilmek için her birine eklediği rastgele bir tanımlayıcı ve Apple'ın veya Google'ın uygulamaya gönderdiği satın alma onayı (uygulama, her satın alımı yalnızca bir kez eklemek için bu onayı cihazınızda saklar).

    Hukuki sebep: bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (Kanun md. 5/2-c).

  • Uygulamanın kullanımına ilişkin istatistiklerin tutulması

    Veriler: uygulama içi etkinlikler, uygulama örneği tanımlayıcısı, cihaz modeli, işletim sistemi sürümü, uygulamanın dili ve sürümü, Google'ın IP adresinizden tahmin ettiği yaklaşık konum (uygulamanın cihazınızın konumuna erişimi yoktur).

    Hukuki sebep: açık rızanız (Kanun md. 5/1). Türkiye'de kullanım istatistikleri siz açık rıza verene kadar kapalıdır.

  • Starglax'ın Android için 1.0.12 ve önceki sürümlerinde ilerleme kaydının bulut kopyasının ve skor tablolarının işletilmesi

    Veriler: rastgele bir kullanıcı tanımlayıcısı, ilerlemenizin kaydedildiği zamanla birlikte bir kopyası, her skor tablosu için en iyi skorunuz, bu skoru ne zaman elde ettiğiniz ve uygulamanın sizin için oluşturduğu çağrı adı (örneğin PILOT-CEE3); ayrıca Firebase Authentication'ın kaydettiği bağlantınızın IP adresi.

    Hukuki sebep: bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (Kanun md. 5/2-c).

  • Bize yazdığınızda size yanıt verilmesi

    Veriler: e-posta adresiniz, mesajınız ve e-postanıza eklediğiniz her türlü içerik; uygulama üzerinden yazdığınızda ayrıca uygulamanın sürümü ve derleme numarası ile cihazınızın işletim sistemi ve sürümü.

    Hukuki sebep: sorularınızın yanıtlanması bakımından, bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (Kanun md. 5/2-c); Kanun'un 11. maddesi uyarınca yaptığınız başvuruların sonuçlandırılması bakımından, veri sorumlusunun hukuki yükümlülüğünü yerine getirebilmesi için zorunlu olması (Kanun md. 5/2-ç ve md. 13); size nasıl yanıt verdiğimizi kanıtlayabilmek amacıyla yazışmaların yalnızca Kişisel Verileri Koruma Kuruluna şikâyet veya dava yolu açık olduğu sürece saklanması bakımından, bir hakkın tesisi, kullanılması veya korunması için veri işlemenin zorunlu olması (Kanun md. 5/2-e).

Toplama yöntemi: Kişisel verilerinizi aşağıdaki iki yöntemle elde ediyoruz.

  • Otomatik yollarla: uygulamayı kullandığınız sırada, cihazınızdaki Starglax uygulaması ve uygulamanın içinde yer alan hizmet sağlayıcılara ait yazılımlar (SDK) aracılığıyla.
  • Bir veri kayıt sisteminin parçası olmak kaydıyla otomatik olmayan yollarla: bize yazdığınızda, yani e-postalarınız aracılığıyla.

Aktarım: Starglax uygulamasını işletmek için aşağıdaki sağlayıcılardan hizmet alıyoruz. Her biri yalnızca kendi hizmetiyle ilgili verileri alır.

  • Google LLC (ABD): uygulamanın yapılandırılması (Firebase Remote Config ve Firebase Installations); Starglax'ın Android için 1.0.12 ve önceki sürümlerinde ilerleme kaydının bulut kopyası ve skor tabloları (Firebase Authentication ve Cloud Firestore); açtıysanız kullanım istatistikleri (Google Analytics for Firebase)
  • GoDaddy Operating Company, LLC (ABD): destek posta kutumuz (GoDaddy Professional Email); bize gönderdiğiniz e-postaları ve yanıtlarımızı saklar
  • Bilgi teknolojileri hizmet sağlayıcıları (ABD): bize gönderdiğiniz e-postaları okumak ve yanıtlarımızı hazırlamak için kullanabileceğimiz araçları sunan şirketler

Haklarınız: Kanun'un 11. maddesi uyarınca, veri sorumlusuna başvurarak kendinizle ilgili aşağıdaki haklara sahipsiniz.

  • kişisel verilerinizin işlenip işlenmediğini öğrenme
  • kişisel verileriniz işlenmişse buna ilişkin bilgi talep etme
  • kişisel verilerinizin işlenme amacını ve amacına uygun kullanılıp kullanılmadığını öğrenme
  • kişisel verilerinizin yurt içinde veya yurt dışında aktarıldığı üçüncü kişileri bilme
  • kişisel verileriniz eksik veya yanlış işlenmişse düzeltilmesini isteme
  • Kanun'un 7. maddesindeki şartlar çerçevesinde kişisel verilerinizin silinmesini veya yok edilmesini isteme
  • düzeltme, silme ve yok etme işlemlerinin, kişisel verilerinizin aktarıldığı üçüncü kişilere bildirilmesini isteme
  • işlenen verilerin münhasıran otomatik sistemler vasıtasıyla analiz edilmesi suretiyle aleyhinize bir sonucun ortaya çıkmasına itiraz etme
  • kişisel verilerinizin kanuna aykırı olarak işlenmesi sebebiyle zarara uğramanız hâlinde zararın giderilmesini talep etme

Başvuru: Başvurunuzu yukarıdaki posta adresine yazılı olarak ya da support@iocodo.com adresine e-postayla iletebilirsiniz. Talebinizi, niteliğine göre en kısa sürede ve en geç otuz gün içinde ücretsiz olarak sonuçlandırırız (Kanun md. 13).

Việt Nam: chuyển dữ liệu cá nhân xuyên biên giới

Khi bạn dùng Starglax tại Việt Nam, dữ liệu cá nhân của bạn được chuyển ra nước ngoài và được xử lý tại đó. Starglax là ứng dụng của IOCODO LLC, một công ty tại Hoa Kỳ.

Bên nhận dữ liệu: IOCODO LLC và các nhà cung cấp dịch vụ của chúng tôi, gồm:

  • Google LLC
  • GoDaddy Operating Company, LLC

Nơi xử lý: Hoa Kỳ và các quốc gia khác nêu tại phần về nơi xử lý dữ liệu trên trang này.

Mục đích xử lý: vận hành Starglax và trả lời khi bạn liên hệ với chúng tôi.

Ngoài ra, tùy theo lựa chọn của bạn, dữ liệu còn được dùng cho:

  • thống kê việc sử dụng ứng dụng (Google Analytics for Firebase)

Phần về bên nhận dữ liệu trên trang này cho biết mỗi dịch vụ nhận những dữ liệu nào và để làm gì. Bạn có thể bật hoặc tắt thống kê sử dụng bất cứ lúc nào trong ứng dụng, tại SETTINGS > Privacy choices.

Email bạn gửi cho chúng tôi: Bên nhận: GoDaddy Operating Company, LLC tại Hoa Kỳ (nhà cung cấp hộp thư hỗ trợ của chúng tôi) và Anthropic, PBC tại Hoa Kỳ (Claude, trợ lý trí tuệ nhân tạo mà chúng tôi có thể dùng để đọc email và soạn bản nháp thư trả lời). Điều này cũng áp dụng cho các báo cáo bạn gửi cho chúng tôi qua email.

Xử lý tự động: Khi chúng tôi dùng Claude để đọc một email, nội dung email đó được xử lý tự động. Claude là một mô hình ngôn ngữ, có chức năng đọc văn bản và soạn bản nháp thư trả lời. Chúng tôi không đưa ra bất kỳ quyết định tự động nào về bạn: một người phụ trách tại IOCODO sẽ trực tiếp đọc và quyết định cách trả lời. Nếu bạn không muốn email của mình được xử lý tự động, hãy ghi “KHÔNG DÙNG AI” vào tiêu đề email gửi đến support@iocodo.com: chúng tôi sẽ xử lý email đó mà không dùng trí tuệ nhân tạo.

13. Children

Starglax is not meant for children under 13.

The app never asks for your year of birth. Where it asks for your consent to usage statistics, the button that allows them states the age from which your consent counts in your country, between 13 and 18 depending on the country; when the app sees signs of more than one country, the highest of their ages applies. If you are younger, do not allow them: the app works the same.

If you think a child has given us personal data, write to support@iocodo.com and we will delete it.

14. "Do Not Track" and other companies

Some browsers and devices can send a "Do Not Track" signal. There is no common standard for responding to it, so neither Starglax nor this page changes what it does when it receives one. The choices described in this policy are how you control your data.

In the current version of Starglax, only the service providers listed in Who receives data receive data from the app, for the purposes listed there. We do not let other companies use Starglax to collect personal data about your activity over time and across other apps and websites.

15. Changes to this policy

We update this policy when Starglax or the law changes, and the date at the top shows when the current version took effect. If a change affects how we use data we already have about you, we tell you in the app before it applies, and we ask for your consent again where the law requires it.

This version was last updated on .

Earlier versions: 2026-10-07, 2026-10-28, 2026-09-06

16. Contact

IOCODO LLC
Postal address: 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States
Email: support@iocodo.com

Person in charge of the protection of personal information (Québec): the managing member of IOCODO LLC, at support@iocodo.com.