Privacy Policy
Effective date: 17 October 2026
Last updated: 18 October 2026
This policy explains how Triplaza handles information when you play the game and use its connected features.
1. Who is responsible
The data controller is Ahmet Sinan Güneş, operating under the Touros Studio brand. For privacy questions and requests, email support@usetouros.com.
2. Information we process
- Game saves and settings: level progress, rewards, inventory, customizations and preferences stored on your device.
- Play data: a randomly generated installation identifier, event timestamps, app version, device model, operating system version and language; session and screen activity; level attempts, outcomes and gameplay actions; and reward, shop and purchase-result events. These records help us understand difficulty, reliability and the game economy. An installation identifier can link events over time, so we do not describe this data as completely anonymous.
- Player profiles and social features: your chosen username, avatar, trophies, profile customizations and showcase items; Game Center player identifier where available; profile creation time; friend connections, blocks, reports, invitations, invitation responses and referral progress.
- Multiplayer: information needed for matchmaking and live matches through Apple Game Center, and information exchanged with other players to run those matches.
- Purchases, where available: Apple StoreKit transaction and product identifiers, verification and entitlement information, and delivery status. Apple processes payments; we do not receive your full payment-card details.
- Support: your email address and any information you choose to include when contacting us. Please do not send passwords or payment-card information.
3. How information is used
We use this information to provide and save gameplay, run profiles and multiplayer, deliver and verify purchases, manage social features and reports, improve game balance and reliability, and respond to support and privacy requests.
Where the GDPR applies, our legal bases are performance of a contract for the game features you request; legitimate interests in understanding game performance, maintaining reliable services and preventing abuse, subject to your rights; consent where required for optional processing; and compliance with applicable legal obligations. You may object to processing based on legitimate interests and withdraw consent where processing relies on it.
4. Play-data controls
“Share play data” is enabled by default in the current implementation. You can switch it off in the game’s Settings. Switching it off stops further play-data collection and sending, clears queued events on your device and cancels pending transmission. It does not automatically delete events already sent to CloudKit.
Play events are sent to Apple CloudKit when the required iCloud account is available. A random installation identifier is used rather than an advertising identifier. Play-data sharing is separate from advertising-consent choices.
5. Apple services, visibility and recipients
Triplaza uses Apple CloudKit, Game Center, StoreKit and notification services for the relevant features. Apple processes information under its applicable terms and Privacy Policy. Apple account credentials are handled by Apple.
CloudKit stores play events and social records in its public-database infrastructure. Access depends on record permissions: play events are not intended for general player browsing, while player profiles and social records can be readable by other authenticated iCloud users under the configured schema. Your profile, competitive results and relevant match information may be visible to other players. Avoid using sensitive information in your username or profile.
Information may also be disclosed where necessary to meet a legal obligation, protect users and the service, or handle a legal claim. We do not sell your personal information.
6. Advertising and consent
The game shows optional rewarded video ads from Google AdMob. Ads appear only when you choose to watch one for a reward.
Consent is collected with Google’s User Messaging Platform (UMP) where required, including in the EEA and UK. Ads are non-personalised unless you consent to personalised ads.
We do not request Apple’s App Tracking Transparency (ATT) permission and we do not track players across other companies’ apps or websites.
Google processes data to serve and measure ads: your IP address and approximate location derived from it, device and advertising identifiers (the advertising identifier is unavailable without ATT permission), ad interaction data and diagnostic data. Read Google’s policy on data use by partner apps and sites for more information.
When a rewarded ad is completed, Google sends our server a signed confirmation. It contains an opaque, hashed player key, not your name or Game Center ID.
7. Triplaza game server
The Triplaza game server at api.usetouros.com, hosted on Cloudflare, verifies game results to prevent cheating. It may store:
- An Apple App Attest key identifier.
- A Game Center team player identifier.
- A ledger of in-game currency and items.
- Verified level results and Patio Blitz scores.
- Duel results and trophies.
- Purchase transaction identifiers and refund notices from Apple.
- Referral records.
- Rewarded-ad confirmations.
IP addresses are processed transiently by Cloudflare to deliver requests and limit abuse. We do not store them in our database.
Server records are kept while you play and deleted when you use “Delete my data” / “Delete my profile” in Settings, or within 30 days of an email request to support@usetouros.com.
Anonymous one-way markers may be kept to prevent reward abuse: hashed purchase and invite markers that cannot identify you.
8. Notifications
The game can schedule optional local reminders when hearts are full, a daily reward is ready, a streak reminder is due or the kiln is ready. These reminders are created on your device and can be turned off in the game’s Settings or in iOS Settings.
9. Retention and deletion
Local saves remain until removed or reset. Unsent play events are limited to 5,000 queued events and a maximum age of 30 days; confirmed uploads are removed from the pending queue. This local queue limit is not a 30-day deletion promise for server records.
Play events used for CloudKit analytics are kept for up to 24 months. Other CloudKit records are retained as needed for the purposes described above, subject to applicable legal obligations and valid deletion requests. Game-server records follow the deletion rules in the Triplaza game server section.
Use Settings → Delete my data / Delete my profile, where available, to delete game-server records and request deletion of your profile and associated social records created by your account. This operation does not delete all CloudKit play-data events, other players’ independently created records, local game saves or Apple’s own records. For additional deletion requests, contact support@usetouros.com. We may need information to locate the relevant records and verify the request. Do not send Apple passwords.
Uninstalling the game does not necessarily delete cloud records. Apple manages its own account, purchase and Game Center records.
10. Your rights and choices
Depending on applicable law, you may request access, correction, erasure, restriction or portability of your personal data, object to certain processing, or withdraw consent without affecting the lawfulness of prior processing. Contact our privacy email above. You may also complain to your local data protection authority, including the authority in your country of residence, work or the alleged infringement.
You can manage Game Center and iCloud account settings through Apple and notification permissions through iOS Settings. Some connected features may be unavailable if you disable the services they require.
11. Children
The game is not directed at children under 13. App Store age ratings and local requirements apply to use of the game. If you are a parent or guardian and believe a child has provided personal information inappropriately, contact us so we can investigate and address it. Please do not include sensitive personal information in public profile fields.
12. Security and international processing
We use the access controls provided by Apple’s services and take reasonable steps to protect information. No system can guarantee absolute security. Apple’s infrastructure may process information outside your country, including outside the EEA or UK. Where applicable, international transfers must be covered by legally recognized safeguards, such as adequacy decisions or appropriate contractual protections. Contact us for information about safeguards relevant to your data.
13. Changes
We will update this page when our practices change. The effective date and last-updated date appear above. We will provide additional notice or request consent where required.