Privacy policy

Last updated: 2026-10-16

This policy explains what Tessera ("the game") stores about you, why, where, for how long, and how to delete it. The game is published by CHİPODE GLOBAL YAZILIM TEKNOLOJİ ÇÖZÜMLERİ DANIŞMANLIK HİZMETLERİ SANAYİ VE TİCARET LİMİTED ŞİRKETİ, Sakarya, Türkiye ("we"), the data controller under the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK).

What we store

An anonymous ID. On first launch the game creates an anonymous account with Firebase Authentication. It holds no name and no email address.
Your game progress: solved chapters and their grades, the choices you made in the story (as internal codes), the chapter in progress, the number of Replays used, and your language setting. It is kept on your device and backed up to the cloud under your ID.
Only if you link one: your Google or Apple sign-in. Firebase Authentication then stores the identifier that provider gives us, and the email address and name it shares, if any. We use them only to sign you in.
Only if you buy a season: your purchases. The App Store or Google Play takes the payment; we never see your card or payment details. RevenueCat, the service that confirms purchases for us, receives your account ID, the store's purchase receipt and basic device information (platform, app version, country), so we know which seasons you own and can restore them.
Only if you allow it: usage data. These events: chapter started, chapter solved (with its grade), Replay used, wrong deduction, story choice (an internal option code), signed in (the method) and account deleted, together with what Google Analytics collects automatically (an app instance ID, device and browser type, approximate region derived from the IP address). Nothing you type and no free text is sent.

The game shows no ads. We do not sell your data or use it for advertising; advertising features and Google signals are switched off.

Why

Account and progress: to provide the cloud save, so your progress survives a lost device and follows you to other devices (performance of our agreement with you: GDPR art. 6(1)(b), KVKK art. 5(2)(c)).
Purchases: to unlock the seasons you bought and restore them on your other devices (performance of our agreement: GDPR art. 6(1)(b), KVKK art. 5(2)(c)), and to keep the sales records the law requires (legal obligation: GDPR art. 6(1)(c), KVKK art. 5(2)(ç)).
Usage data: only with your consent (GDPR art. 6(1)(a), KVKK explicit consent), to see where players get stuck and improve the game. You can withdraw consent at any time in Settings, Account; collection stops from that moment.

Where

We use Firebase, a Google service, as our data processor. Your saved progress is stored in Cloud Firestore in the European multi-region eur3 (Belgium and the Netherlands). Firebase Authentication and Google Analytics may process data on Google servers outside Türkiye and the European Economic Area, including in the United States. These transfers rely on Google's data processing terms and the European Commission's standard contractual clauses, and, for transfers from Türkiye, on the safeguards of KVKK article 9.

Purchases are confirmed by RevenueCat, Inc. (USA), our data processor, under its data processing agreement and the European Commission's standard contractual clauses, with the safeguards of KVKK article 9 for transfers from Türkiye. Payments themselves are processed by Apple or Google under their own privacy policies.

How long

Account and progress: until you delete your account in the game, or until we stop offering the game, whichever comes first.
Purchases: for as long as you have the account, so they can be restored, and sales records for as long as tax law requires (in Türkiye, up to 10 years).
Usage data: Google Analytics keeps event data for 2 months, then deletes it automatically.
Progress on your device stays until you erase it, clear the site's data or uninstall the game.

Deleting your data

Open Settings, Account, Delete account. This immediately deletes your cloud save and your account (anonymous or linked). You can choose to keep or erase the progress on this device. After deletion, cloud save stays off on that device until you turn it on again.

No longer have the game? Email [email protected] from the email address of your linked Google or Apple account and ask us to delete it; we do so within 30 days and confirm by reply. An anonymous account that was never linked holds nothing that identifies you, so we cannot find it from outside the game: delete it in the game, or it is removed when we stop offering the game.

Deleting your account also stops the link between your purchases and that account; seasons bought through the App Store or Google Play stay tied to your store account there.

To stop usage data, turn off "Share anonymous usage data" in the same place.

Your rights

You may ask us for access to your data, its correction, erasure, restriction or transfer, and you may object to processing or withdraw consent. Under KVKK article 11 you also have the right to learn whether your data is processed and to whom it is transferred. Write to [email protected]; we reply within 30 days. You can also complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (KVKK); in the EU, the authority where you live.

Children

The game is not directed at children under 13. If you believe a child has given us personal data, contact us and we will delete it.

Changes and contact

If this policy changes, we will update the date above and show the new version in the game.

CHİPODE GLOBAL YAZILIM TEKNOLOJİ ÇÖZÜMLERİ DANIŞMANLIK HİZMETLERİ SANAYİ VE TİCARET LİMİTED ŞİRKETİ, Sakarya, Türkiye, [email protected]