At a glance
- We store an anonymous account id, your saved game and your purchase records on our server.
- If you sign in with Apple, we store only your Apple account identifier. Never your name or email.
- Firebase Analytics and Crashlytics (Google) help us understand gameplay and fix crashes.
- Optional reward videos are served by Google AdMob. Google may use your advertising identifier (IDFA) for personalised ads only if you allow tracking when iOS asks; otherwise ads are not personalised. No selling of data.
- Payments go through Apple, with RevenueCat processing purchase records.
- You can delete your account and saved game at any time in Settings.
Who we are
This policy covers the Taverna Tales game for iOS ("the game") and this website, tavernatales.com. The developer of the game and the controller of your personal data is Bilge Dargün ("we", "us").
You can reach us about anything in this policy at support@tavernatales.com.
What we collect and why
We collect as little as we need to run the game. The app does not ask for your name, email address, phone number, contacts, photos or location.
Your game account and saved game
When you first open the game, it creates an anonymous account on our server. We store an account id that is not linked to your name, your saved game (your progress, items, coins, gems and settings within the game) and records of your in-app purchases.
Why: to keep your game safe, to give it back to you on a new iPhone and to deliver what you buy. Legal basis: performance of our agreement with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
Sign in with Apple (optional)
If you choose to sign in with Apple, we receive and store the anonymous identifier Apple gives our app for your Apple account. We do not request, receive or store your name or email address.
Why: to link your saved game to your Apple account so you can restore it on another device. Legal basis: performance of our agreement with you.
Purchases
In-app purchases are made through Apple's App Store. Apple processes your payment; we never see your card or payment details. We use RevenueCat to validate purchases and keep purchase records: the product, price, currency, date, the store's transaction id and your anonymous account id.
Why: to deliver purchases, prevent fraud and meet our accounting and tax obligations. Legal basis: performance of our agreement and legal obligations (GDPR Art. 6(1)(b) and (c); KVKK Art. 5(2)(c) and (ç)).
Analytics and crash reports
We use Firebase Analytics and Firebase Crashlytics, services of Google. Analytics tells us how the game is played, for example which levels players reach, where they get stuck and which features they use, together with general device information such as the iPhone model, iOS version, language and approximate country. Crashlytics sends us a report when the game crashes, with technical details of the crash and the device.
This data is linked to a random app-instance identifier, not to your name. Analytics data is not used for advertising, we do not combine it with data from other companies' apps or websites, and Firebase does not read Apple's advertising identifier (IDFA), even if you allow tracking for ads.
Why: to improve the game and fix problems. Legal basis: our legitimate interest in a stable, enjoyable game (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)). You can object at any time by writing to us.
Reward videos (optional)
The game can show an optional video ad when you tap a "watch" button for a bonus, such as extra energy. There are no banners and no ads you didn't ask for. Videos are served by Google AdMob (Google Ireland Limited in the EEA, UK and Switzerland; Google LLC elsewhere).
When a video is requested, Google receives your IP address (used for your approximate country), information about your device and the app, and how you interact with the ad, to deliver the ad, measure it, prevent fraud and pay us.
From level 6, after you watch a reward video to the end, the game shows a short explanation once, followed by Apple's tracking prompt. If you allow tracking, Google may also use your device's advertising identifier (IDFA) to show you more relevant ads, based on your activity in other companies' apps and websites. If you don't, Google does not get the IDFA and we request non-personalised ads only, so ads are not based on your interests or on what you do in other apps. The reward is the same either way. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.
In the EEA, the UK and Switzerland we also ask for your consent through Google's consent form before any ad is requested, and ads are personalised only if you agree there as well as in Apple's prompt. You can change your choice at any time in the game under Settings → Privacy choices. If you don't consent, you can still play the whole game, and any reward videos you are offered are not personalised.
Legal basis: your consent in the EEA, UK and Switzerland (GDPR Art. 6(1)(a)); elsewhere our legitimate interest in funding a free game (GDPR Art. 6(1)(f); KVKK Art. 5(1) and 5(2)(f)). Personalised ads and the use of your advertising identifier always need your permission in Apple's tracking prompt. Learn more in Google's privacy policy and how Google uses information from apps that use its services.
On your iPhone and in iCloud
Your saved game is also kept on your iPhone, so the game works offline. If you use iCloud Backup, iOS includes it in your device backup in your own iCloud account. That backup is controlled by Apple and you; we have no access to it.
Reminders, such as when your energy is full or a daily gift is waiting, are scheduled on your iPhone only. You can turn them off in iOS Settings.
When you email us
If you contact support, we receive your email address and whatever you write to us, and use them only to answer you. Legal basis: our legitimate interest in answering your request.
This website
tavernatales.com uses no cookies, no analytics and no third-party trackers. Like any web server, ours keeps short-term access logs (IP address, time, page requested and browser type) for security and to fix errors. If you dismiss the language suggestion, your browser remembers that choice locally; it is never sent to us.
What we never do
- Show banners, pop-up ads or videos you didn't ask for.
- Track you without asking. Google may use your advertising identifier for personalised ads only if you allow tracking when iOS asks.
- Collect your advertising identifier (IDFA) on our server or in our analytics. Only Google's ad service can read it, and only with your permission.
- Sell or rent your personal data.
- Ask for your name, email, location, contacts or photos in the app.
Who processes your data
We share data only with these service providers. They process it on our behalf and under our instructions, except where noted below:
- Our server. Your account, saved game and purchase records are stored on our own server, which runs Supabase software and is hosted in a data centre. It is operated by us, not by Supabase.
- Google (Firebase Analytics and Crashlytics) for gameplay analytics and crash reports. Firebase privacy information.
- Google (AdMob) for optional reward videos. For ad delivery, measurement and fraud prevention, Google also acts as an independent controller under its own policy. Google privacy policy.
- RevenueCat for purchase validation and records. RevenueCat privacy policy.
- Apple for the App Store, payments, Sign in with Apple and iCloud. Apple privacy policy.
Some of these providers may process data outside your country, including in the United States. Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses. We may also disclose data if the law requires it.
How long we keep data
- Account and saved game: for as long as your account exists. When you delete your account, we delete them from our server. Copies in our server backups are overwritten within 30 days.
- Purchase records: kept after account deletion, with the link to your account removed, for as long as tax and accounting laws require (up to 10 years).
- Analytics data: kept by Google for up to 14 months, then deleted automatically.
- Crash reports: kept by Google for up to 90 days.
- Reward video data: kept by Google under its own retention rules. We only receive aggregated reports, such as how many videos were watched.
- Support emails: kept as long as needed to help you, and deleted within 2 years.
- Website access logs: deleted within 14 days.
Deleting your account
Open Settings in the game and tap Delete account. This removes your account and your saved game from our server, and the game on your iPhone starts again from the beginning. Deleting the app alone does not delete your account. If you can no longer open the game, email us and we will delete it for you.
Your rights
Depending on where you live, including under the EU and UK GDPR and Turkey's Personal Data Protection Law No. 6698 (KVKK), you have the right to:
- know whether we process your data and get a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to processing, including analytics;
- receive your data in a portable format;
- withdraw consent where processing is based on consent: for reward videos in the game under Settings → Privacy choices, and for tracking in iOS Settings → Privacy & Security → Tracking;
- lodge a complaint with a data protection authority, such as the authority in your EU country or the Personal Data Protection Authority (KVKK) in Turkey.
To use any of these rights, email support@tavernatales.com. Because we do not know your name or email, we may need your help to find your data, for example details about your saved game. We answer within 30 days. If you live in a US state with a privacy law, note that we do not sell your personal information. If you allow tracking, Google may use your advertising identifier for personalised ads, which may count as "sharing" for cross-context behavioural advertising under laws such as California's. You can stop this at any time by turning tracking off in iOS Settings → Privacy & Security → Tracking.
Children
Taverna Tales is a family-friendly game for a general audience. It is not directed at children under 13, and we do not knowingly collect personal data from children under 13. The game does not ask for anyone's name, email or age. If you believe a child has given us personal data, contact us and we will delete it.
Security
Data travels between the game and our server over encrypted connections (HTTPS). Access to the server is restricted and protected. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
Changes to this policy
If we change how we handle data, we will update this page and the date below. If a change is significant, we will also tell you in the game before it takes effect.
This version is effective from 26 October 2026.
Contact
Bilge Dargün, developer of Taverna Tales. Email: support@tavernatales.com.