Last updated: 21 July 2026 · KVKK Article 10 Notice · Version 2026-07-21-v3
1. Data controller
Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), personal data is processed by the operator of the Novara Blast service as data controller. Requests are accepted through the secure contact form.
2. Personal data processed
Depending on your use, we may process identity and contact data (player ID, display name, email), device and transaction-security data (install / device key, platform, version, IP-derived security signals, access logs), gameplay and economy data (level, score, inventory, rewards, purchase verification), preferences and marketing data (notifications, analytics and advertising consent), support data and legal-transaction records.
3. Processing purposes
- Creating player accounts, authentication and progress synchronization.
- Operating gameplay, economy, quests, rewards, leaderboards and LiveOps.
- Purchase-entitlement verification and responding to support requests.
- Information security, anti-cheat and fraud prevention, debugging and performance management.
- Optional analytics and personalized advertising where you have consented.
- Compliance with legal duties and establishment, exercise or defence of legal claims.
4. Collection method and legal basis
Data is collected wholly or partly by automated means through application and web forms, device / application requests, gameplay events, store verification, social login and notification providers. Processing relies on contract performance, legal obligations, establishment or protection of rights, legitimate interests and—where required—explicit consent under KVKK Article 5.
5. Transfers
Data may be transferred, limited to the stated purposes, to hosting and security vendors, Apple / Google app stores, enabled social-login providers, notification and transactional-email services, consent-based advertising / analytics providers, and legally authorized public bodies. Where an international transfer is required, safeguards under KVKK Article 9 and other applicable mechanisms are used.
6. Retention and security
Data is kept only for the period required by its purpose and legal duties, then erased, destroyed or anonymized. Controls include access management, secure transport, password hashing, rate limiting, audit logging and abuse detection.
7. Your rights under KVKK Article 11
You may ask whether your data is processed; request information; learn the purpose and whether it is used accordingly; identify recipients; request correction, deletion or destruction where conditions apply and notification of those actions to recipients; object to adverse automated-analysis results; and claim compensation for unlawful processing.
8. How to apply
Use the secure contact form with the subject “KVKK Request” and state your name, relationship to the account, request and preferred response method. Additional identity verification may be required. Requests are handled within statutory periods; your right to complain to the Turkish Data Protection Authority remains available.