Games Privacy Policy

Data controller: Caymaz TechHealth Yazılım Tic. Ltd. Şti. MERSIS: 0203091510500001 Tax office: Başakşehir | Tax ID: 2030915105 Address: Istanbul, Türkiye

Privacy contact: [email protected] General / legal: [email protected] Web form: caymaztech.com/#contact (select a privacy or data-rights request type and name the game)

We respond within timelines required by applicable law (including KVKK and, where applicable, GDPR).

This Games Privacy Policy covers:

• Crash Blaster • Squad Runner • Snowline Rush • Deep Sea Tycoon

and any future entertainment title that cites this Policy in its store listing or in-app. Product pages: caymaztech.com/game/crash-blaster, caymaztech.com/game/squad-runner, caymaztech.com/game/snowline-rush (and other published slugs).

Unless a product-specific subsection below says otherwise, the default model is: no Caymaz TechHealth account, progress stored on device, advertising and purchases handled by named third parties.

Depending on the game and your choices, processing may include:

• On-device game data: progress, settings, soft currency balances, and preferences stored locally on your device. For default Covered Games (Crash Blaster, Squad Runner, Snowline Rush), this data is not uploaded to Caymaz TechHealth servers because those titles do not operate a player account backend. • Advertising identifiers and ad interaction data: processed by Google Mobile Ads (AdMob) and related consent tooling (UMP / Google User Messaging Platform) where ads are shown, subject to your consent choices and platform rules (including App Tracking Transparency on iOS where required). • Purchase and entitlement data: product identifiers, purchase tokens, and subscription/entitlement status via Apple, Google Play, and Adapty (where used). We do not receive full payment card numbers. • Approximate technical data: device type, OS version, app version, language, crash or diagnostic signals if a provider is enabled for that build. • Support communications: if you email us or use the website contact form (name, email, message content you provide).

We do not sell personal data. We do not use game content to train generalized AI models for other users.

We do not knowingly require name, email, or phone number to play default Covered Games.

We process personal data to:

• Provide and maintain the game experience you request (contract / performance of a service) • Process in-app purchases and restore entitlements (contract) • Show advertisements in free tiers and measure ad performance, with consent where required (consent; legitimate interests where permitted for non-personalized ads) • Secure the service, prevent fraud and abuse (legitimate interests / legal obligation) • Respond to support and privacy requests (legal obligation / contract / legitimate interests) • Comply with store and regulatory requirements (legal obligation)

Where GDPR applies, these bases map to Article 6. Where KVKK applies, we rely on the corresponding lawful grounds under Law No. 6698, including explicit consent where required for certain advertising or cross-border scenarios.

Covered Games are intended for users aged 13 and older (or higher if required by local law). They are not directed to children under 13 and are not submitted as primarily child-directed under COPPA, Apple Kids Category, or Google Play Designed for Families as a kids-directed experience.

We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal data to us, contact [email protected] and we will delete it promptly where we control it.

Parents and guardians should use Apple and Google parental controls to manage purchases and downloads. Advertising, where shown, is configured consistent with a Teen / 13+ audience and applicable ad content ratings.

We disclose game-related data only to service providers that process it on our instructions or as independent controllers for their platform services:

• Google (AdMob / Google Mobile Ads, User Messaging Platform): advertising and consent messaging • Apple (App Store / StoreKit): distribution, billing, refunds • Google Play Billing: distribution, billing, refunds on Android • Adapty: purchase validation and entitlements where integrated

These providers act under their terms, privacy policies, and — where they process personal data on our behalf — data processing terms / DPAs. We require confidentiality and security commitments consistent with applicable law.

We do not sell personal data and do not share it for cross-context behavioral advertising as a “sale” under CCPA/CPRA. For company-wide infrastructure beyond games, see also caymaztech.com/privacy.

Advertising, billing, and entitlement providers may process data in the United States, the EEA, Türkiye, and other countries where they operate. Where GDPR or UK GDPR requires safeguards for transfers from the EEA/UK, we rely on appropriate mechanisms maintained by those providers (such as Standard Contractual Clauses / UK IDTA or addenda) and supplementary measures where applicable.

By using ads or making purchases, you acknowledge that related processing may occur outside your country of residence as described by the relevant provider’s documentation.

On-device game data remains on your device until you clear app data or uninstall the game. Uninstalling deletes local progress we do not host on our servers for default Covered Games.

Advertising and purchase records retained by Google, Apple, or Adapty follow those providers’ retention practices and your store account settings.

Support emails and privacy requests are retained as needed to resolve the request and meet legal record-keeping (typically up to 24 months after closure unless law requires longer).

To request deletion of residual personal data we control (for example support correspondence), email [email protected] or use caymaztech.com/#contact. For advertising identifiers and store purchase history, use platform settings (for example limit ad tracking / delete advertising ID) and your Apple ID or Google account tools.

Subject to applicable law, you may have rights to access, rectify, erase, restrict, object, withdraw consent, and data portability, and to lodge a complaint with a supervisory authority (including KVKK Kurumu in Türkiye and your local EEA/UK authority).

Because default Covered Games do not create a Caymaz TechHealth account, many requests are fulfilled by uninstalling the app and adjusting store/ad settings. For data we hold (support tickets), contact [email protected].

California and other US state laws: we do not sell or share personal information for cross-context behavioral advertising as defined. You may still contact us to exercise applicable rights.

Company-wide rights procedures are also described at caymaztech.com/privacy.

Crash Blaster, Squad Runner & Snowline Rush: No Caymaz TechHealth login. Progress and settings are local. Free tiers may show AdMob ads with UMP consent where required. In-app purchases (for example virtual currency, revives/boosts, remove-ads) use Apple/Google billing and Adapty where integrated.

Deep Sea Tycoon: May include additional features such as accounts, social/community systems, or parental/guardian flows described in legacy game supplements at caymaztech.com/legal/game/deep-sea-tycoon. Where those features collect account or community data, that processing is covered by this Policy plus those supplements. If a feature is not present in your version, those subsections do not apply.

Legacy per-game legal pages under /legal/game/{slug} remain available for historical App Store / Play links; this Games Privacy Policy is the primary portfolio policy for new listings.

We apply appropriate technical and organizational measures for systems we operate. No method of transmission or storage is 100% secure. Protect your device and store account credentials.

We may update this Policy for legal, store, or product changes. The “Last updated” date will change; material updates may be highlighted in-app or on listings where appropriate.

Where translations are provided, the English version governs interpretation unless mandatory local law requires otherwise. For Turkish KVKK-specific disclosures related to the company generally, see also caymaztech.com/kvkk.