Privacy Policy

This policy explains what personal data the mobile game Honk Jam: Car Parking Puzzle ("Honk Jam") collects, why we collect it, who we share it with, how long we keep it and what you can do about it. It applies to the Honk Jam apps for iOS and Android and to the servers that support them.

1. Who is responsible for your data

The data controller is:

For data-protection questions, write to the address above with "Privacy — Honk Jam" in the subject line. We answer within 30 days, and within the shorter periods required by Turkish Law No. 6698 (KVKK) or the EU General Data Protection Regulation (GDPR) where those apply to you.

2. Playing without an account

Honk Jam does not require registration. The first time the app runs, it generates a random identifier on the device, stores it in the device keychain, and uses it to create an anonymous profile on our servers. That profile holds your level, coins, boosters, lives, daily streak, unlocked car styles, and a generated display name. It is not linked to your real identity, your phone number, your contacts or your email address unless you later choose to sign in.

3. Data we collect

3.1 Account data

If you use Sign in with Apple and choose to hide your email address, we only ever see Apple's private relay address.

3.2 Gameplay data

Levels started, completed, failed and skipped; the moves played in a level and the time they took; boosters used; coins earned and spent; lives; daily rewards; tasks; streaks; live-event progress; piggy-bank balance; and leaderboard points. We use this to run the game, to keep leaderboards fair, to balance difficulty and to detect cheating — every completed level is checked on our servers, and a result that could not have been reached with the moves sent, or that was played impossibly fast, is not counted.

3.3 Device and technical data

Device model, operating system version, app version and build, language and region, a generated installation identifier, session start and end times, network availability, and error and crash reports including stack traces. Crash reports are sent to Sentry and are configured not to include personally identifying payloads.

3.4 Purchase data

When you buy something, Apple or Google processes the payment. We never receive your card number, bank details or billing address. We receive from RevenueCat and from the app stores: the product purchased, the transaction and receipt identifiers, the purchase, renewal, cancellation and refund events, the store country and the price. We use this to deliver what you bought, to keep your VIP status accurate, to reverse items after a refund and to keep accounting records.

3.5 Advertising data

The current iOS version of Honk Jam shows no ads. It does not start any ad-serving SDK, does not read your advertising identifier and does not show the App Tracking Transparency prompt.

Measuring our own advertising. We may advertise Honk Jam on Meta (Facebook and Instagram). To measure those campaigns the app includes the Meta SDK, which sends Meta app events: the app being installed and opened, in-app purchases (product and price, never payment details) and campaign levels won, together with device and app information and a Meta-generated app installation identifier. Advertising identifier collection is switched off. Without App Tracking Transparency permission iOS blocks Meta's tracking connections and Meta reports results only in aggregate (Aggregated Event Measurement and Apple's SKAdNetwork). Meta uses this data to measure and optimise our ad campaigns.

If in-app ads are enabled in a future version, or on platforms where they are already enabled, the rest of this section applies and we will ask for your permission before any tracking identifier is used.

Where ads are enabled, Honk Jam shows rewarded videos that you choose to watch, and interstitial ads between levels from level 10 onwards. Ads are delivered through Unity LevelPlay (formerly ironSource), which runs an auction between Unity Ads and other advertising networks connected to it. LevelPlay and those networks may process your advertising identifier (IDFA on iOS or Advertising ID on Android), a device identifier, IP address, coarse location derived from the IP address, device and network characteristics, and data about which ads you were shown and which you interacted with. They use this to select and measure ads and to detect fraud. Our servers may additionally receive a confirmation from the ad network that a rewarded ad was genuinely watched, so we can grant the reward.

On iOS 14.5 and later we ask for permission through the App Tracking Transparency prompt before any tracking identifier is used for advertising. Where the GDPR or similar rules apply, the game asks for your advertising consent in its own consent dialog and passes your choice to LevelPlay. If you decline either one, the game works exactly the same and you still receive rewards; you simply see non-personalised ads. Apple's SKAdNetwork is used for privacy-preserving install attribution.

3.6 Analytics

The app records product-analytics events such as "app opened", "level started", "level finished", "level skipped", "booster used", "ad watched", "purchase completed" and "session ended", together with the technical data in section 3.3. These events are sent to our own servers and may be forwarded to GameAnalytics from our servers. We use them to understand which levels are too hard, where players stop playing and whether a change improved the game.

3.7 Notifications

If you allow notifications, the app schedules reminders on your device — for example when your lives are full or when a daily reward is waiting. These are local notifications. We do not operate a push server and do not collect a push token.

3.8 Server security logs

Every request from the app to our servers is logged with its time, the endpoint, the response status, the duration and the IP address it came from. We use these logs only to keep the service secure and working: to stop abuse such as automated sign-up attempts, to apply rate limits and to investigate errors. They are not used for advertising or profiling and are deleted on a rolling basis.

3.9 Reports about display names

Any player can report a display name shown on a leaderboard as offensive. We store who reported which player and when. Our team reviews reports, and a name that breaks our rules is replaced with a neutral generated name; repeated abuse can lead to the account being suspended. Reports are deleted when the reporting account is deleted.

3.10 Support correspondence

If you email us, we keep your message, your email address and our reply so we can help you and keep a record of the request.

4. What we do not collect

• No GPS or precise location.
• No access to your camera, microphone, photos, contacts, calendar, health data or files. The app never asks for these permissions.
• No chat, messaging, voice or uploaded content. The only text you can publish is your display name.
• No payment card data.
• No biometric data.

5. Legal bases for processing

Where the GDPR applies, we rely on these legal bases:

Where Turkish Law No. 6698 applies, the equivalent grounds are the necessity of processing for the performance of a contract (Art. 5/2-c), our legitimate interests (Art. 5/2-f), compliance with a legal obligation (Art. 5/2-a) and, for advertising identifiers, your explicit consent (Art. 5/1).

6. Who we share data with

We do not sell personal data and we do not share it for other companies' independent marketing. We share only what each of the following needs to do its job:

Each provider's own privacy policy explains how it handles data: Apple, Google, Meta, RevenueCat, Unity, Sentry and GameAnalytics all publish one. The current list of advertising networks connected through LevelPlay is available from us on request.

7. Where your data is stored and transferred

Our game servers and databases are hosted in Türkiye. Several of the providers listed above are established outside Türkiye and the European Economic Area, mainly in the United States, so using the app involves international transfers. For transfers from the EEA we rely on the European Commission's standard contractual clauses. For transfers from Türkiye we rely on the appropriate safeguards in Article 9 of Law No. 6698 as amended in 2024 — in particular standard contracts notified to the Personal Data Protection Authority — and on your explicit consent only for occasional transfers where the law allows it. Leaderboards are global, so your display name and score are visible to players in other countries.

8. How long we keep data

9. Deleting your account

You can delete your account from inside the app at any time, whether or not you ever signed in: Settings › Profile › Delete account, then confirm. This immediately and permanently:

• closes the account and ends every active session on every device;
• erases the email address, password, display name, country and any Apple identifier linked to it;
• deletes your level progress, coins, boosters, goals, level attempts and the analytics events recorded for the account;
• removes your entries from all leaderboards;
• deletes files stored for your account on our storage;
• resets the app on your device to a fresh guest state, wiping local progress.

Your level, coins, boosters and purchases cannot be recovered afterwards. Deleting your account does not cancel a VIP subscription — cancel it in your store account. Records we must keep by law, such as invoices for purchases, are retained for the periods in section 8 and are not used for any other purpose. If you prefer, you can ask us to delete your account by writing to developer@grouptaiga.com; we may ask you for information that lets us identify the account.

10. Your rights

Depending on where you live, you have the right to: know what we hold about you and get a copy of it; correct it; delete it; restrict or object to processing, including profiling for advertising; withdraw a consent you gave; receive your data in a portable format; and complain to a supervisory authority. In Türkiye that authority is the Personal Data Protection Authority (KVKK Kurumu); in the EEA it is your national data-protection authority. Under Turkish Law No. 6698 you may also ask whether your data has been processed, learn the purpose, learn who it has been transferred to, and request that any damage caused by unlawful processing be compensated.

To exercise a right, including receiving a copy of your data in a machine-readable format, email developer@grouptaiga.com with your display name. We do not charge for this, and we will not treat you differently for asking. Some rights can be exercised faster in the app itself: you can change your display name and delete your account under Settings › Profile, change your advertising consent under Settings › Preferences › Privacy choices where ads are enabled, and change your tracking choice in your device settings.

11. Your advertising choices

• iOS: Settings › Privacy & Security › Tracking, and Settings › Honk Jam.
• Android: Settings › Google › Ads, where you can delete or reset your advertising ID and opt out of personalised ads.
• In the app: Settings › Preferences › Privacy choices reopens the consent dialog in versions that show ads.
• Remove ads, Starter pack and VIP: these remove interstitial ads. Rewarded ads remain available because you choose when to watch one.

12. Children

Honk Jam is a general-audience puzzle game. It is not directed at children under 13, and we do not knowingly collect personal data from them. We do not use personalised advertising for users we know to be children, and where a store's families programme applies we follow its rules. If you believe a child has given us personal data, write to us and we will delete the account and its data.

13. Security

Traffic between the app and our servers uses TLS. Passwords are stored only as salted hashes and are never logged. Sessions use short-lived tokens with rotating refresh tokens that can be revoked. The device secret is stored in the platform keychain. Access to production systems is restricted and logged, and we take regular backups. No system is perfectly secure, so we cannot promise absolute security; if a breach affects your data and the law requires it, we will notify you and the relevant authority.

14. Changes to this policy

If we change this policy we will update the date at the top and publish the new version at this address. If a change materially affects you — for example a new category of data or a new purpose — we will tell you in the app before it takes effect and, where the law requires it, ask for your consent.

15. Contact

Taiga Teknoloji Anonim Şirketi
Çifte Havuzlar Mah., Eski Londra Asfaltı Cad., Kuluçka Mrk. A1 Blok No: 151/1C, İç Kapı No: B35, Esenler / İstanbul, Türkiye
developer@grouptaiga.com