COOKZ: Crazy Restaurant — Privacy Policy

This policy applies only to the COOKZ: Crazy Restaurant mobile game (iOS and Android, com.oyist.cookz). For our website, the site privacy notice applies. Your ad choices: Advertising. Additional information for players in Europe, the US and Türkiye is at the end: Europe · US states · Türkiye (KVKK).

In short

• COOKZ is a single-player 3D restaurant and cooking game. It never asks for your email address, phone number, date of birth, precise location or contacts.
• The first time you open it, you name your restaurant and pick your country and your chef. When you tap Open the restaurant, the game signs in an anonymous player for you with Unity's online services; before that, the game sends nothing to Unity Gaming Services or the ad network (only the engine's hardware statistics may go at launch).
• Your restaurant's name, your country and your restaurant score are shown to other players on the world list. A copy of your save is kept with Unity; the main save is on your device. If you like, you can create an account with a username and password in the profile and carry on from where you left off on another device.
• The game shows Google AdMob ads. In Europe, Google's consent form asks you first. On iOS, Apple's tracking prompt (ATT) is shown once on the home screen after you open your restaurant, before any ads start. If you allow tracking, ads may be chosen based on your interests; if you don't, your advertising ID is not read. On Android there is no tracking prompt: Google may use the device's advertising ID, which you can delete or reset in Android settings. Details: Advertising and your ad choices.
• Purchases are handled by Apple (App Store) or Google Play; we never see your payment details. Our purchasing library (Unity IAP) sends a purchase record to Unity when you buy something.
• We do not sell your data. To delete the game's data: Deleting your data.

1. Personal information we collect

Information you provide

The first time it opens, the game shows a sign-up form. Until you confirm it, the game sends nothing to Unity Gaming Services or the ad network; only the engine's hardware statistics may go at launch (below).

• Your restaurant's name: you type it; it is shown to everyone on the world list. You do not have to use your real name. The name is filtered for inappropriate words when you enter it, and you can change it in the profile at any time.
• Your country: you pick it from a list (the device's region setting is the first suggestion); it is shown next to your restaurant on the world list.
• Your chef (female or male): kept in your save; not shown on the list.
• Account (optional): a username and a password, in the profile. No email is asked for. Unity Authentication checks the password; we never see it, and the game does not store it.
• What you write to us: if you email us (for example through the game's Report an ad row or Hide and report on the list), we receive your email address and your message. Hide and report hides that player on your own list only and opens a draft to info@oyist.com in your mail app; the draft contains the reported restaurant's name, country and player ID, and nothing about you is added.

Information processed automatically

• Unity player ID and IP address: when you confirm the sign-up form (Open the restaurant), the game signs in an anonymous guest player for you with Unity. Unity's services receive that player ID, a session token and, while connected, your IP address (from which a coarse, country- or region-level location can be derived).
• World list (Unity Leaderboards and Unity Cloud Save): the list entry holds only your restaurant score (the sum of the best points of your days). Your restaurant's name and your country are kept in a public player card in Unity Cloud Save; the list reads them from that card and shows them to other players on the World's top 20 restaurants list. They are written again when the score grows, when you change your name or country and once per session. An entry without a card is not shown.
• Cloud save (Unity Cloud Save): a copy of your save is stored under your Unity player: restaurant name, country, chef, days, stars and points, coins, upgrades, store room, menu prices, reputation, the products you own, ad counters and the IDs of the players you hid on the list. The main save is on your device. When you sign in to your account on another device, the cloud copy replaces the one on the device if it is further ahead.
• Service diagnostics: Unity's SDKs may send technical diagnostics and usage counts about their own operation.
• Advertising data (Google): when ads are requested and shown, the Google Mobile Ads SDK processes your IP address (from which a coarse, country- or city-level location can be derived), device information (model, operating system and version, language), app-scoped identifiers (the identifier for vendor, IDFV, on iOS; the app set ID on Android), your advertising identifier (on iOS the IDFA, only if you allow it; on Android the Android advertising ID, unless you deleted it in your device settings), ad interactions (app launches, views, taps, completed rewarded ads) and diagnostic data about the performance and crashes of the app and the SDK. Google uses them to serve and measure ads, cap how often the same ad appears, report on ads, prevent fraud and, if you allow it on iOS or your advertising ID is on in Android, personalise ads.
• Purchase data (Apple, Google and Unity): when you buy something, the App Store (iOS) or Google Play (Android) handles the payment. What can be bought: No Ads, the Starter Pack, coin packs in four sizes, the Monthly Card, six chef outfits and the Kitchen Assistant. The game keeps the permanent products you own, your coins and the Monthly Card's days in the save on your device (and its cloud copy); to restore permanent products, it asks the store which ones you own. The Unity IAP library (Unity Technologies), which connects the game to the store, sends Unity a record when a purchase starts, is paid, fails and is delivered: the product, price and currency, the transaction number and store receipt, the device model, operating system and language, a random installation ID and, on iOS, the IDFV. Unity IAP also sends Unity a session record each time you sign in to Unity: a session number, a random installation ID, device information (model, operating system, language), the state of your ad and analytics consent and, on iOS, your advertising identifier (IDFA) if you allowed tracking. Your payment details never reach us.
• Engine hardware statistics (Unity): the hardware statistics feature of the Unity engine the game is built with is on. When the game starts, the engine may send Unity the technical information Unity describes as “anonymous hardware statistics” (such as device model, operating system, processor, graphics unit, memory and screen resolution). It does not include your restaurant name or your save.

What we do not collect

We do not collect your name, email address (unless you write to us), phone number, date of birth, address, precise location, contacts, photos, camera or microphone data. The game asks for no microphone, camera, location, contacts or notification permission; the voices in the game are pre-recorded audio. There is no chat, no messaging and no friends list; the only content shown to others is the restaurant name, country and score on the list. The game contains no analytics or crash-reporting tools added by us. The Unity engine's analytics, crash reporting and diagnostics are turned off. We receive crash reports only from the stores: from Apple on iOS, if you chose to share them with developers in your device settings; on Android, from Google Play's own Android vitals, if you chose to share usage and diagnostics data with Google on your device. What Google processes for ads never reaches us; Google gives us only aggregate ad reports (such as impressions and revenue).

2. On-device storage and similar technologies

The game uses no web cookies. Your save and a backup copy of it are kept in the app's own folder on the device: your restaurant's name, your country and your chef; the days you have played, stars and points; your coins; restaurant upgrades; the goods in your store room and their expiry days; your menu prices; the restaurant's reputation; the products you own (“No Ads”, “Starter Pack”); ad counters (days finished, days finished since the last interstitial, the day the takings bonus and the market discount were used); the last score sent to the list and the IDs of the players you hid on the list. A separate preferences file holds your language choice, the story chapters you have seen, whether you finished the tutorial, whether sound effects and voices are on, their volumes and the graphics quality. The Google Mobile Ads SDK and Google's consent tool (UMP) may store your ad choice and the information needed to deliver ads on the device. Unity's libraries store a session token (to reconnect as the same player) and an installation ID on the device. On iOS, if iCloud or computer backup is on for your device, app data may be included in that backup; your Apple account and device settings control it. On Android, if Google backup is on, the device may back up app data to your Google account; your Android and Google account settings control that backup. We cannot access either backup.

3. How we use personal information

• Providing the game: saving your progress on the device and in the cloud, and bringing it back on another device with your account.
• The world list: showing your restaurant with its name, country and score.
• Safety: filtering inappropriate names and reviewing reported names.
• Purchases: delivering and restoring products.
• Advertising: keeping the game free; see section 4.
• Support: answering your emails and reviewing the ads you report.

We do not use your data to send marketing emails, to build profiles or to train AI. We make no automated decisions about you that have legal or similarly significant effects.

4. Advertising and your ad choices

To keep COOKZ free, the game shows ads served by Google's AdMob. There are only two kinds of ads; there are no banners and no app-open ads.

• Interstitials: a full-screen ad can appear only when you finish a day and leave the end-of-day card; never during play. None during the restaurant's first three days; after that, at most one for every second day you finish. None if you watched a rewarded ad on that end-of-day card.
• Rewarded ads are optional and appear only when you tap for one: adding the day's takings once more at the end of a day (once per day), a free rush pack for an ingredient that ran out in the kitchen (at most twice a day), 20% off one market checkout (once per in-game day) and 40 coins on the Store page (at most three times a day).
• “No Ads” and the “Starter Pack” turn interstitials off permanently; rewarded ads still appear only when you ask for them.
• Ad requests are capped at the T (teen) content rating. They are not tagged as child-directed (see section 10).

The consent form, the tracking prompt and the Android advertising ID

Until you open your restaurant (complete the sign-up form), the game asks nothing about ads and requests no ads. After that, whether ads may be personalised depends on the following:

1. In the European Economic Area, the United Kingdom and Switzerland, Google's consent form (UMP) appears first, when the home screen opens (on iOS and Android): you can accept, decline or choose purposes one by one. No ad is requested before you answer it. If you do not consent, Google shows non-personalised or limited ads.
2. On iOS, Apple's tracking prompt (App Tracking Transparency) is not shown at launch or over the sign-up form. It is shown on the home screen after you open your restaurant, after the consent form where one is required and before the ad SDK starts; iOS shows it once. The game shows no separate explanation screen before it; the purpose text inside the prompt is the game's. No ad is requested until you answer. If you allow tracking, Google may use your advertising identifier (IDFA) to choose and measure ads based on your interests; Apple calls this “tracking”. If you do not, the IDFA is not read or shared; ads still appear, but they are not chosen using data collected about you across apps and websites. Your choice does not change the game or its rewards. If your device does not allow apps to request tracking, the prompt does not appear and tracking counts as not allowed.
3. On Android there is no tracking prompt. The game declares the advertising ID permission (AD_ID), and the Google Mobile Ads SDK reads the device's advertising ID unless you deleted it in Android settings. In Europe, personalisation follows your choice in the consent form. Elsewhere the game asks nothing further, and Google may use your advertising ID to choose and measure ads based on your interests. You can delete or reset your advertising ID in Android settings at any time; if you delete it, ads still appear, but they are not personalised using that ID.

Changing your choices

• In the game: Settings ▸ Help and privacy ▸ Privacy options. This row appears only where a consent form is required (the same button is on the profile page) and reopens Google's form, where you can change or withdraw your consent. Elsewhere, change your choices in the device settings below.
• Tracking permission: on iOS, turn tracking for COOKZ on or off at any time under Settings ▸ Privacy & Security ▸ Tracking.
• Android advertising ID: delete or reset it under Settings ▸ Privacy ▸ Ads (on some devices Settings ▸ Google ▸ Ads).
• Removing ads: the “No Ads” or “Starter Pack” product in the Store. It comes back on the Apple or Google account you bought it with, through Store ▸ Restore purchases or Settings ▸ Restore purchases.
• Reporting an inappropriate ad: Settings ▸ Help and privacy ▸ Report an ad opens an email to info@oyist.com in your mail app. The draft contains only the game's name, version, platform and language; nothing about you is added, and nothing is sent unless you send the email.
• The ad itself: the AdChoices icon in the corner of most ads shows why an ad was shown and lets you report it. How Google uses data: how Google uses data from partner apps.

5. Who we share it with

• Google (Google LLC / Google Ireland Limited): AdMob ads and the ad consent form. Google processes this data under its own policy, including ad personalisation if you allow it: Google privacy policy, how Google uses data from partner apps.
• Apple and Google (App Store, Google Play): they handle purchases and payment. Your payment details never reach us.
• Unity Technologies: Unity Gaming Services (Authentication, Leaderboards, Cloud Save) process your player ID, account, list entry and cloud save on our behalf, as our processor. Unity also provides the game's engine and the purchasing library (Unity IAP); the purchasing library's records and the engine's hardware statistics are processed under Unity's policy: Unity privacy policy.
• Other players: they see your restaurant's name, your country and your score on the world list. If a player reports a name on the list, the reported restaurant's name, country and player ID reach us by email.
• Authorities: when there is a lawful request, or where needed to protect our rights.
• Business transfers: if the game or the studio is transferred, to the new owner, who remains bound by this policy.

We do not sell your personal information for money.

6. Deleting your data

• Profile ▸ Delete account and data: tap the restaurant card at the top left of the home screen, then Delete account and data, then Yes, delete everything. The game first deletes your player card on the world list (restaurant name and country), then your cloud save with Unity, and last your Unity player account (the guest player too); if both succeed, it deletes the save and preferences on the device (language, sound, graphics, stories seen) and returns to the sign-up form. An internet connection is needed: if a step on the server fails, nothing is deleted and the game tells you. This cannot be undone. Permanent products (No Ads, the Starter Pack, chef outfits, the Kitchen Assistant) belong to your Apple or Google account and can be restored. Coin packs, the Monthly Card and the Starter Pack's 1,000 coins are consumed: they are granted only at the moment of purchase and are not granted again on a restore.
• Your entry on the world list: when the account is deleted, your player card goes and the list no longer shows your entry; only a score without a name or country remains on the server. If your restaurant still appears on the list, or you want that score removed too, write to info@oyist.com and we will remove it. Your restaurant's name is enough.
• Deleting the app (deleting it on iOS, uninstalling it on Android) removes only the data on the device; your account, cloud save, player card and list entry with Unity remain. To delete those, use the button in the game first, or write to us. If you restore your iOS device from an iCloud or computer backup, or reinstall the game on Android while Google backup is on, an older save may come back.
• If you cannot open the game: email info@oyist.com with the subject “COOKZ data deletion” and tell us your restaurant's name and country (and your username, if you have an account).
• Advertising data: withdraw consent under Settings ▸ Help and privacy ▸ Privacy options (where the form is required) and tracking permission in the iOS settings, or delete your advertising ID on Android. Data Google processes for advertising is subject to Google's policy; Unity's purchase records and hardware statistics are subject to Unity's.

To have the emails you sent us deleted, write to the same address with the subject “COOKZ data deletion”. Requests are completed within 30 days.

7. Retention

Your Unity player, account, cloud save and list entry are kept until you delete them. On-device data stays on the device until you use the delete button in the profile or delete the app. Emails are kept for as long as the correspondence requires. Google's advertising data, the purchase records of Apple or Google Play, and Unity's service records, the purchasing library's records and hardware statistics at Unity are subject to their own retention periods.

8. Security

Connections to Unity's online services, Google's ad servers and the stores are encrypted (HTTPS/TLS), as are the records the purchasing library sends to Unity. Your password never reaches us. Even so, no system on the internet is completely secure.

9. International transfers

Unity's, Google's and Apple's servers are outside Türkiye, in regions that include the US and EU countries, so your player ID, account, list entry (score) and player card (restaurant name, country), cloud save, the data processed for ads and purchases and the engine's hardware statistics are transferred abroad. You can write to us for information on the safeguards the transfer relies on.

10. Children

COOKZ is a restaurant game for a general audience aged 13 and over. It is not directed to children and is not published in a children's category, in Google Play's Families program or with a target audience under 13 in the stores. Ad requests are therefore not tagged as child-directed; they are capped at the T (teen) content rating. Parents can use Screen Time on iOS to restrict in-app purchases and apps' requests to track, and on Android Google Play's parental controls and purchase authentication setting to restrict purchases. The world list and accounts are not for children under 13. If you are a parent and have a question or a deletion request about your child, write to us.

11. Changes

We update this policy when the game's data practices change. The date of the last update is at the top of the page. We announce material changes in the game or on this page. In the game, the Settings ▸ Help and privacy ▸ Privacy policy row and the link on the sign-up form open this page: the Turkish page if the game is in Turkish, the English page in any other language. The game can be played in English, Turkish, Spanish, Italian and Japanese (in Latin script); this policy is published in Turkish and English.

12. Contact

Abdulkerim Atik (OYIST) — Türkiye
Email: info@oyist.com

13. Notice to players in Europe

This section applies to players in the European Economic Area, the United Kingdom and Switzerland (GDPR, UK GDPR and the Swiss data protection act). The controller is Abdulkerim Atik (OYIST); contact details are above.

Legal bases

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing and to receive a portable copy; to object to processing based on legitimate interests; and to withdraw consent at any time. You can correct your restaurant name and country in the profile and delete your account and data as described in section 6. You can withdraw ad consent under Settings ▸ Help and privacy ▸ Privacy options in the game. For other requests, write to info@oyist.com.

If you are not satisfied with our response, you can complain to the supervisory authority where you live: EEA supervisory authorities, or the ICO in the UK.

Transfers outside Europe

The controller is in Türkiye, and some of Google's and Unity's servers are in the US. For transfers outside Europe, Google and Unity rely on the European Commission's standard contractual clauses in their data processing terms. Write to us for details.

14. Notice to players in US states

This section is for residents of US states with their own privacy laws (e.g. California). Personal information processed now and in the past 12 months:

We do not process sensitive personal information, and we do not sell personal information for money. We disclose your player ID, account, list entry and cloud save to our service provider Unity only to provide the game; we do not sell them or share them for targeted advertising. If you allow tracking on iOS, or your advertising ID is on in Android, disclosing your advertising identifier and ad data to Google for targeted advertising may count as a “sale” or “sharing” under some state laws. To opt out, turn off tracking for COOKZ under Settings ▸ Privacy & Security ▸ Tracking on iOS or delete your advertising ID on Android; you can also write to us. The game has no separate consent form for US states. We have no actual knowledge of selling or sharing the personal information of consumers under 16.

To exercise your rights to know, access, correct, delete and opt out, write to info@oyist.com. You may also use an authorised agent, and you may appeal a request we decline. You will not be discriminated against for exercising your rights. We do not share personal information with third parties for their direct marketing (California “Shine the Light”).

15. Notice for Türkiye (KVKK)

Prepared under Article 10 of Türkiye's Personal Data Protection Law No. 6698 (KVKK) for COOKZ players. The Turkish version of this page is the binding notice.

• Controller: Abdulkerim Atik (OYIST), independent developer, Türkiye — info@oyist.com.
• Data categories: identity (Unity player ID, username if you create an account, publicly shown restaurant name), transaction security (IP address, session token, device identifiers: the IDFV on iOS, the app set ID on Android, the installation ID; diagnostic data, the device's technical details), customer transactions (the save and its cloud copy: country, chef, progress, coins; restaurant score; purchases, transaction numbers and store receipts), marketing (device and ad-interaction data for serving and measuring ads; the IDFA on iOS if you allow tracking; the advertising ID on Android unless you deleted it), contact (your email, only if you write to us).
• Purposes: as in section 3 and section 4.
• Method and legal grounds: collected electronically through the game, automatically, and through your emails; KVKK Art. 5/1 (explicit consent: on iOS, use of the IDFA and interest-based ads, given in the iOS tracking prompt and withdrawable at any time under Settings ▸ Privacy & Security ▸ Tracking; on Android you can delete or reset your advertising ID in Android settings), 5/2-c (contract: the save and its cloud copy, the world list, the optional account, purchases), 5/2-ç (legal obligation), 5/2-e (establishing, exercising or protecting a right), 5/2-f (legitimate interests: safety, service diagnostics, offering the game free with ads, reliable purchases).
• Transfers: to Unity Technologies (as processor for the account, world list and cloud save; also the purchasing library and the engine's hardware statistics), Google (ads and ad consent; purchases through Google Play on Android), Apple (purchases on iOS), other players (your restaurant name, country and score on the world list) and, upon lawful request, competent authorities. Because Google's, Apple's and Unity's servers are abroad, your data is transferred abroad; write to us for information on the safeguard relied on.
• Rights (KVKK Art. 11) and applications: you may apply to info@oyist.com under the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications are concluded free of charge within 30 days; if rejected or answered inadequately you may complain to the Personal Data Protection Board.

Adapted for COOKZ from the “Privacy Policy (GDPR Enhanced)” template released under CC0 by General Legal, PC. General Legal has not reviewed this adaptation; the template does not constitute legal advice.