Last updated:
In short
- You don't need an account, your name or your email to play Slizoo. We know you only by an anonymous player ID.
- We use gameplay data to run the game, fix bugs and improve levels.
- Personalized ads and install measurement happen only if you allow them.
- Players under 13 never get personalized ads and are not tracked.
- We don't sell your personal data.
- You can ask us to delete your data at any time: Data deletion.
1. Who we are
The Slizoo game and this website are provided by Slizoo. The data controller under the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK) is:
- Legal name: [YASAL UNVAN / LEGAL ENTITY]
- Address: [YASAL UNVAN / LEGAL ENTITY: ADRES / ADDRESS]
- Email: support@slizoo.app
- EU and UK representative (Art. 27 GDPR): [YASAL UNVAN / LEGAL ENTITY: AB/BK TEMSİLCİSİ / EU/UK REPRESENTATIVE]
This policy also serves as the privacy notice required by Article 10 of the KVKK.
2. What this policy covers
- The Slizoo: Stretchy Zoo Puzzle app for iOS and Android,
- the browser version at slizoo.com,
- this website, slizoo.app.
Other sites and stores we link to (Apple, Google, Meta and others) are covered by their own privacy policies.
3. What we collect
3.1 Information you give us
- Birth year. Asked once on a neutral age screen at first launch, only to work out your age group (under 13, or 13 and over). The birth year stays on your device; only the age group reaches our servers.
- Nickname. The name you pick for leaderboards. For players under 13 the nickname is generated automatically and is anonymous.
- Support messages. If you email us: your email address, your message and any attachments (such as screenshots).
3.2 Information collected automatically when you play
- Anonymous player ID: a random ID created at first launch, not linked to your name.
- Gameplay data: level progress, moves, times, scores, stars, skills and boosters used, in-game coin balance, Daily Puzzle and Zoo Race participation.
- Device and app info: device model, operating system and version, language and region settings, time zone, screen size, app version.
- Coarse location: country or city-level location derived from your IP address. We never collect precise (GPS) location.
- Crash and performance data: the technical trace of a crash, device state, memory use.
- Advertising data: advertising ID (on iOS, the IDFA only if you allow it; the Android advertising ID), ad impressions and clicks, your consent choices.
- Purchase info: product, price, currency, transaction ID, date and store country. Your card details never reach us.
3.3 What we don't collect
We don't collect your name, phone number, precise location, contacts or photos. The game never asks for camera or microphone access. We don't process sensitive (special category) personal data.
4. Why we use data, and our legal bases
| Purpose | Data | GDPR (Art. 6) | KVKK (Art. 5, Türkiye) |
|---|---|---|---|
| Running the game, saving your progress and purchases | Anonymous ID, gameplay data, purchase info | 6(1)(b) contract | 5/2-c |
| Leaderboards, Daily Puzzle, Zoo Race | Anonymous ID, nickname, score, move list | 6(1)(b) contract | 5/2-c |
| Fixing crashes, security and cheat prevention | Crash data, device info, move list | 6(1)(f) legitimate interests | 5/2-f |
| Game analytics and balancing | Gameplay data, device info, coarse location | 6(1)(f); consent for device storage in the EEA/UK | 5/2-f |
| Non-personalized (contextual) ads and their measurement | Device info, IP address, ad interactions | 6(1)(f) keeping the game free; consent for device access in the EEA/UK | 5/2-f |
| Personalized ads | Advertising ID, ad interactions | 6(1)(a) consent | 5/1 explicit consent |
| Install attribution and campaign measurement (Meta) | App events, advertising ID | 6(1)(a) consent | 5/1 explicit consent |
| Purchase validation, accounting and tax | Purchase info | 6(1)(c) legal obligation, 6(1)(b) | 5/2-ç, 5/2-c |
| Age gate and protecting children | Age group | 6(1)(c) legal obligation | 5/2-ç |
| Answering support requests | Email address, message, attachments | 6(1)(b), 6(1)(f) | 5/2-c, 5/2-f |
You can withdraw consent at any time (see Ads and your choices). Withdrawing does not affect processing that happened before. We don't make decisions with legal or similarly significant effects based solely on automated processing. Any profiling by our ad partners for personalization happens only with your consent.
5. Third-party services
The game uses software development kits (SDKs) from the services below. Each processes the listed data on its own servers.
| Service | Provider | Purpose | Data | Policy |
|---|---|---|---|---|
| Firebase Analytics | Google LLC (EEA/UK: Google Ireland Ltd.) | Game analytics: seeing which levels are too hard, balancing the game | App instance ID, anonymous player ID, gameplay events, device and app info, coarse location (from IP). On iOS, the advertising ID only if you allow it. | firebase.google.com/support/privacy |
| Firebase Crashlytics | Google LLC | Crash and error reports | Crash trace, device state (model, OS, memory, orientation), Crashlytics installation ID, anonymous player ID. | firebase.google.com/support/privacy |
| Cloud Firestore (Firebase) | Google LLC | Leaderboards, Daily Puzzle, Zoo Race | Anonymous player ID, nickname, score, time, move list (for cheat checks). | firebase.google.com/support/privacy |
| Google AdMob | Google LLC (EEA/UK: Google Ireland Ltd.) | Showing and measuring ads; personalizing them only with consent | Advertising ID (IDFA only with ATT permission; Android advertising ID), IP address, device and app info, ad interactions, consent status. | policies.google.com/technologies/partner-sites |
| Google User Messaging Platform | Google LLC | Collecting ad consent in the EEA, UK and Switzerland | Your consent choices (stored on your device), region derived from IP address. | policies.google.com/privacy |
| AppLovin MAX | AppLovin Corporation | Ad mediation: picking which ad network serves an ad | Advertising ID (with permission), IP address, device and app info, ad interactions, consent status. | applovin.com/privacy |
| RevenueCat | RevenueCat, Inc. | Validating purchases and managing entitlements (Remove Ads, Zoo Pass, etc.) | Anonymous app user ID, transaction ID, product, price, currency, store country, purchase date, device info. | revenuecat.com/privacy |
| Meta (Facebook) SDK | Meta Platforms Ireland Ltd. / Meta Platforms, Inc. | Install attribution and ad campaign measurement | App events (install, launch, purchase), advertising ID (with permission), device info, IP address. Off for players under 13. | facebook.com/privacy/policy |
| App Store / Google Play | Apple Inc. / Google LLC | Payments, refunds and billing | Your payment details stay with the store and never reach us. | apple.com/legal/privacy policies.google.com/privacy |
AdMob and AppLovin MAX may work with other ad networks (mediation partners) to fill ads. The current partner list is shown in the game under Settings > Privacy settings.
6. Ads and your choices
Our ad rules: no banner ads; no ads at all in the first 10 levels; at most one interstitial ad per 3 failed attempts; watching rewarded ads is always optional. If you buy Remove Ads, interstitials stop and you can still watch rewarded ads if you want to.
- iOS: we ask for Apple's App Tracking Transparency (ATT) permission. If you don't allow it, your advertising ID (IDFA) is not shared with us or our ad partners. You can change this in Settings > Privacy & Security > Tracking.
- EEA, UK and Switzerland: Google's consent message (UMP) is shown. You can change your choices any time in the game under Settings > Privacy settings.
- Türkiye and other countries: we ask for your explicit consent before personalized ads and Meta measurement. You can withdraw it under Settings > Privacy settings.
- Android: you can delete or reset your advertising ID in Settings > Google > Ads.
If you decline personalized ads you may still see ads. They are contextual: chosen by the type of game and your approximate region, not by your interests.
7. Purchases
Slizoo is free. Optional purchases such as coin packs, the starter pack, Remove Ads and the Zoo Pass are paid to Apple or Google. RevenueCat validates the purchase using the store receipt and unlocks it for you. We never see your card or payment details. Refunds follow the store's own rules (see Support).
8. Leaderboards and nicknames
On leaderboards, in the Daily Puzzle and in the Zoo Race, other players can see your nickname and score; they can't see your anonymous player ID. Please don't use your real name or contact details as a nickname. To keep scores fair, our server verifies each result by replaying the submitted move list. We may change or remove inappropriate nicknames.
9. Children (COPPA)
Slizoo is designed for everyone, and children play it too. That's why there is a neutral age screen at first launch: we ask for a birth year without hints or a default that nudges toward any answer. For players under 13:
- only non-personalized ads are shown, and ad requests are flagged as child-directed,
- no advertising ID is collected and no ATT prompt is shown,
- no Meta SDK events are sent,
- analytics are used only to support the internal operation of the game (fixing crashes, balancing levels), never for advertising,
- the nickname is generated automatically and is anonymous; there is no free text, chat or friends feature,
- purchases are subject to Apple's and Google's parental controls (Ask to Buy, Family Link).
Under the US Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 beyond the anonymous player ID needed to support the internal operations of the game. If we learn that we have, we delete it promptly. Parents can review or delete their child's data by emailing support@slizoo.app; including the Player ID shown in the game speeds things up.
10. Who we share data with
- Service providers (processors): Google Firebase, RevenueCat, Vercel and our email provider. They process data only on our behalf and on our instructions.
- Ad and measurement partners: Google, AppLovin and its mediation partners, Meta. Some of them process data for their own purposes as independent controllers under their own policies.
- Apple and Google: for payments and app distribution.
- Other players: your nickname and score.
- Authorities: when the law requires it.
- Corporate transactions: in a merger or acquisition, with the protections in this policy.
We don't sell your personal data for money.
11. International transfers
Our service providers have servers in the United States, the European Union and other countries, so your data may be transferred outside Türkiye and the European Economic Area.
- GDPR: transfers rely on European Commission adequacy decisions (including the EU-US Data Privacy Framework for certified companies) or on Standard Contractual Clauses.
- KVKK Art. 9: transfers rely on an adequacy decision or, where there is none, on appropriate safeguards such as the standard contracts published by the Turkish Personal Data Protection Board. In occasional cases without these, we rely on your explicit consent.
12. How long we keep data
| Data | How long we keep it |
|---|---|
| Game progress on your device | Until you delete the app |
| Anonymous player record and gameplay data on our servers | Until you ask us to delete it or we shut the game down |
| Daily Puzzle and Zoo Race standings | Up to 12 months after the event ends |
| All-time leaderboard entry (nickname, score) | Until you ask us to delete it |
| Firebase Analytics event data | 14 months |
| Crashlytics crash reports | 90 days |
| Purchase records | For the statutory retention period (up to 10 years under Turkish commercial and tax law) |
| Support emails | 2 years after the request is closed |
| Ad and measurement data | As set out in each partner's policy |
| Record of a deletion request (player ID and date) | 3 years, to prove we honored it |
| slizoo.app server logs (Vercel) | A short time, usually a few days |
When a period ends, the data is deleted, destroyed or anonymized.
13. Security
Data is encrypted in transit (TLS). Access to server data is limited to authorized people and protected by database access rules. No system is 100% secure. If a data breach happens, we notify the relevant supervisory authorities and you within the time the law requires.
14. Your rights
Under the GDPR (EEA and UK)
You have the right to access, correct and delete your data, to restrict processing, to data portability and to object to processing based on legitimate interests. You can withdraw consent at any time.
Under the KVKK (Türkiye, Art. 11)
- to learn whether your personal data is processed and to request information about it,
- to learn the purpose of processing and whether data is used for that purpose,
- to know the third parties in Türkiye or abroad to whom data is transferred,
- to have incomplete or incorrect data corrected,
- to have data deleted or destroyed under the conditions of KVKK Art. 7,
- to have corrections and deletions notified to third parties who received the data,
- to object to a result against you that arises solely from automated analysis,
- to claim compensation for damage caused by unlawful processing.
How to make a request
Email support@slizoo.app or write to [YASAL UNVAN / LEGAL ENTITY: ADRES / ADDRESS]. Please include the Player ID shown in the game so we can find your data; we may ask for more information to verify your request. We answer free of charge within 30 days at the latest. If you're not happy with our answer, you can complain to your local data protection authority (edpb.europa.eu), to the UK ICO (ico.org.uk), or to the Turkish Personal Data Protection Board (kvkk.gov.tr).
15. Deleting your data
Deleting the app removes the progress stored on your device, but not the data on our servers. To delete server data, follow the steps on the Data deletion page. We complete requests within 30 days.
16. For US residents
Under California law (CCPA/CPRA) and similar state laws, the categories of personal information we collect are: identifiers (anonymous player ID, advertising ID, IP address), commercial information (purchases), internet and app activity (gameplay data), coarse geolocation, and inferences used for advertising. We don't sell personal information for money. Sharing the advertising ID for personalized ads may count as "sharing" under some state laws; you can stop it by turning off tracking on iOS, deleting your advertising ID on Android, or emailing us. Send requests to know, delete or correct to support@slizoo.app. We won't treat you differently for using your rights.
17. slizoo.app and slizoo.com
- slizoo.app (this site) uses no cookies, no analytics and no ads. Vercel, which hosts the site, keeps server logs such as IP address, browser details and time of visit for security and operations (vercel.com/legal/privacy-policy). Fonts load from Google Fonts, so your browser sends your IP address to Google (policies.google.com/privacy).
- slizoo.com (browser version) runs the same game code as the app. Your progress is stored in your browser's local storage and the Firebase services above are used. If the browser version shows ads or uses non-essential cookies, we ask for your consent first where required.
18. Changes
We may update this policy from time to time. The current version is always on this page with the date at the top. We also announce important changes in the game.
19. Contact
For any privacy question: support@slizoo.app
Postal address: [YASAL UNVAN / LEGAL ENTITY], [YASAL UNVAN / LEGAL ENTITY: ADRES / ADDRESS]