Privacy Policy.

1. About This Privacy Policy

Mood Games Yazılım Sanayi ve Ticaret Anonim Şirketi (“Mood Games A.Ş.”, “we”, “us” or “our”) is a game development and creative production company established at Bağlarbaşı Mah. 1. Sedir Sk. No:10 İç Kapı No:12, Osmangazi, 16170 Bursa, Türkiye.

This Privacy Policy explains how personal data is handled in connection with our corporate website at tr.mood.games, our business communications and, to the extent that we are responsible for the processing, our development, testing and related professional activities (together, the “Services”). It describes categories of data, purposes, recipients, international transfers, retention and your rights.

We act as a data controller when we determine why and how personal data is processed. We may instead act as a data processor / service provider when working on information for a customer or game publisher under that organisation’s instructions. The correct role depends on the actual activity and contractual arrangements, not merely on the Mood Games name.

This notice is information about our practices, not a request for consent. Visiting our website or contacting us does not itself constitute consent to processing for which separate consent is legally required.

2. Games and Services Operated by Other Companies

We may provide game design, software development, art, quality assurance, technical integration or related services to other companies. In some projects, those companies determine the purposes and means of processing player or advertising data, and we process only what is necessary under their documented instructions.

Where we act as a processor, we support the responsible controller in handling rights requests and comply with the applicable data-processing agreement. Where we independently decide to use information for our own legitimate purposes, we assess and meet our own controller obligations.

Using the same brand, website links or contact mailbox does not merge the responsibilities of legally separate companies.

3. Information We May Process

3.1 Information You Provide

• Business correspondence: your name, email address, company, job title, message content and any attachments or other details you voluntarily provide.
• Requests and complaints: information needed to identify the issue, respond, verify a privacy request where necessary and record the outcome.
• Recruitment communications: if you contact us about a role, information you choose to submit such as a CV, portfolio, experience and contact details. A separate recruitment notice may apply to a particular application process.

Please do not send payment card details, national identification documents, health information or other sensitive data through ordinary correspondence unless specifically requested by an authorised and secure process.

3.2 Website and Technical Information

Our hosting and network-security infrastructure may process IP address, time of access, requested URL, referring page, browser or device characteristics, approximate region derived from IP address and technical/security logs. These records can be personal data even if they do not contain your name.

3.3 Project, QA and Development Information

Depending on the project and the relevant customer’s instructions, authorised personnel may access or process app build identifiers, device and operating-system information, test identifiers, game session or level events, crash reports, diagnostic logs and other technical data needed for development, quality assurance or troubleshooting. Where a project involves advertising or attribution integration, limited campaign-performance or attribution information may also be involved.

This describes data that may be present in work performed for customers; it does not mean that every game uses these features or that Mood Games A.Ş. is the controller of that information. An account, purchase, advertising identifier or player profile is governed primarily by the publisher/controller responsible for the relevant service unless we independently determine the relevant processing.

3.4 Information Received From Others

Customers, technical service providers, recruiting contacts or professional partners may provide information necessary for a requested project or communication. Its handling depends on the origin, instructions, contract and applicable law.

3.5 Aggregated and De-identified Information

We may use aggregated project statistics or operational reports. Information is treated as anonymous only when individuals are no longer reasonably identifiable; hashed identifiers, player IDs and pseudonymised records can still be personal data.

4. Why We Use Information and Legal Bases

For processing governed by Türkiye’s Law No. 6698 on the Protection of Personal Data (“KVKK”), we assess the relevant legal condition under Article 5 for each actual activity, including:

• Responding to enquiries and business relations: steps necessary to establish or perform a contract (Art. 5/2-c) or legitimate interests that do not override fundamental rights (Art. 5/2-f), depending on the case.
• Website operation and information security: protecting systems, monitoring technical faults and preventing abuse under a properly assessed legitimate interest (Art. 5/2-f).
• Development and technical support: processing necessary to carry out the relevant contractual services, under our own applicable lawful basis when acting as controller or under a customer’s instructions when acting as processor.
• Accounting, compliance and lawful requests: fulfilling legal obligations (Art. 5/2-ç).
• Legal claims: establishing, exercising or protecting a right (Art. 5/2-e).
• Optional communications or tracking: explicit consent when that is the legally required basis, collected separately.

Where the GDPR or UK GDPR applies to an activity for which we are controller, bases may include contract performance, legal obligation, legitimate interests or consent as appropriate. We do not use legitimate interests to bypass legally required consent.

If we require information to fulfil a request, failure to provide it may prevent us from responding or delivering that particular service. Consent can be withdrawn for future consent-based processing without invalidating earlier lawful processing.

5. Website Cookies, Analytics and Advertising

The HTML pages of tr.mood.games, as prepared for this corporate website, do not include a marketing pixel, analytics script, contact form or cookie set by the site’s own page code. Hosting, CDN, security tools or deployment changes may still produce server logs or strictly necessary technical storage; the live configuration should be checked.

If optional website analytics, cookies, advertising tags or remarketing technologies are introduced, we will update the disclosures and provide consent or preference controls before their use where legally required. Browser settings can also restrict or delete cookies, though that may not eliminate existing server records.

In separate game-development engagements, we may help customers integrate analytics, advertising or attribution SDKs. Such SDKs can involve app-instance identifiers, advertising identifiers, usage events and campaign metrics. The relevant publisher or other controller remains responsible for explaining its own tracking choices; whether we have any independent controller responsibility depends on what we actually determine or do.

If Mood Games A.Ş. directly runs advertising campaigns or makes targeting decisions for its own purposes, any associated processing must be assessed and disclosed separately where required. Describing a campaign as “non-personalised” does not necessarily mean that no personal data is processed.

6. Who May Receive Information

Subject to necessity, lawful grounds and contractual protections, relevant personal data may be provided to:

• Technical providers: website hosting, infrastructure, security, email and business IT services.
• Professional advisers: authorised legal, tax, accounting and compliance advisers.
• Customers and project partners: only where needed to deliver contracted development/QA services, resolve a technical issue or act on lawful instructions and contractual terms.
• Advertising and analytics platforms: only where actually used in a project or lawful campaign and subject to the relevant controller’s role, permissions and privacy choices.
• Public authorities: when disclosure is required or permitted by law.
• Business transaction recipients: if a lawful reorganisation, acquisition or similar transaction genuinely requires protected disclosure.

Separate legal entities using related branding are not automatically entitled to share personal data. If a request concerns another company’s service, we may direct you to that organisation or forward the request only where permitted and appropriate. Processors must be subject to suitable instructions and confidentiality/security obligations.

7. International Transfers and Processing

We are established in Türkiye. Depending on the website host, email infrastructure, technical platforms, authorised personnel and project arrangements, information may be stored in, remotely accessed from or otherwise transferred to countries outside Türkiye. Remote access from abroad may itself constitute an international transfer.

Where KVKK Article 9 applies, transfers must satisfy the applicable legal requirements, such as a relevant adequacy decision or an authorised safeguard mechanism; where required, appropriate Turkish standard contractual clauses or other legally recognised mechanisms must be used. We do not treat use of the site or an email to us as blanket consent to transfer data abroad.

Where GDPR, UK GDPR or another regime applies, separate applicable transfer safeguards may also be required, such as relevant standard contractual clauses and supplementary measures.

The actual recipients, destinations and legal safeguards depend on the providers and contracts in use. You may ask us for information relevant to your data via the contact details below. The production email-hosting and website-hosting configuration should be confirmed before publication of this notice.

8. Retention, Deletion and Anonymisation

We retain personal data only as long as necessary for the purpose for which it was processed and for applicable recordkeeping or legal requirements. Criteria include:

• Enquiries and correspondence: the time needed to answer, follow up and handle related legal or contractual matters.
• Website and security logs: the configured retention period appropriate to security, investigation and operational needs.
• Recruitment contacts: the recruitment process and any lawful, properly disclosed follow-up period.
• Development or QA records: the applicable project agreement and the controller’s documented instructions where we are a processor.
• Accounting and legal records: any mandatory statutory period and the time reasonably necessary for legal claims.
• Privacy-request records: the period needed to document and comply with the request and related obligations.

When a lawful retention basis ends, personal data is deleted, destroyed or anonymised as required. Limited residual backups may remain until normal backup rotation completes, subject to access restrictions and protection.

To ask about deletion of data controlled by us, contact support@mood.games. A request about a publisher-controlled game may need to be handled by that publisher.

9. Your Privacy Rights and Choices

Depending on the applicable law and our role, you may have rights to find out whether personal data is processed, obtain information or access, correct inaccurate records, request erasure or restriction, object to certain processing, withdraw consent, and exercise other applicable rights.

Contact support@mood.games with enough detail to identify your request. We may seek information reasonably necessary to locate data and verify identity, but please do not email sensitive identity documents unless we provide an appropriate secure channel.

If another organisation determines the processing, we will generally refer you to the responsible controller or assist that controller under our contractual duties. We respond to requests within the deadline required by the law applicable to our processing, explaining legitimate exceptions where relevant.

You may also submit a complaint to the relevant data-protection authority where the law permits. Marketing preferences and consent-based permissions, if offered, can be changed using the method provided or by contacting us.

10. Additional Regional Rights

10.1 Türkiye — Law No. 6698 (KVKK)

Where KVKK applies, Article 11 provides rights to learn whether your personal data is processed and for what purpose, learn relevant recipients in Türkiye or abroad, ask for correction, request deletion or destruction when conditions are met, request notice of those actions to recipients, object to adverse results based exclusively on automated analysis, and seek compensation for damage caused by unlawful processing.

KVKK requests must follow applicable application procedures. Written applications can be mailed to our address; other methods, including registered electronic mail (KEP), secure e-signature, mobile signature or use of an email address already registered with us, apply as provided by the official rules. We normally respond as soon as possible and no later than 30 days. Statutory complaint rights remain available.

Further information in Turkish is available in the KVKK Aydınlatma Metni.

10.2 European Economic Area and United Kingdom

If GDPR or UK GDPR applies to a processing activity for which Mood Games A.Ş. is controller, applicable rights may include access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a competent supervisory authority. The ordinary GDPR response deadline is generally one month, subject to lawful extensions and exceptions. We assess applicable territorial scope rather than assume every visitor is automatically covered.

10.3 Other Jurisdictions

Additional rights may apply under the privacy laws of your country or state. We assess any such request against the applicable legislation and the processing we actually perform. This corporate website policy does not assert that we sell player data or independently conduct behavioural advertising.

11. Children’s Privacy

Our corporate website is intended for business and professional information, not directed toward children. It does not offer child accounts, gameplay or in-site purchases. We do not intentionally request children’s personal information through the website.

Separate game-development projects may involve games used by younger players, but information handled for a customer is subject to the responsible controller’s notices, instructions and the protections required by applicable law. Age ratings do not by themselves establish privacy consent. If you believe we have received a child’s information unlawfully through a communication or service we control, please contact us.

12. Security and Third-Party Services

We use technical and organisational measures appropriate to our processing, such as controlled access and confidentiality measures, to protect personal information against unauthorised access, misuse, alteration or loss. No online system can guarantee absolute security. We assess and report relevant personal-data incidents where required by law.

Links from this website to third-party sites, email providers, app stores or other services may lead to independently operated platforms. Those operators may have separate privacy practices and obligations. Review their notices where appropriate. This does not remove responsibility for our own processing.

13. Changes to This Policy

We may revise this Privacy Policy if our website, technologies, business activities, contractual roles or legal obligations change. The date above shows the latest revision. Where a change requires prior notice, a new legal basis or a separate consent choice, we will take those steps before the relevant processing occurs. Continued use of the website does not itself replace required consent.

14. Contact Us

For privacy questions or requests relating to Mood Games A.Ş.’s own processing, please contact:

When asking about a particular game, please include its title and the publisher shown in its store listing (if known). This helps us identify the appropriate company to handle your request.