Lokz — Privacy Policy

This policy applies only to the Lokz: Block Puzzle mobile game (iOS and Android, com.oyist.lokz). For our website, the site privacy notice applies. Your ad choices: Advertising. Additional information for players in Europe, the US and Türkiye is at the end: Europe · US states · Türkiye (KVKK).

In short

• Lokz is a single-player puzzle game. It creates no account and asks for no sign-in. We never ask for your name, email address, phone number, date of birth, precise location or contacts.
• Your progress, bombs, row clears and settings are stored on your device only. We run no servers, and the game sends no data to us.
• The game shows Google AdMob ads. In Europe, Google's consent form asks you first, at launch. On iOS, Apple's tracking prompt (ATT) comes after you finish your first building, following a short explanation from the game. If you allow tracking, ads may be chosen based on your interests; if you don't, or haven't answered yet, your advertising ID is not read. On Android there is no tracking prompt: Google may use the device's advertising ID, which you can delete or reset in Android settings. Details: Advertising and your ad choices.
• Purchases are handled directly by Apple (App Store) or Google Play; we never see your payment details. The game keeps its purchase records on your device only and never sends them to us.
• We do not sell your data. To delete the game's data: Deleting your data.

1. Personal information we collect

Information you provide

You give us no information in the game: there is no account, username, form or chat. If you email us, we receive your email address and your message.

Information processed automatically

• Advertising data (Google): when ads are requested and shown, the Google Mobile Ads SDK processes your IP address (from which a coarse, country- or city-level location can be derived), device information (model, operating system and version, language), app-scoped identifiers (the identifier for vendor, IDFV, on iOS; the app set ID on Android), your advertising identifier (on iOS the IDFA, only if you allow it; on Android the Android advertising ID, unless you deleted it in your device settings), ad interactions (app launches, views, taps, completed rewarded ads) and diagnostic data about the performance and crashes of the app and the SDK. Google uses them to serve and measure ads, cap how often the same ad appears, report on ads, prevent fraud and, if you allow it on iOS or your advertising ID is on in Android, personalise ads.
• Purchase data (Apple or Google Play): when you buy something, the App Store (iOS) or Google Play (Android) handles the payment. The game talks to the store directly: through Apple's StoreKit on iOS and Google Play Billing on Android. So that a purchase is never delivered twice, the game keeps the store's transaction number (on Android, Google Play's purchase token) on the device only; to restore “Remove Ads”, it asks the store which products you own. On Android, the game confirms each delivered purchase with Google Play; it does not send purchase information to us or anyone else.

What we do not collect

We do not collect your name, email address (unless you write to us), phone number, date of birth, address, precise location, contacts, photos, camera or microphone data. There is no chat and no user-generated content. The game contains no analytics or crash-reporting tools. The online services, crash reporting and hardware statistics of the Unity engine the game is built with are turned off; the game sends no data to Unity. We receive crash reports only from the stores: from Apple on iOS, if you chose to share them with developers in your device settings; on Android, from Google Play's own Android vitals, if you chose to share usage and diagnostics data with Google on your device. What Google processes for ads never reaches us; Google gives us only aggregate ad reports (such as impressions and revenue).

2. On-device storage and similar technologies

The game uses no web cookies. Your save and a backup copy of it are kept in the app's own folder on the device: levels, stars and best scores, the floors of unfinished buildings, your choices in the city, the architect you picked, the story and tutorial pages you have seen, your bombs and row clears, whether you own “Remove Ads”, the transaction numbers of delivered purchases (on Android, Google Play's purchase tokens), your settings (music, sound effects, voice, vibration, language, graphics, theme) and ad counters (time of the last interstitial, floors cleared since then, time of the free booster, rewarded ads watched towards a bomb). The Google Mobile Ads SDK and Google's consent tool (UMP) may store your ad choice and the information needed to deliver ads on the device. On iOS, if iCloud or computer backup is on for your device, app data may be included in that backup; your Apple account and device settings control it. On Android, if Google backup is on, the device may back up app data to your Google account; your Android and Google account settings control that backup. We cannot access either backup.

3. How we use personal information

• Providing the game: progress is saved on the device and is not sent anywhere.
• Purchases: delivering products, never delivering a purchase twice, and restoring “Remove Ads”.
• Advertising: keeping the game free; see section 4.
• Support: answering your emails.

We do not use your data to send marketing emails, to build profiles or to train AI. We make no automated decisions about you that have legal or similarly significant effects.

4. Advertising and your ad choices

To keep Lokz free, the game shows ads served by Google's AdMob.

• Interstitials: no full-screen ads during the first two buildings. From the third building on, at most one after every second floor you clear: between floors as you move on to the next one, or on a building's last floor after the building has been shown in the city (if there is a story scene, after the scene and the thank-you screen). Lost attempts do not count. Never during play, and never within 2 minutes of the previous interstitial.
• Rewarded ads are optional and appear only when you tap for one: +5 moves after a lost attempt (once per attempt), a free booster every 4 hours (the gift balloon), doubling the city's thank-you gift, and the Shop card “Watch ads, win a bomb” (1 bomb for every 5 rewarded ads).
• “Remove Ads” turns interstitials off permanently; rewarded ads still appear only when you ask for them. The toolboxes do not remove ads.
• Ad requests are capped at the G (general audiences) content rating. They are not tagged as child-directed (see section 10).

The consent form, the tracking prompt and the Android advertising ID

Whether ads may be personalised depends on the following:

1. In the European Economic Area, the United Kingdom and Switzerland, Google's consent form (UMP) appears first, when the game starts (on iOS and Android): you can accept, decline or choose purposes one by one. No ad is requested before you answer it. If you do not consent, Google shows non-personalised or limited ads.
2. On iOS, Apple's tracking prompt (App Tracking Transparency) is not shown at launch. After you finish your first building, the game shows a short explanation of why it shows ads and what the choice changes; its only button, Continue, takes you to Apple's prompt, which iOS shows once. Until you answer, ads are requested without your advertising identifier (IDFA), so they are not personalised. If you allow tracking, Google may use the IDFA to choose and measure ads based on your interests; Apple calls this “tracking”. If you do not, the IDFA is not read or shared; ads still appear, but they are not chosen using data collected about you across apps and websites. If your device does not allow apps to request tracking, neither the explanation nor the prompt appears and tracking counts as not allowed.
3. On Android there is no tracking prompt and no explanation from the game. The game declares the advertising ID permission (AD_ID), and the Google Mobile Ads SDK reads the device's advertising ID unless you deleted it in Android settings. In Europe, personalisation follows your choice in the consent form. Elsewhere the game asks nothing further, and Google may use your advertising ID to choose and measure ads based on your interests. You can delete or reset your advertising ID in Android settings at any time; if you delete it, ads still appear, but they are not personalised using that ID.

Changing your choices

• In the game: Settings ▸ Ad Choices. Where a consent form is required, it reopens Google's form, where you can change or withdraw your consent. Elsewhere it opens this section.
• Tracking permission: on iOS, turn tracking for Lokz on or off at any time under Settings ▸ Privacy & Security ▸ Tracking.
• Android advertising ID: delete or reset it under Settings ▸ Privacy ▸ Ads (on some devices Settings ▸ Google ▸ Ads).
• Removing ads: the “Remove Ads” product in the Shop. It comes back on the Apple or Google account you bought it with, through Shop ▸ Restore or Settings ▸ Restore Purchases; on Android it is also restored automatically when the game starts.
• The ad itself: the AdChoices icon in the corner of most ads shows why an ad was shown and lets you report it. How Google uses data: how Google uses data from partner apps.

5. Who we share it with

• Google (Google LLC / Google Ireland Limited): AdMob ads and the ad consent form. Google processes this data under its own policy, including ad personalisation if you allow it: Google privacy policy, how Google uses data from partner apps.
• Apple and Google (App Store, Google Play): they handle purchases and payment. Your payment details never reach us.
• Authorities: when there is a lawful request, or where needed to protect our rights.
• Business transfers: if the game or the studio is transferred, to the new owner, who remains bound by this policy.

We do not sell your personal information for money.

6. Deleting your data

Because there are no accounts, we hold no game record about you.

• Settings ▸ Reset Progress: deletes levels, stars, the city, the architect you picked and the stories you have seen. Purchases, bombs, row clears and your settings are kept.
• Deleting the app (deleting it on iOS, uninstalling it on Android) removes all of the game's data from the device. Purchased bombs and row clears go too and cannot be restored; “Remove Ads” belongs to your Apple or Google account and can be restored. If you restore your iOS device from an iCloud or computer backup, or reinstall the game on Android while Google backup is on, an older save may come back.
• Advertising data: withdraw consent under Settings ▸ Ad Choices and tracking permission in the iOS settings, or delete your advertising ID on Android. Data Google processes for advertising is subject to Google's policy.

To have the emails you sent us deleted, email info@oyist.com with the subject “Lokz data deletion”. Requests are completed within 30 days.

7. Retention

On-device data stays on the device until you delete the app. Emails are kept for as long as the correspondence requires. Google's advertising data and the purchase records of Apple or Google Play are subject to their own retention periods.

8. Security

Your save never leaves the device (apart from the device's own backup). Google's ad connections and the purchase transactions of Apple and Google Play use encrypted (HTTPS/TLS) connections. Even so, no system on the internet is completely secure.

9. International transfers

Google's and Apple's servers are outside Türkiye, in regions that include the US and EU countries, so data processed for ads and purchases is transferred abroad. You can write to us for information on the safeguards the transfer relies on.

10. Children

Lokz is a puzzle game for a general audience. Its App Store age rating is 4+ and its Google Play content rating is IARC 3+ (for example PEGI 3, ESRB Everyone), meaning its content contains nothing objectionable; but it is not directed to children and is not published in a children's category, in Google Play's Families program or with a children's target audience. Ad requests are therefore not tagged as child-directed; they are capped at the G (general audiences) content rating. Parents can use Screen Time on iOS to restrict in-app purchases and apps' requests to track, and on Android Google Play's parental controls and purchase authentication setting to restrict purchases. We hold no records about players; if you are a parent and have a question about your child, write to us.

11. Changes

We update this policy when the game's data practices change. The date of the last update is at the top of the page. We announce material changes in the game or on this page.

12. Contact

Abdulkerim Atik (OYIST) — Türkiye
Email: info@oyist.com

13. Notice to players in Europe

This section applies to players in the European Economic Area, the United Kingdom and Switzerland (GDPR, UK GDPR and the Swiss data protection act). The controller is Abdulkerim Atik (OYIST); contact details are above.

Legal bases

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing and to receive a portable copy; to object to processing based on legitimate interests; and to withdraw consent at any time. You can withdraw ad consent under Settings ▸ Ad Choices in the game. For other requests, write to info@oyist.com.

If you are not satisfied with our response, you can complain to the supervisory authority where you live: EEA supervisory authorities, or the ICO in the UK.

Transfers outside Europe

The controller is in Türkiye, and some of Google's servers are in the US. For transfers outside Europe, Google relies on the European Commission's standard contractual clauses in its data processing terms. Write to us for details.

14. Notice to players in US states

This section is for residents of US states with their own privacy laws (e.g. California). Personal information processed now and in the past 12 months:

We do not process sensitive personal information, and we do not sell personal information for money. If you allow tracking on iOS, or your advertising ID is on in Android, disclosing your advertising identifier and ad data to Google for targeted advertising may count as a “sale” or “sharing” under some state laws. To opt out, turn off tracking for Lokz under Settings ▸ Privacy & Security ▸ Tracking on iOS or delete your advertising ID on Android; you can also write to us. The game has no separate consent form for US states. We have no actual knowledge of selling or sharing the personal information of consumers under 16.

To exercise your rights to know, access, correct, delete and opt out, write to info@oyist.com. You may also use an authorised agent, and you may appeal a request we decline. You will not be discriminated against for exercising your rights. We do not share personal information with third parties for their direct marketing (California “Shine the Light”).

15. Notice for Türkiye (KVKK)

Prepared under Article 10 of Türkiye's Personal Data Protection Law No. 6698 (KVKK) for Lokz players. The Turkish version of this page is the binding notice.

• Controller: Abdulkerim Atik (OYIST), independent developer, Türkiye — info@oyist.com.
• Data categories: transaction security (IP address, device identifier: the IDFV on iOS, the app set ID on Android; diagnostic data), customer transactions (purchases, transaction numbers; Google Play purchase tokens on Android), marketing (device and ad-interaction data for serving and measuring ads; the IDFA on iOS if you allow tracking; the advertising ID on Android unless you deleted it), contact (your email, only if you write to us).
• Purposes: as in section 3 and section 4.
• Method and legal grounds: collected electronically through the game, automatically, and through your emails; KVKK Art. 5/1 (explicit consent: on iOS, use of the IDFA and interest-based ads, given in the iOS tracking prompt and withdrawable at any time under Settings ▸ Privacy & Security ▸ Tracking; on Android you can delete or reset your advertising ID in Android settings), 5/2-c (contract: purchases), 5/2-ç (legal obligation), 5/2-e (establishing, exercising or protecting a right), 5/2-f (legitimate interests: offering the game free with ads, reliable purchases).
• Transfers: to Google (ads and ad consent; purchases through Google Play on Android), Apple (purchases on iOS) and, upon lawful request, competent authorities. Because Google's and Apple's servers are abroad, your data is transferred abroad; write to us for information on the safeguard relied on.
• Rights (KVKK Art. 11) and applications: you may apply to info@oyist.com under the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications are concluded free of charge within 30 days; if rejected or answered inadequately you may complain to the Personal Data Protection Board.

Adapted for Lokz from the “Privacy Policy (GDPR Enhanced)” template released under CC0 by General Legal, PC. General Legal has not reviewed this adaptation; the template does not constitute legal advice.