Privacy Policy
Last updated: 19 September 2026
1. Who we are
33 Yan 2 ("the App") is operated by EMRE GUNES, an individual — there is no company behind the App. Where this policy says "we", it means that one person. If you have any question about this policy or about your data, write to support@otuzucyaniki.com. Every privacy request sent to that address is answered.
The App lets people find each other and play 101 Okey and Standard Backgammon — both at real-world tables organised through the App and online inside the App.
2. What this policy covers
This policy describes the data the App collects, why we collect it, who else receives it, how long we keep it, and what you can do about it. It applies to the App on iOS and to the servers behind it. It does not cover services you reach by leaving the App (for example, when you tap "Get directions" and your phone opens Apple Maps, Google Maps or Waze).
3. Data we collect
3.1 Account
- Email address. Required to create an account and to sign in. If you sign in with Apple and choose Hide My Email, Apple gives us a relay address (
@privaterelay.appleid.com) instead of your real one — in that case we never receive your real email address, and we do not attempt to resolve it. - Name. Only if you sign in with Apple or Google and they pass it to us. We use it once, as a suggestion for your username. You can ignore it.
- Username. Chosen by you, 3–16 characters, letters, numbers and underscore only. It is visible to other players.
- Avatar. A number from 1 to 16 that picks one of our built-in drawings. You cannot upload a photo, and we never receive one.
3.2 Gameplay
- Matches you play, hands, scores, penalty points, who won, whether a bot was in the game, and how the game ended.
- Your rating points for each game mode, your team rating if you play in pairs, your match count.
- Tournaments you join, matches inside them, and trophies you win.
- How far you got in the in-app tutorial.
- Records of rule violations detected by the server.
3.3 In-app economy and purchases
- Coins and energy: your balance, and a ledger of every change with its reason (match reward, daily reward, tournament reward, purchase, cosmetic purchase, correction).
- Purchase records: the Apple transaction identifier, the product identifier and the date, so we can give you what you bought and not credit the same purchase twice.
- We never see your payment details. Card numbers, billing addresses and payment methods are handled entirely by Apple. They never enter the App and never reach our servers.
3.4 Notifications
- A push notification token issued by your device, plus the platform and your language, so we can send you notifications about your games, tables and tournaments. You can turn notifications off in iOS Settings at any time.
- A record of notifications we sent you and whether you opened them.
3.5 Social features
- Friend requests and friendships.
- Users you have blocked.
- Reports you file about another player: the category you pick and the free-text description you write (at least 20 characters).
- Messages you send to a venue through the in-app venue thread, and the venue's replies. These are read by the venue's administrator and by the App's operator.
There is no chat between players inside a game. The game screens contain no text input.
3.6 Presence
- The time you were last seen online, so other players know whether you are available.
3.7 If you apply to list a venue
If you submit a venue through the App, we collect the business name, address, city, country, opening hours and, if you provide them, the business phone number and email address. This is business contact information, not your personal contact information — but you are the one typing it, so we list it here.
3.8 What we do not collect
We want to be specific, because "we may collect" language hides more than it tells:
- No location. The App never reads your device's location. There is no location permission and no location library in the App. Venue coordinates come from the venue's street address, not from you.
- No photos, camera, microphone or contacts.
- No advertising identifier (IDFA). We never ask for tracking permission.
- No analytics or advertising SDKs of any kind. We checked every one of the App's 141 bundled software libraries.
- No crash-reporting service.
- No browsing or search history. Searching for a friend does not store the search.
- No date of birth, age, or any special-category data (such as health, religion, ethnicity, political opinion or biometrics).
- No payment or financial data (see 3.3).
4. Why we use your data
We use everything listed in section 3 to operate the App: to sign you in, to seat you at a table, to run matches, to calculate ratings, to give you what you purchased, to send notifications you asked for, to let you report and block other players, and to stop cheating and abuse.
We additionally use gameplay records in aggregate to understand how the game is balanced, how the in-app economy behaves, and whether people keep playing — so we can improve the App. This is the "Analytics" purpose we declare on our App Store privacy label.
We do not use your data for advertising, and we do not sell it, rent it, or share it with data brokers.
We do not track you in the sense Apple defines: we never link data from this App with data from other companies' apps or websites for advertising.
5. Who else receives your data
We share data only with the service providers that make the App work, and only as much as they need:
| Who | What they receive | Why |
|---|---|---|
| Supabase | All of the data in section 3 — they host our database, accounts and server functions. | Hosting, authentication, database, realtime. |
| Apple | The transaction identifier of a purchase, to confirm it is genuine. For Sign in with Apple, the sign-in token; when you delete your account, a token-revocation request. | Payments, sign-in, notification delivery. |
| Google (Firebase Cloud Messaging) | Your push notification token and the text of the notification. | Delivering push notifications to your device. Notification text never contains another player's name. |
| OpenStreetMap | When you open a table's map, your IP address reaches their tile servers, along with the map area you are viewing. No account information is sent. | Drawing the map. |
Our service providers are bound to protect your data to at least the standard described in this policy and to use it only to provide their service to us.
We may also disclose data if we are legally required to, or where it is necessary to protect the safety of our users.
6. Where your data is stored
We are based in Türkiye. Our database and server functions run on Supabase infrastructure hosted in the AWS ap-south-1 region (Mumbai, India). This means that wherever you use the App from, your data is transferred to and stored on servers in India. All traffic between the App and our servers uses encrypted HTTPS connections.
Supabase also keeps technical request logs (which include IP addresses) for security and service reliability. We do not use those logs to build a profile of you.
7. How long we keep your data
- While your account exists, we keep the data in section 3 so the App works: your ratings, match history, purchases and balances are part of the product.
- Short-lived technical records are removed automatically — for example, the records that stop a single action being processed twice are deleted after two hours.
- After you delete your account, see section 8.
We do not operate a fixed retention period. There is no set number of days or months after which data is automatically erased: the data in section 3 is kept for as long as your account exists, and what happens when you delete it is described in section 8. If we ever introduce fixed retention periods, we will say so here and give notice under section 12.
8. Deleting your account
You can delete your account inside the App: Settings → Delete account. You do not need to email us or visit a website.
Here is exactly what happens, because "we delete everything" would not be true:
What is erased or made anonymous:
- Your email address and phone number are obscured in our authentication system, your password is deleted, and all your sign-in sessions and tokens are destroyed. You can no longer sign in.
- Your username is replaced with an anonymous marker such as "Silinmiş #a1b2c3". Other players stop seeing your name.
- Your friendships are deleted, so you disappear from other people's friend lists.
- If you signed in with Apple, we ask Apple to revoke the token that links your Apple ID to the App.
- Your push notification tokens are deleted, so your devices stop being reachable from this account.
What remains:
- Your match, hand and tournament records stay in the database, attached to the anonymous marker instead of your name. We keep them because deleting them would corrupt the ratings and match history of the people you played against — your opponents' wins would disappear with your account.
- Your coin ledger and purchase records stay, as a record of transactions processed through Apple.
- Messages you sent to a venue, and reports you filed, stay, so moderation decisions remain reviewable.
You cannot delete your account while you are in the middle of an online match, because leaving would break the game for the other players. Finish or leave the match first.
9. Your rights
Depending on where you live, you may have the right to access your data, correct it, have it deleted, object to how we use it, or receive a copy in a portable form.
- Deletion: use the in-app flow in section 8, or write to support@otuzucyaniki.com.
- A copy of your data: we do not yet have an automatic export button. Write to support@otuzucyaniki.com and we will prepare it for you.
- Correction: you can change your username and avatar in the App. For anything else, write to us.
- Complaints: write to us first at support@otuzucyaniki.com. You may also have the right to complain to your local data protection authority.
10. Children
The App is not intended for children under 13 and we do not knowingly collect data from them. We do not ask for your date of birth, and the App has no parental controls of its own — use Screen Time on iOS to manage access. If you believe a child under 13 has created an account, write to support@otuzucyaniki.com and we will delete it.
11. Security
Access to your data is restricted at the database level: every table in our database has row-level security enabled, so one player cannot read another player's private records. Other players can see only your username, avatar, rating and trophies — not your email address, not your coin or energy balance. Traffic is encrypted in transit.
No system is perfectly secure, and we do not claim otherwise.
12. Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and, for significant changes, tell you in the App or by notification before the change takes effect.
13. Contact
EMRE GUNES — support@otuzucyaniki.com