OKEYTO — Privacy Policy
Short version. OKEYTO has no accounts and no servers of ours. Your progress lives on your device. The only data that leaves your phone goes to Apple or Google when you buy something, and to Google's ad service if you choose to watch a rewarded video.
1. Who we are
OKEYTO (the "Game") is published under the brand Graviti Labs by TABA TASARIM İNŞAAT ANONİM ŞİRKETİ, a Turkish joint-stock company registered at Şehit Şakir Elkovan Cad. No:3, Ataşehir, İstanbul, Türkiye ("we", "us"). Contact: [email protected], attention Tahsin Bayraktar.
We are the data controller for the limited processing described below.
2. We do not ask you to register
There is no OKEYTO account, no login, no email address, no username and no social sign-in. We never ask for your name, phone number, address, date of birth, photographs or contacts.
3. What is stored on your device
Your save file is written to the Game's private app storage and is never uploaded to us. It contains:
- Level progress, stars, score, lives, streaks and the levels you have unlocked.
- Coins, boosters, tile skins, tea-house decorations and other in-game items.
- Settings: language, music and effect volume, haptics and the reduced-flashing option.
- Transaction identifiers issued by Apple or Google, used only to make sure a purchase is delivered exactly once.
- Counters that enforce the daily limits on rewarded video, and a record of whether the ad-consent and tracking prompts have already been answered.
A handful of non-personal interface flags — which tutorial cards you have already been shown — are kept in the platform's own app-preferences store alongside it.
Deleting the Game deletes all of this. If your device backs up app data (iCloud, Google backup), the save is included in that backup under the platform's own privacy terms, not ours. The delete your data page explains every way to erase it.
4. Purchases
In-app purchases are processed entirely by Apple's App Store or Google Play. We never see or receive your card number, billing address or Apple/Google account. The store returns a product identifier and a transaction identifier, which the Game records locally so the same purchase cannot be granted twice, and so an interrupted purchase can be delivered on your next launch.
5. Advertising — rewarded video only, and never without your tap
OKEYTO shows no banners and no interstitials. There is no ad you did not ask for. The only advertising in the Game is an optional rewarded video that you start yourself — to continue a level, to take an extra life, to claim free coins, or for an extra wheel spin. No ad is ever shown unless you start it. To be precise about what happens before that: if you decline consent, the advertising software is never started and nothing is loaded at all. If you accept, then once you have finished a level the Game quietly starts the advertising software and pre-loads a single rewarded video, so that it is ready without a wait if you choose to watch one. That pre-load means Google receives your advertising identifier at that point, whether or not you go on to watch anything — which is why your choices about ads (section 6) matter, and why identifiers and usage data appear in the table below.
When you do choose to watch one, the ad is served by Google AdMob (Google Ireland Limited). To serve it, Google may process your device advertising identifier, coarse IP-derived location, device model and operating system version. Google acts as an independent controller for that processing. Their policy: policies.google.com/technologies/partner-sites.
6. Your choices about ads
- Europe, the UK and Switzerland. Before any ad software runs you are shown a Google-certified consent form (UMP). Personalised advertising is used only if you agree. You can reopen the form at any time from Settings → Privacy options and change or withdraw your choice.
- iOS. Apple's App Tracking Transparency prompt is shown separately. If you decline, the advertising identifier is not available and ads are non-personalised. You can change this in iOS Settings → Privacy & Security → Tracking.
- Android. You can reset or delete your advertising ID in Android Settings → Privacy → Ads.
- Declining any of the above never removes game content. The rewarded buttons simply stop being offered.
Neither prompt appears while you are still on the splash screen. The consent form and the tracking prompt are held back until you have finished a level and the map is sitting still, or until you tap a button that actually needs an ad.
7. Notifications
If you allow notifications, the Game schedules reminders locally on your device — lives refilled, daily reward ready, streak about to lapse. They are not sent from a server and no push token is shared with us. You can turn them off in your device settings at any time. The Game asks for notification permission only after you have played, never at launch.
8. Analytics
OKEYTO ships with no analytics SDK. Gameplay events are written to the device's local debug log and are not transmitted anywhere. The Game contains no code that opens a network connection of its own — the only network traffic it can cause is the ad software you started and the store's own purchase flow. If we add analytics in a future version, this policy will be updated before that version ships and the change will be described here.
9. Permissions we never ask for
The Game requests no access to your camera, microphone, photo library, contacts, calendar, health data, files or location. On iOS the corresponding usage descriptions are deliberately empty because the features do not exist. The only two system prompts OKEYTO can show are the advertising consent form and, on iOS, App Tracking Transparency — plus notifications, if you get far enough to be offered a reminder.
10. Legal bases (GDPR / UK GDPR / KVKK)
| Purpose | Data | Basis |
|---|---|---|
| Running the game and saving progress | On-device save file | Contract — Art. 6(1)(b) |
| Delivering a purchase once and only once | Store transaction id | Contract — Art. 6(1)(b) |
| Personalised rewarded advertising | Advertising identifier | Consent — Art. 6(1)(a) |
| Non-personalised rewarded advertising, fraud prevention | Advertising identifier, IP | Legitimate interests — Art. 6(1)(f) |
11. Retention and deletion
We hold no copy of your data, so there is nothing for us to retain or delete on our side. Your save file stays on your device until you erase it — either with Settings → Delete Save Data inside the Game, or by deleting the Game itself. Data held by Google for advertising is retained under Google's own schedule. Step-by-step instructions are on the delete your data page.
12. Children
OKEYTO is not directed at children under 13 (under 16 in the EEA/UK). We do not knowingly collect personal data from children. Because there is no registration, we hold no identifiable data to remove; if you believe a child has been shown personalised advertising, use the consent controls in section 6 and contact us.
13. Your rights
Under the GDPR, the UK GDPR, Türkiye's KVKK and the CCPA/CPRA you may request access to, correction of, or erasure of personal data about you, and object to processing. Because OKEYTO holds no personal data on our systems, most requests are answered by pointing you to the on-device controls above. We do not sell or share personal information as those terms are defined by the CCPA/CPRA. Write to [email protected] and we will respond within 30 days. You may also complain to your local supervisory authority, or in Türkiye to the Personal Data Protection Authority (KVKK).
14. International transfers
We transfer nothing ourselves. Google may process advertising data outside your country under the Standard Contractual Clauses and its own transfer framework.
15. Changes
If this policy changes materially, we update the date at the top and describe the change in the app's release notes.