In short: We never sell your data or share it with anyone for advertising. eksand.com uses no advertising or tracking cookies. Each game and app publishes its own privacy policy on its product page.
1. Scope
This policy applies to the eksand.com website, emails you send us, and the mobile games and apps developed by Eksand (together, the "Services"). Product-specific processing is described in detail in each product's own privacy policy, which applies together with this policy. If they conflict, the product policy prevails.
- Sweet Belt (Tatlı Bant): Privacy Policy · Gizlilik Politikası
2. Data controller
The data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the EU General Data Protection Regulation ("GDPR") and the UK GDPR is:
EKSAND BİLGİSAYAR SANAYİ TİCARET LİMİTED ŞİRKETİ
Bostanbaşı Mahallesi, İncirlik Sokak No: 8/5 Z/4, Yeşilyurt / Malatya, Türkiye
Email: [email protected]
3. Personal data we process
a) When you visit the website
Your browser technically sends certain information: IP address, date and time of the visit, requested page, referring page, browser and operating system. This is kept in the access logs of our server and content delivery provider (Cloudflare). The site has no accounts, forms, analytics tools or ads.
b) When you email us
Your name, email address, the content of your message and any attachments are processed to answer your request.
c) When you use our games and apps
The data processed depends on the product and is listed in its privacy policy. Our general principles: we do not require accounts unless necessary; we keep progress and settings on your device wherever possible; we collect analytics only with your permission and using anonymous identifiers; if an ad service is used (e.g. Google AdMob) we say so clearly and apply age-appropriate settings.
4. Purposes and legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Website access logs | Delivering the site, security, preventing attacks and abuse, fixing errors | Legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)) |
| Email correspondence | Answering support, partnership and other requests | Contract and legitimate interests (KVKK Art. 5/2-c, f; GDPR Art. 6(1)(b), (f)) |
| Data protection requests | Enabling you to exercise your rights and keeping a record of the request | Legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)) |
| Product data | As stated in the product policy | As stated in the product policy (e.g. consent) |
We do not use your data for automated decision-making or profiling that produces legal effects concerning you.
5. Sharing and international transfers
We do not sell personal data. We share it only with service providers who help us run the Services and act on our instructions:
- Cloudflare, Inc. (USA): content delivery, DNS and attack protection for eksand.com.
- Our server hosting provider (data center in the Netherlands): our website and email server run on a server we manage.
- Google and Apple: distribution of our apps on Google Play and the App Store, and in-app purchases.
- Product-specific providers: such as ad and analytics providers, named in each product policy.
- Competent authorities: where required by law or a valid request.
Some of these providers process data outside Türkiye and outside the EEA. Transfers are made under Article 9 KVKK and Chapter V GDPR using appropriate safeguards (standard contracts announced by the Turkish Personal Data Protection Board and the EU Standard Contractual Clauses), or, for certain product features, on the basis of your explicit consent.
6. Retention
- Server access logs: up to 14 days, then deleted automatically. Cloudflare keeps its logs for a short period under its own policy.
- Email correspondence: up to 2 years after your request is closed; commercial correspondence 10 years as required by the Turkish Commercial Code.
- Data protection request records: 3 years after the request is closed.
- Product data: as stated in the product policy.
7. Security
Our website and email server only operate over encrypted connections (HTTPS/TLS). Server access is restricted to authorised people, software is kept up to date and abuse attempts are blocked automatically. No system is perfect; if a personal data breach occurs we will notify the authorities and you as required by KVKK and GDPR.
8. Children
Our website is not directed at children. Our games may be directed at a general audience including children; in that case the product applies age-appropriate settings as described in its policy (e.g. non-personalised ads and no analytics for players under 13) and complies with the Google Play Families Policy and COPPA. If you believe a child has given us personal data without permission, contact us and we will delete it promptly.
9. Your rights
Under Article 11 KVKK you may ask whether your data is processed and request information about it, learn the purpose of processing, know the third parties it is transferred to, request correction, deletion or destruction and notification of these to third parties, object to results arising solely from automated analysis, and claim compensation for unlawful processing.
If you are in the EEA or the UK you also have the rights of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent under the GDPR, and the right to lodge a complaint with your local supervisory authority.
Email [email protected] to exercise your rights. For account and data deletion see Account & Data Deletion. We respond free of charge within 30 days.
10. Changes
We may update this policy as our Services or the law change. The current version is always on this page and important changes will be announced. The effective date at the top shows the latest change.
11. Contact
[email protected] · EKSAND BİLGİSAYAR SANAYİ TİCARET LİMİTED ŞİRKETİ, Bostanbaşı Mahallesi, İncirlik Sokak No: 8/5 Z/4, Yeşilyurt / Malatya, Türkiye.