Privacy Policy
Shamppiyon mobile game
Effective date: July 10, 2026
Last updated: July 10, 2026
This Privacy Policy describes how Shamppiyon (“we”, “us”, or “our”) collects, uses, stores, and shares information when you use the Shamppiyon mobile application for iOS and Android (the “App”) and related online services (collectively, the “Service”).
Shamppiyon is operated by the developer of the App (the “Operator”). By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Information We Collect
1.1 Account and profile information
When you sign in, we collect information needed to create and maintain your account, including:
- A unique user identifier
- Email address
- Display name (nickname)
- Sign-in provider (Google or Apple)
- Profile avatar (a default generated image and/or a photo you choose to upload)
- Cosmetic preferences such as scoreboard frame selection
- Virtual coin balance and purchase history within the App
In production builds, sign-in is handled through AWS Cognito Hosted UI using Google or Apple. We receive the profile information those providers share with us according to your provider settings and the permissions you grant.
1.2 Gameplay and leaderboard information
When you play multiplayer rounds, we process gameplay-related data, including:
- Round participation and connection status
- Scores, leaderboard position, and cumulative total score
- Map completion events and validated solution paths during live rounds
- In-round interactions such as scoreboard emoji reactions
Some round data is kept temporarily in memory while a game is active. Persistent scores are stored after rounds are finalized.
Other players in the same round may see your display name, avatar, scoreboard frame, scores, and related in-game presentation data.
1.3 Purchase information
If you buy virtual coins through the App:
- We process product identifiers, transaction identifiers, purchase amounts, and coin grants
- Payment processing is handled by Apple App Store or Google Play
- Purchase validation and entitlement management are handled by RevenueCat
We do not receive or store your full payment card details.
1.4 Photos you choose to upload
If you choose to set a custom profile picture, the App may request access to your device photo library. You select the image; we do not access your entire photo library beyond the image you choose. Uploaded avatars may be stored on our servers and displayed publicly to other players.
1.5 Information stored on your device
The App stores some information locally on your device, including:
- Authentication session data (stored securely on native platforms)
- Language/locale preference
- Sound and vibration settings
- Temporary session flags related to game participation
These device-stored preferences are not uploaded to our servers unless required for account functionality.
1.6 Information we do not collect
Based on the current version of the App, we do not intentionally collect:
- Precise location or GPS data
- Contacts, calendar, SMS, or call logs
- Microphone recordings (the App plays game audio but does not record your voice)
- Advertising identifiers for ad targeting
- In-app analytics or crash-reporting profiles beyond what your device OS or app store may provide at the platform level
2. How We Use Information
We use the information we collect to:
- Create and authenticate your account
- Provide multiplayer gameplay, leaderboards, and real-time game features
- Display your profile to you and other players
- Process in-app purchases and credit virtual coins
- Maintain game economy features (spending coins on cosmetics or profile changes)
- Protect the Service against fraud, abuse, and cheating
- Operate, maintain, and improve the Service
- Comply with legal obligations
3. Legal Bases for Processing (EEA/UK Users)
If you are in the European Economic Area or the United Kingdom, we process personal data on the following bases:
- Contract: to provide the Service you request, including account access, gameplay, and purchases
- Legitimate interests: to secure the Service, prevent abuse, and improve functionality
- Consent: where required, such as for photo library access
- Legal obligation: where we must retain or disclose information under applicable law
4. How We Share Information
We do not sell your personal information. We share information only as described below:
| Recipient | Purpose | Data involved |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, authentication, databases, file storage, real-time infrastructure | Account, gameplay, wallet, avatar, and transaction data |
| Sign-in (via Cognito) and Google Play billing (via RevenueCat) | Account identifiers, email, name; purchase-related data | |
| Apple | Sign in with Apple (via Cognito) and App Store billing (via RevenueCat) | Account identifiers, email, name; purchase-related data |
| RevenueCat | In-app purchase SDK, receipt validation, and purchase webhooks | User ID, product IDs, transaction IDs, purchase history |
| Other players | Multiplayer presentation and leaderboards | Display name, avatar, scores, selected cosmetics |
| Expo / EAS | App build and distribution tooling | Build metadata at the platform level |
We may also disclose information if required by law, court order, or governmental request, or to protect the rights, safety, and security of users, the Operator, or the public.
5. Data Storage, Location, and Security
Our backend services are hosted on AWS in the EU (eu-central-1, Frankfurt), including authentication, databases, avatar storage, and real-time game infrastructure.
Profile avatars may be stored in a publicly readable storage bucket so they can be shown to other players in the App. Please do not upload images you consider private or sensitive.
We use reasonable technical and organizational measures to protect information, including encrypted transport (HTTPS/WSS), access controls, and secure credential storage on devices where supported. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Data Retention
We retain information for as long as necessary to provide the Service and fulfill the purposes described in this policy, including:
- Account and profile data while your account remains active
- Purchase and coin transaction records as needed for accounting, fraud prevention, and support
- Temporary gameplay/session data only for the duration needed to run live rounds
You may request account deletion by contacting us. After deletion, we may retain limited information where required by law or for legitimate business purposes such as fraud prevention.
7. Your Rights and Choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your account and associated data
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Request a copy of your data in a portable format
- Lodge a complaint with your local data protection authority
You can manage photo library access in your device settings. You can manage App Store or Google Play purchase settings through your platform account.
To exercise your rights, contact us using the details in Section 12.
8. Children’s Privacy
Shamppiyon is a game that may be used by a broad audience. The Service is not directed at children under 13 (or the minimum age required in your country) without parental consent where applicable.
We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information without appropriate consent, please contact us and we will take steps to delete it.
In-app purchases require an account with the Apple App Store or Google Play and are subject to those platforms’ parental controls and purchase approval settings.
9. International Data Transfers
Your information may be processed in countries other than your own, including within the European Union and by service providers such as Apple, Google, and RevenueCat that operate globally. Where required, we rely on appropriate safeguards for international transfers.
10. Device Permissions
- Photo library (iOS / Android): optional, only if you choose to upload a profile picture
- Audio playback (Android): used to play in-game sound effects and music; not used to record audio
- Internet access: required for sign-in, multiplayer gameplay, purchases, and profile sync
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we may provide additional notice in the App or by other reasonable means. Continued use of the Service after an update means you accept the revised policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
- Email: bahadir.tasdemir.g@gmail.com
- Website: https://btasdemir.com
- App: Shamppiyon (iOS bundle ID
com.btasdemir.shamppiyon, Android packagecom.btasdemir.shamppiyon)
Store listing note: Host this page at a stable public URL (for example https://shamppiyon.com/privacy) and enter that URL in App Store Connect and Google Play Console. Replace the contact email above if you use a different support address.