Sarı Durak — Privacy Policy
Last updated: 5 November 2026
Sarı Durak is a game published by Okan Irtis. This policy explains what information the game processes and what is done with it.
Contact: info@okanirtis.com
In short
- Your single-player save stays on your device; it never reaches us. If you allow it, only a short summary (your in-game name and company name, district, game day, cash, number of cars) reaches us with a random device number, so we can give support; you can turn it off.
- When it opens, the game downloads settings, announcements and events from our server. If you allow it, it sends crash reports without personal data and anonymous usage counts; you can turn both off.
- In the phone app, ads are shown by Google AdMob. If you allow it, ads are chosen by your interests; if you don't, you still see ads, but they are not personalised.
- Purchases are made through the App Store or Google Play; your card details never reach us.
- An account is optional: your email address, your password in encrypted form, your username, your friend invite code, a cloud save of your game and your shared world progress are stored; you can delete your account from inside the game.
- We do not sell your information.
Single-player game
No account is needed. Your save, gems and settings are stored only on your device and never reach us. Deleting the app deletes the save. The code you get from Menu → Save backup when changing phones stays with you; we never see it.
What talks to our server
Even in the single-player game, the game talks to our server in these cases. None of them sends an email, your real identity or the advertising identifier:
| What | What is sent | How long it is kept |
|---|---|---|
| Settings, announcements, events | Downloaded when the game opens; nothing is sent about you | — |
| Crash report | If the game crashes: the error itself, the game version, the platform (iPhone/Android) | 30 days |
| Anonymous usage statistics | Without any identifier. When you first open the game on a day: that it was opened that day, how many days since you installed it, version, platform, language. Once the next day: how many minutes were played the day before, whether the tutorial was finished, the starting district, how many times each ad spot was watched, which packs were bought. If a settings test is running, which group (A or B) your device is in is sent too. Only daily totals are kept on the server | Up to 400 days (totals) |
| Game summary for support | If you allow it, hourly: a random device number (unique to this installation; not the advertising identifier, a new one is created if the app is deleted), the name and company name you typed in the game, district, game day, cash, number of cars, drivers and stands, gems, number of trips, version, platform, language, and whether you are signed in to an account. So that if you have a problem we can find your game, help and send a make-up gift. Only we see it | Deleted a year after you last open the game |
| Gift code | Only the code you type | — |
| Feedback | Your message, optionally the game version and device type, and optionally your e-mail address (so we can reply) | Up to 120 days after the issue is resolved |
During these requests your IP address is used only to limit requests (for example, how many new device summaries come from one connection in a day) and is not stored; these counters are deleted by the following night at the latest. You can turn off crash reports, the game summary for support and anonymous statistics in the game under Menu → Privacy and your data.
Ads
The phone app has two kinds of ads:
- Rewarded ads: shown only when you tap a "watch an ad" button; you get an in-game reward in return.
- Interstitial ads: a short ad that appears now and then on its own. Never on your first day, at most once every 15 minutes, and never with the supporter or ad-free pack.
The game is not played in a browser; the page that opens in a browser is only a download page and shows no ads.
Ads are shown by Google AdMob. To show and measure ads and to prevent fraud, Google processes some information about your device: the advertising identifier (if you allowed it), IP address and the approximate location derived from it, device type and operating system, and your interaction with the ad (shown, tapped). This information does not reach us. How Google uses it: policies.google.com/technologies/partner-sites
Personalised ads: on iPhone, Apple's tracking permission prompt appears when the app is first opened. If you allow it, ads are chosen by your interests; if you don't, you still see ads, but they are not personalised. You can change this at any time in Settings → Privacy & Security → Tracking. On Android you can delete or reset your advertising ID in Settings → Privacy → Ads (or Settings → Google → Ads). Players in the European Economic Area, the United Kingdom and Switzerland see Google's consent form; you can change your choice in the game under Menu → Privacy and your data → Ad privacy options.
Purchases
The game offers optional gem packs, a starter pack, a supporter pack and an ad-free pack. Payment is made through the App Store or Google Play; your card details never reach us. We only learn which pack was bought. In the single-player game your gems are kept in the save on your device. Gems you buy while in the shared world go to your game on the server: for this the store's signed purchase record is sent to our server, and the transaction number, pack and time are kept with your account so the same purchase isn't counted twice. If you delete your account, your account is removed from this record (the transaction number stays so the same purchase can't be credited to another account). The supporter and ad-free packs can be restored with the same store account using the "Restore purchase" button.
Feedback
The message you write with the "Send feedback" button reaches our server (if the server can't be reached, your e-mail app opens instead). If you choose, the game version, device type, screen size and the last error log (if any) are added, and you can add your e-mail address for a reply. This information is used only to reply to you and fix the problem.
Notifications
If you allow it, the game sends you reminders scheduled on your own device (e.g. when your drivers finish their shift). These are set up on your device and send us nothing. In the shared world, push notifications are also sent (e.g. when your plate sells or you win a tender); for this, your device's notification address is stored on our server with your account and deleted when you sign out or delete your account. You can turn notifications off from the menu.
Home screen widget
When it goes to the background, the phone app writes a short summary for its home screen widget: your company name, the time left on the shift, the estimated earnings waiting for you and the number of things to do (in the shared world, the season and your rank). If you add the Sarı Durak widget to your home screen, it shows this summary. The summary stays on your device, in a place only this app and its widget can read; it is not sent to us and never leaves your device. It is deleted when you delete the app.
Account and shared world
An account is optional; the single-player game works without one. An account lets you save your single-player game to the cloud and enter the shared world. If you open an account, the following is stored on our server:
| Information | Why |
|---|---|
| Your email address | To sign in and recognise your account. It is not verified; we don't send you emails |
| Your password in encrypted form (salted PBKDF2 hash) | To check your password when you sign in. Your password never reaches our server: your phone salts and hashes it, and we salt and hash that again before storing it. We can't see the plain password |
| Your recovery code in encrypted form | So you can set a new password once if you forget it |
| Your username and previous usernames | To recognise your account. In the shared world they are also shown to other players in rankings, co-ops, the weekly race and the plate market; previous names are shown too (so nobody can pose as someone else) |
| A cloud save of your single-player game and a short summary of it (company name, game day, cash, number of cars, whether the tutorial is finished and the game's random number, and similar; when you're signed in) | So you can carry on after changing phones or reinstalling. The tutorial flag and game number are used to give the friend invite reward only to a new player who really plays, and only once per game |
| Your friend invite code; if you entered a friend's code, the link to their account and the state of the reward; how many people entered your code and which invites earned a reward (account and game number, at most 10) | To give the invite reward to both sides exactly once. The random number of a game that earned a reward (with your random account number) is kept even after your account is deleted, so the same game can't earn it twice. The friend who entered your code sees your username and you see theirs; email addresses are never shown. When you enter a code, your IP address is used only to limit the number of attempts |
| Your shared world company name and progress (cars, cash, stands) | For the game to work. Other players visiting your stand see a summary: district, number of cars, rating, net worth and special plates |
| The times you last signed in and how long you play (at most your last 20 sign-ins; approximate minutes per day for the last 30 days) | To see whether an account is in use, to improve the game and to give support. Not shown to other players; removed when you delete your account |
| Session key (in hashed form) | So you don't have to sign in on every launch |
| Your IP address | To limit wrong password attempts and mass account creation; kept for at most two days |
Your email address is never shown to other players or shared. To give support and fix problems we can see your account and cloud save (for example to find lost progress, send a make-up gift or change an inappropriate username); we don't use this information for anything else. If you forget both your password and your recovery code, the message you write with the in-game "Write to us" form reaches our support inbox; if we can tell the account is yours, we write a new recovery code to your email address.
Where your information is kept
Our server (settings, crash reports, statistics, feedback, accounts, cloud saves and the shared world) runs on Cloudflare. Ads are shown by Google AdMob. Push notifications are delivered by Apple's and Google's notification services. These companies process information to provide these services and may store it on servers outside Turkey.
We do not share your information with anyone else and we do not sell it.
How long we keep it
- Your account, cloud save and the information linked to them (including your invite code and invite link) are kept until you delete them. If you delete your account, your invite code is deleted too; the account that invited you, or that you invited, keeps only the counts and your random account number.
- When a season ends, that season's progress is deleted; the top 100 of the ranking (name, company name, net worth) stays in the archive.
- Feedback messages are kept for at most 120 days after the issue is resolved; those sent by e-mail for at most one year.
- Reports of inappropriate names in the shared world (the reported name and the reporting account) are kept for at most 180 days; if you delete your account, it is removed from the reports you made.
- Crash reports are kept for 30 days and anonymous daily usage totals for at most 400 days.
Deleting your information
- Single-player: use Menu → Reset game, or delete the app.
- Account and shared world: Menu → My account → Delete my account immediately and permanently deletes your email address, password, usernames, cloud save, progress and your name in past season archives from the server. If you can't get into the game, just write to the address above.
Your rights
Under the Turkish Personal Data Protection Law No. 6698 (KVKK) you have the right to learn what information we hold about you, to ask for it to be corrected or deleted, and to object to its processing. If you are in Europe, you also have your rights under the GDPR. Write to the address above to use them.
Children
The game is not designed for children. Accounts and the shared world are not intended for children under 13; if we learn that a child under 13 has created an account, we delete it.
Changes
If we change this policy we will update the date above. For important changes we will also let you know inside the game.