ÖTÜKENPrivacy Policy
This policy explains what personal data we process when you play Ötüken: Rise of the Steppe (the "Game") or visit otukenrise.com, why we process it, and the rights you have. It is written to meet the EU/UK General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Who we are
The data controller is Voltan Solar Enerji Sistemleri A.Ş., Türkiye ("we", "us"). Contact for all privacy matters: support@otukenrise.com.
2. Data we collect
| Category | What | Source |
|---|---|---|
| Account | Username, e-mail address, password (stored only as a salted PBKDF2-SHA256 hash — we never see your password), account ID, account creation and last login time. | You, at registration |
| Gameplay | Your game state (city, resources, armies, heroes, map position), display name and avatar, alliance membership and alliance activity log, in-game mail, battle and march records. | The Game |
| Chat | Messages you write in global chat and alliance chat (up to 300 characters each). | You |
| Purchases | Transaction or order ID, platform, product, price and currency, and the receipt or order data returned by the store. For Steam purchases: your Steam ID. We never receive or store payment card details — payments are processed by Steam, Apple or Google. | The store and the Game |
| Linked accounts | Your Steam ID, if you play on Steam and link your account. Your country and currency are read from Steam for pricing and are not stored. | Valve / Steam |
| Security | Your IP address is used briefly to limit login attempts. We store only a keyed one-way hash of it to detect abuse such as multi-accounting; it cannot be turned back into your IP without our secret key. Login session tokens (valid for 30 days after last use) and a short-lived failed-login counter (15 minutes). | Your device |
| Usage events | Basic first-party events such as session start and error reports from the web version, linked to your account ID. | The Game |
We do not use advertising SDKs, third-party analytics, or cross-app tracking, and we do not collect precise location, contacts or device advertising identifiers. The Game is built with the Unity engine, which may send anonymous hardware and performance statistics to Unity Technologies.
3. Why we use it and our legal bases
- Providing the Game and your account — saving progress, multiplayer features, chat, alliances, delivering purchases (performance of a contract; KVKK art. 5/2-c).
- Security and fair play — preventing fraud, cheating, multi-account abuse and attacks (legitimate interests; KVKK art. 5/2-f).
- Keeping purchase records required by tax and commercial law (legal obligation; KVKK art. 5/2-ç).
- Fixing bugs and improving the Game using usage events and error reports (legitimate interests).
- Responding to your requests sent to support (performance of a contract / legitimate interests).
We do not sell your personal data and do not use it for advertising profiles.
4. What other players can see
Your username or display name, avatar, alliance, chat messages, your camp's position on the world map and your marching armies (commander, main unit type and approximate size) are visible to other players as part of the Game.
5. Who we share data with
- Cloudflare, Inc. — hosting, database and server logs (processor).
- Valve Corporation (Steam), Apple Inc., Google LLC — to verify and complete purchases and, on Steam, to verify your account.
- GitHub, Inc. — storage of daily database backups, kept for 30 days.
- Authorities — when required by law or to protect rights and safety.
Some of these providers are located outside Türkiye and the EEA (mainly in the United States). Where required, such transfers rely on safeguards permitted by the GDPR and KVKK, such as standard contractual clauses.
6. How long we keep data
- Account and gameplay data: as long as your account exists.
- Global chat keeps only the newest 200 messages overall; alliance chat keeps the newest 100 messages per alliance. Older messages are deleted automatically.
- Completed march records: about 24 hours.
- Purchase records: as long as tax and commercial law require (up to 10 years under Turkish law).
- Backups: up to 30 days.
7. Deleting your account
You can permanently delete your account in the Game under Settings → Delete account (your password is required). This deletes your account record, game state, alliance membership, alliance chat messages, mail and active marches. Purchase records we must keep by law, global chat messages that have not yet rotated out, and pseudonymous usage events linked to your former account ID may remain for the periods above; backups expire within 30 days. You can ask us to erase any remaining data by writing to support@otukenrise.com.
8. Your rights
Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent. Under KVKK article 11 you may also learn whether your data is processed, the purpose, the third parties it is transferred to, and request compensation for damage caused by unlawful processing. Send requests to support@otukenrise.com from the e-mail address on your account; we answer within 30 days. You may also complain to your data protection authority (in Türkiye, the Personal Data Protection Authority — KVKK Kurumu).
9. Children
The Game is not directed at children under 13, and you must be at least 13 years old (or the minimum age of digital consent in your country, up to 16 in the EEA) to create an account. If we learn that we hold data of a child below that age without parental consent, we delete it.
10. Cookies and local storage
otukenrise.com uses no cookies and no third-party trackers. The Game stores your login token and settings on your device (local storage / Unity PlayerPrefs) so that you stay signed in.
11. Security
Connections are encrypted with HTTPS, passwords are hashed, IP addresses are stored only as keyed hashes, and access to production systems is restricted.
12. Changes
We will update this page when our practices change and show the new date at the top. For significant changes we will also notify players in the Game.