← Back to home

Privacy Policy

Last updated: 5 September 2026

This Privacy Policy explains how Beliz Varol, trading as Goose Games (“we”, “us”), handles personal data when you visit goosegms.com (the “Website”), use our mobile games (the “Games”), or contact us. It is a privacy notice, not a request for consent.

Scope and development status. As of the date above, we operate this studio Website and have not publicly released a Game. The Website and contact sections describe our current public services. The game-related sections describe the intended scope of future Games and apply only when the relevant Game or feature becomes available. We will update this Policy before a public test or release that introduces new processing, including a soft launch, and align it with the Game’s notices and store privacy disclosures.

1. Information we collect and how we obtain it

1.1 Website and correspondence

The Website has no registration, advertising, analytics scripts or contact form. Delivering a page involves our hosting infrastructure receiving technical request data, such as your IP address, requested URL, browser information and request time. The infrastructure may retain request or security logs. See our Cookies Policy for information about storage on your device.

When you contact us by email, we receive your email address, message, attachments and any information you choose to provide. Please do not send passwords, payment card details or unnecessary sensitive information.

1.2 Information in future Games

Depending on the features included in a released Game, we may process the following information. These activities do not take place merely because you visit this Website:

• Technical and installation data: app and operating system versions, device model, language, country or region, app-instance or installation identifiers, and technical network information processed by the integrated services. A country or region may be inferred from IP information; this is different from precise GPS location.
• Gameplay and analytics: sessions, level attempts and completion, progress, game economy events and interactions used to understand gameplay and performance.
• Diagnostics: crash traces, errors, diagnostic logs and device or installation information used to investigate failures.
• Remote configuration: installation and app information used to retrieve game configuration, such as feature availability and balancing settings.
• Local saves: progress and preferences stored on your device. A local save is not, by itself, a cloud backup or a guarantee of recovery after reinstalling.

Where the relevant features are available, these data are collected automatically through the Game and its SDKs, or directly from you when you contact us. Not knowing your real name does not make installation identifiers or linked gameplay data anonymous: we treat identifiable or pseudonymous information as personal data.

1.3 Other planned features

Future versions may introduce cloud player identifiers and support codes, cloud progress storage, push notification tokens, or advertising identifiers and ad-interaction data. Before those features are enabled, we will identify their providers, data uses and applicable choices in this Policy. They are not required to visit the Website.

If a Game offers in-app purchases, Apple or Google processes the payment. We may receive product identifiers, transaction references and purchase or refund status to deliver content and resolve problems. We do not receive payment card details through the store payment process.

2. Purposes and legal grounds

We use data to deliver and support our products, apply game settings, understand gameplay, diagnose failures, protect against abuse, answer requests and meet legal duties. The legal ground depends on the specific activity and applicable law:

• Providing a requested service: information necessary to perform our contract with you, such as delivering purchased content or resolving a service request.
• Security and essential diagnostics: legitimate interests in reliable and secure products, where those interests do not override your rights and consent is not required for the processing or access to your device.
• Optional analytics and advertising: consent where required by applicable privacy or device-storage rules. A contractual term or your continued use does not replace that consent.
• Compliance and claims: legal obligations and, where permitted, establishing, exercising or defending legal rights.

For processing subject to Türkiye’s Law No. 6698 (“KVKK”), these grounds correspond, as applicable, to Article 5(2)(c), (ç), (e) and (f), or explicit consent under Article 5(1). For EEA and UK users, the applicable grounds include contract, legitimate interests, legal obligation and consent under the GDPR or UK GDPR. Information required to fulfill a request must be provided for us to fulfill it; optional processing is not a condition of reading the Website.

3. Providers and recipients

For the Website and correspondence, we use hosting and email service providers to deliver pages and messages, including technical routing and security information.

For future Games, our planned core services are:

• Google Analytics for Firebase: gameplay and usage measurement.
• Firebase Crashlytics: crash and diagnostic reporting.
• Firebase Remote Config: delivery of game configuration. Google's Firebase privacy information explains the data processed by each service; see also Google’s Privacy Policy.
• Apple and Google: game distribution and, where offered, purchases, refunds and store reporting. See Apple’s privacy information and Google’s Privacy Policy.

Advertising providers: we do not currently offer a publicly released ad-supported Game, and our advertising providers have not yet been selected. We will name the mediation platform and participating networks, and explain their processing, before enabling advertising.

Additional planned Google services include Firebase Authentication and Cloud Firestore for player identity and cloud saves, Firebase Cloud Messaging for notifications, and BigQuery and Looker Studio for analytics reporting. The services actually used will be confirmed before the relevant Game or feature is released.

Providers may act as processors under our instructions or as controllers for activities they determine, depending on the service and applicable terms. We may also disclose necessary information to professional advisers, authorities where legally required, or parties to a business transfer with appropriate confidentiality and data-protection measures. A business transfer does not remove your privacy rights.

4. Privacy choices

You can contact legal@goosegms.com to exercise your rights or withdraw consent for processing based on consent. Withdrawal does not affect processing that was lawful beforehand. Device advertising controls do not automatically stop Firebase analytics or erase stored data.

Before consent-based processing begins, we will provide the relevant choices and explain how to change them. Where in-game privacy controls are available, you can use them as well as contacting us. If a feature needs permission and you decline, its permission-dependent processing must remain disabled.

For future advertising features, contextual ads must not be treated as automatically exempt from consent: their SDKs may still access device storage or process personal data. Choosing to watch a rewarded ad is separate from consenting to tracking. On iOS, permission through App Tracking Transparency is separate from any other consent required by law.

5. Children and younger players

Our Games are intended for players aged 13 and above, as stated in our Terms & Conditions. Players who cannot enter a binding contract must have a parent or guardian review and agree to the Terms. A store content rating is not a determination of the age at which a child can legally consent to data processing.

Where the law requires parental authorization for consent-based processing involving a younger player, we will obtain that authorization before the processing begins. If we learn that a child’s personal data has been collected unlawfully, we will take appropriate steps to stop the processing and delete the data unless retention is legally required. A parent or guardian can contact legal@goosegms.com to ask us to investigate.

6. International processing

We operate in Türkiye. Our service providers may process data in other countries, including the United States, where protection rules may differ. Transfers must satisfy the rules applicable to the data: these may require an adequacy decision or contractual safeguards, including EU Standard Contractual Clauses and the relevant UK transfer instrument for EEA or UK data.

Transfers subject to KVKK must separately meet Article 9, including an applicable adequacy decision or a permitted safeguard and any required notification. EU contractual clauses alone do not establish compliance with Turkish transfer rules. You may contact us for information about the safeguards applicable to your data and an appropriately redacted copy where available. Reading this Policy is not consent to an international transfer.

7. Retention and deletion

We keep personal data only while needed for the stated purpose or a legal retention requirement. Retention depends on the category, service configuration, support needs and any applicable claim or record-keeping obligation.

• Website request and security data: for delivery, security investigations and the relevant hosting log lifecycle.
• Analytics: under the configured retention period of the analytics property. Pseudonymous event records remain personal data; aggregate reports are only anonymous if individuals can no longer be identified.
• Crash reports: Google states that Crashlytics retains crash traces and associated identifiers for 90 days before starting removal from live and backup systems; see its service-specific retention information.
• Correspondence and purchase records: while necessary to resolve the matter and satisfy relevant legal or claims requirements.
• Local saves: until cleared or removed from the device, subject to operating-system backup behavior.

After the applicable purpose or retention requirement ends, data is deleted or anonymized. Backup deletion may follow a separate lifecycle. Uninstalling a Game does not itself request deletion of server-side analytics or correspondence.

8. Your rights and how to request deletion

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, including processing based on legitimate interests. You may withdraw consent. Contact legal@goosegms.com, giving the game name, platform and any player or support identifier available to you. Please retain that identifier before uninstalling if possible. It is not mandatory to provide an identifier that the Game does not display.

We may request proportionate information to verify your identity and locate your records. We do not require you to send a password or payment card. If records cannot be linked to you with the available information, we will explain the limitation. Deleting game data may permanently remove progress; mandatory records may need to be retained, and we will explain any applicable exception.

Türkiye

Under Article 11 of KVKK, you may learn whether your data is processed, request information about it and its purposes, learn the recipients in Türkiye or abroad, request correction or deletion where the legal conditions are met and notification of those actions to recipients, object to an adverse result arising solely from automated analysis, and claim compensation for unlawful processing.

You may apply to us at the postal address above or through another method permitted by the applicable application rules; email us for assistance. We respond as soon as possible and within 30 days. Where the statutory conditions are met, you can complain to the Personal Data Protection Authority after first applying to us.

EEA and United Kingdom

We normally respond within one month. Where the law allows an extension for a complex request, we will tell you within that month and explain why. You may complain to the data protection authority where you live or work or where the alleged infringement occurred, including the UK Information Commissioner where applicable.

United States

Where a state privacy law applies to us and your data, your rights may include access, correction, deletion, portability, and opting out of sale, sharing or targeted advertising, without unlawful discrimination. We do not exchange personal data for money. Disclosure for advertising can nevertheless count as a “sale” or “sharing” under some state laws. Before introducing such processing, we will describe it and the applicable opt-out methods. Contact us to exercise an applicable right or appeal a refusal where your state law provides that right.

9. Security

We use proportionate technical and organizational measures to protect personal data. No service or transmission method can be guaranteed completely secure. Where required, we will notify the relevant authority and affected individuals of a personal data breach.

10. Changes and contact

We will update the date above when this Policy changes and provide additional notice of material changes where appropriate. A policy update does not replace any consent required for a new purpose. For privacy questions, contact legal@goosegms.com; for general support, contact info@goosegms.com.