GameRecord Privacy Policy
Version: v1.6
Effective Date: October 20, 2026
This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when you use the GameRecord mobile applications, the GameRecord website, and related services (together, the "Service").
This Policy is also our information notice under the Turkish Personal Data Protection Law No. 6698 ("KVKK"). Section 15 describes additional information for users in the European Economic Area, the United Kingdom, and Switzerland.
1. Data Controller
The Service is operated jointly by Ragıp Şamil Bekiryazıcı and Sefer Çınar, individual developers based in Türkiye, who act together as the data controller ("we," "us," "our"). GameRecord is the name of the Service, not a separate company.
- Operator: Ragıp Şamil Bekiryazıcı, Istanbul, Türkiye (samil.bekiryazici@gamerecord.app)
- Operator: Sefer Çınar, Aydın, Türkiye (sefercinar@gamerecord.app)
- Privacy Contact (for all data protection requests): privacy@gamerecord.app
- General Contact: support@gamerecord.app
- Moderation Contact: moderation@gamerecord.app
2. Scope
This Policy covers personal data processed through the GameRecord apps (iOS and Android), the GameRecord website, notifications and emails we send, and our support and moderation channels. It does not cover third-party services you reach through the Service (for example, Steam or YouTube), which have their own policies.
3. Data We Collect
Depending on how you use the Service, we process the following data.
3.1 Account and Identity Data
- User ID, username, and display name
- Email address
- Date of birth, used to verify eligibility (13+) and to apply age-based restrictions
- Sign-in method (email/password, Google, or Apple) and authentication records
- Legal document acceptance records (document versions, language, and acceptance time)
3.2 Profile and Social Data
- Profile photo, banner, biography, badges, and featured games
- Pinned discussions and other profile showcases
- Followers, following, and blocked users
- Your Steam profile link and Steam name, only if you choose to show them on your profile
3.3 Game Activity Data
- Game statuses (
played,playing,playlist/wishlist, anddropped), ratings, and reviews - Detailed play logs: playtime, start and finish dates, and platform
- Lists, tier lists, and their entries
- Summary data derived from your library (for example, counts and recent changes)
3.4 Discussions and Interaction Data
- Discussion topics and posts, including titles, text, tagged games (
#game), mentioned users (@user), and spoiler markings - Comments and replies on discussions, reviews, and lists
- Polls you create and your poll votes
- Likes, liked content, share actions, and interaction counts
- Translations of your text produced automatically (see Section 7)
3.5 Mini-Game Data
- This or That quizzes and Mezat (auction) game pools you create, including titles, descriptions, and selected games
- Your solo play records (picks, results, and champion)
- Multiplayer lobby and room data: membership, host status, invites, votes, bids, rosters, emotes, presence (whether you are currently connected), and game results
- Game invites you send or receive and their status (pending, joined, declined)
- Your daily mini-game energy balance and usage
3.6 Virtual Items and Economy Data
- Gems, XP, levels, and badges
- Shop items you obtain and use (avatars, banners, showcases, partner items)
- Rewards earned (including rewards for watching ads) and redeem or invite codes used
- A ledger of virtual-item transactions
3.7 Connected Account Data (Steam)
If you connect a Steam account, we receive from Valve:
- Your SteamID, Steam name, avatar, profile URL, and Steam account creation date
- Your owned games and playtime
- Your Steam wishlist, if you choose to import it
We do not use or keep other optional Steam profile fields, such as your real name or country, even where Steam provides them.
3.8 Preferences, Notification, and Device Data
- Language, auto-translate, notification (in-app, push, and email), adult-content, and wishlist-privacy settings
- Time zone, used for daily resets such as mini-game energy
- Push notification tokens and device platform
- Device permissions you grant: camera, only to scan QR codes (no photos or videos are stored); photo library, only to save share cards you create; and notifications
- Notification history and read/unread status
- Data stored on your device or browser for the Service to work (for example, sign-in state, settings, saved game progress, and a short-lived cache of profiles you viewed)
3.9 Advertising, Analytics, and Diagnostic Data
- Device advertising identifiers (such as Google Advertising ID or Apple IDFA, where permitted) and ad interaction data
- Usage events (for example, screens viewed, features used, and mini-game starts and completions)
- Crash and error reports, linked to your user ID, together with device model, operating system, and app version
- IP address and approximate location derived from it, processed by our service providers
- Cookies and similar technologies on the website (see Section 9)
3.10 Safety, Moderation, and Support Data
- Reports you submit or that concern you, including a copy of the reported content
- Moderation actions, warnings, bans, and appeals
- Archived copies of content that was edited, deleted, or removed by moderation
- Feedback and support messages, with related device and time zone information
We do not ask for special categories of personal data (such as health, religion, or political opinions). Please do not share them in public content.
4. How We Collect Data
- Directly from you, when you create an account, edit your profile, post content, play games, or contact us.
- Automatically, through the apps, the website, cookies, and software development kits (SDKs) when you use the Service.
- From third parties, such as Google or Apple (when you sign in with them), Valve (when you connect Steam), and game metadata providers.
- From other users, for example when someone mentions you, invites you to a game, or reports your content.
5. Who Can See Your Data
- Anyone on the internet: content opened through a shared link may show a preview with its title, text, and author, unless it is marked as a spoiler or deleted. Share cards you create and post elsewhere are public.
- Signed-in users: your public profile, ratings, reviews, library (except your wishlist, if you set it to private), detailed play logs, lists, tier lists, discussions, comments, polls, liked discussions, the fact that you liked a post, quizzes, auction pools, and your Steam link if you choose to show it.
- Poll creators can see who voted for which option in their polls.
- Players in the same lobby or room can see your username, profile photo, votes, bids, rosters, emotes, and results. When you are invited to a room, its members can see your username and photo.
- Only you: your email address, date of birth, private wishlist, Steam import queue, solo play records, energy, and settings.
- Our moderators can see reported content, reports, and moderation records.
6. Purposes of Processing and Legal Bases
We process personal data only for the purposes below, based on the legal grounds in Articles 5 and 6 of KVKK.
6.1 Performance of the Contract (KVKK Art. 5/2(c))
- Creating and managing your account and verifying age eligibility
- Operating game tracking, ratings, reviews, lists, tier lists, play logs, and profiles
- Operating discussions, polls, comments, mentions, likes, and sharing
- Operating mini-games, multiplayer lobbies, invites, energy, and results
- Operating gems, XP, the shop, rewards, and other virtual items
- Connecting Steam and importing your library, playtime, and wishlist at your request
- Translating content between languages so users can read each other's posts
- Sending notifications you have enabled, including invites, mentions, and replies
- Providing support
6.2 Legitimate Interests (KVKK Art. 5/2(f))
- Keeping the Service secure, and preventing fraud, spam, cheating, and abuse
- Enforcing our rules on rating integrity and posting limits
- Investigating reports, moderating content, and handling appeals
- Fixing errors and improving stability through crash reports
- Recommending relevant content, for example popular discussions about games in your library, and official announcements
- Preparing internal, aggregated service reports
6.3 Legal Obligations and Legal Claims (KVKK Art. 5/2(ç) and 5/2(e))
- Responding to requests from authorities, and keeping records required by law
- Establishing, exercising, or defending legal claims
6.4 Explicit Consent (KVKK Art. 5/1)
- Personalized advertising and related use of advertising identifiers
- Non-essential analytics and advertising cookies on the website
- Transfers abroad, where explicit consent is the required legal ground (see Section 8)
You can withdraw your consent at any time (see Section 9 and Section 14). Withdrawal does not affect processing done before it.
7. Automatic Translation (AI)
To let users read content in English and Turkish, the text of reviews, comments, lists, discussion posts, and titles is automatically sent to an AI translation provider when it is created or edited. Currently this is Google Gemini.
- We send only the text to be translated. We do not send your username, user ID, or email with it.
- The translation is stored together with the original content and shown to readers in their language.
- Translations are generated automatically and may contain errors. The original text always prevails.
- We also use this provider to prepare internal service reports, which may include excerpts of public content.
8. Data Sharing and Transfers Abroad
We do not sell your personal data. We share personal data only as needed with the following groups of recipients.
8.1 Recipients
- Infrastructure and hosting providers: currently Google Firebase / Google Cloud, for authentication, databases, file storage, cloud functions, website hosting, push notifications, and email delivery. Our main database is hosted in the European Union (Madrid, Spain).
- Advertising providers: currently Google AdMob (mobile apps) and Google AdSense (website).
- Analytics and diagnostics providers: currently Google Analytics for Firebase and Firebase Crashlytics.
- AI translation providers: currently Google Gemini (see Section 7).
- Connected account providers: Valve Corporation (Steam), only if you connect a Steam account.
- Game metadata providers: currently IGDB (operated by Twitch/Amazon). We send them game identifiers, not your personal data.
- Platform providers: Apple and Google, for app distribution, sign-in, and push notifications.
- Partners: for partner shop items, we share only aggregated counts with the partner, never your identity.
- Authorities and legal parties: where required by law, or to protect rights and safety.
- Successors: if we transfer the Service, to the new operator, under this Policy.
8.2 Transfers Abroad
Some of these providers process data outside Türkiye, including in the European Union and the United States. For transfers abroad, we rely on the grounds in Article 9 of KVKK, such as standard contracts notified to the Personal Data Protection Authority. Where none of these grounds is available, we rely on your explicit consent for occasional transfers.
9. Advertising, Analytics, and Cookies
- Ads: the Service is free and supported by ads. The apps show banner, native, full-screen (interstitial), and rewarded ads. Rewarded ads are optional and give you in-app rewards such as gems or energy.
- Personalized ads: Google may use your device advertising identifier to show personalized ads, only where you have given consent, where consent is required. You can withdraw consent in the app's privacy settings, reset or limit your advertising identifier in your device settings, or decline tracking on iOS. If you do this, you will still see ads, but they will be less personalized.
- Users under 18: we do not knowingly show personalized ads to users under 18.
- Website cookies: the website uses:
- Essential cookies and local storage, for sign-in, security, language, and settings. These cannot be turned off.
- Analytics cookies (Google Analytics) and advertising cookies (Google AdSense). These are used only with your consent, which you can change at any time from the cookie settings on the website.
- Analytics: we use analytics to understand which features are used and to improve them. We do not use analytics data to identify you for advertising outside the Service.
10. Data Retention
We keep personal data only as long as needed for the purposes in this Policy, or as required by law. After that, it is deleted, destroyed, or anonymized.
10.1 While Your Account Is Active
Account, profile, activity, and content data are kept while your account is active, unless you delete them earlier.
10.2 Account Deletion
- When you delete your account, your sign-in access is removed immediately, and your profile and content are no longer shown to other users.
- Within 30 days, we permanently erase data that directly identifies you, including your email address, date of birth, and connected Steam data, and remove your private and library data from the Service.
- To keep conversations readable, comments and replies you posted may remain stored in hidden form, labeled as from a "Deleted account."
- Results of multiplayer games you took part in may remain visible to the other players of those games.
- Deleted accounts cannot be restored. See Section 14 for your right to request full erasure.
10.3 Other Retention Periods
- Disconnecting Steam: your Steam connection data is deleted. Games already added to your library remain unless you remove them.
- Lobbies and game rooms: deleted automatically within about one hour after the game ends or expires.
- Edit and deletion history of content: archived copies of edited or deleted content are kept for 1 year for safety and moderation, then deleted.
- Reports, moderation records, and moderation archives: kept for 1 year.
- Search index: short text posts are removed from search after 90 days. Discussion topics remain searchable while they exist.
- Crash reports: kept for up to 90 days.
- Analytics data: kept for up to 14 months.
- Backups: may keep limited data for up to 90 days before being overwritten.
- Device cache: cached profiles of other users expire after 24 hours.
11. Children and Teens
The Service is intended for users aged 13 and over. We ask for your date of birth during sign-up and do not allow under-13 users.
For users under 18:
- Adult (18+) game content cannot be turned on.
- Personalized advertising is not knowingly used (see Section 9).
If you believe a child under 13 has given us personal data, contact privacy@gamerecord.app and we will investigate and delete the data where appropriate.
12. Security
We use reasonable technical and organizational measures to protect personal data. These include encrypted connections, access controls on our databases, limiting access to staff who need it, and keeping sensitive data such as email and date of birth in restricted storage.
No method of transmission or storage is completely secure. If a data breach occurs, we will notify the Personal Data Protection Board and affected users as required by law.
13. Automated Processing
We use automated systems to rank and recommend content (for example, popular discussions and daily discussion digests), to filter adult game content according to your settings, and to apply posting limits. These systems do not make decisions that have legal or similarly significant effects on you. Moderation decisions such as bans are reviewed by people.
14. Your Rights (KVKK Article 11)
You have the right to:
- Learn whether your personal data is processed, and request information about it
- Learn the purpose of processing, and whether data is used for that purpose
- Know the third parties in Türkiye or abroad to whom your data is transferred
- Request correction of incomplete or inaccurate data
- Request deletion or destruction of your data under Article 7 of KVKK
- Request that third parties to whom your data was transferred be notified of corrections or deletions
- Object to a result against you that arises from analysis of your data solely by automated systems
- Claim compensation for damages caused by unlawful processing
You can also withdraw consent, disconnect Steam, change visibility and notification settings in the app, and delete your account in the app.
How to Apply
Send your request to privacy@gamerecord.app from the email address registered to your account, or in writing using the other methods allowed by the Communiqué on the Procedures and Principles of Application to the Data Controller. Include your name, username, and a description of your request.
We will respond free of charge within 30 days. If your request is rejected, our response is insufficient, or we do not respond in time, you may complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) as provided by law.
15. Users in the EEA, the UK, and Switzerland
If data protection laws such as the EU GDPR or the UK GDPR apply to you, you have the rights described in Section 14. You also have the right to data portability and the right to lodge a complaint with your local data protection authority.
The legal bases in Section 6 correspond to contract, legitimate interests, legal obligation, and consent under those laws. Contact privacy@gamerecord.app to exercise your rights.
16. Third-Party Content and Links
Game information, covers, and videos come from third-party sources (such as IGDB and YouTube). Opening a link to Steam, YouTube, or another external site takes you to a service with its own privacy policy.
17. Changes to This Policy
We may update this Policy from time to time. Updated versions will show a new version number and effective date. When a change is significant, we will ask you to review and accept the updated documents in the app or on the website before you continue.
18. Language
This Policy is provided in English and Turkish. For users residing in Türkiye, the Turkish version prevails in case of conflict. For all other users, the English version prevails.
19. Contact
- privacy@gamerecord.app
- support@gamerecord.app
- moderation@gamerecord.app