Privacy Policy

1. Introduction

This Privacy Policy explains how Oktay Saygın ("we", "us"), the developer of Pikoo (the "Game"), collects, uses, and protects your information when you play the Game. We act as the data controller for the personal data described below.

Pikoo is a casual arcade game in which players climb as high as possible while collecting in-game items. We keep the amount of personal data we collect to the minimum required to run the Game. The Game does not show ads, does not use advertising or analytics trackers, and does not offer in-app purchases.

If you are located in Türkiye, please also read our KVKK Clarification Text (Aydınlatma Metni), which is provided in Turkish under the Turkish Personal Data Protection Law No. 6698.

2. Information We Collect

We only collect the information that is necessary to provide your account and gameplay experience:

• Account information: your email address and username. If you sign up with Google or Apple, we receive your email address (for Apple this may be a private relay address) and your name, which is used only to suggest a username.
• Authentication data: your password is never stored in plain text; it is hashed before being saved. For Google and Apple sign-in we store the unique account identifier provided by that service.
• Gameplay data: your high score, in-game currency (diamonds), cosmetic inventory, character appearance, earned badges, and the date you last claimed a daily quest reward.
• Ghost race data: for registered accounts, a recording of your best run (your character’s positions over time, the level seed, and your score) together with your username and character appearance.
• Technical data: account creation, update, and last sign-in timestamps, the version of the Terms of Use and this Privacy Policy in effect at sign-up and the time you confirmed them (when creating an account, by ticking the unticked-by-default box stating that you agree to the Terms of Use and have read this Privacy Policy; for Guest accounts, by continuing). Confirming that you have read this Policy only records that you were informed; it is not consent to processing. We also process your IP address, which is used briefly to limit abusive requests (rate limiting).

3. Guest Accounts

You can play Pikoo without providing personal details by using a Guest account. Guest accounts are created with a random username and do not require an email address. Ghost runs are not stored for Guest accounts. Guest accounts that have not been used for 60 days are deleted automatically.

4. How We Use Your Information

We use the information we collect to:

• Create and maintain your player account and let you sign in.
• Save your scores, diamonds, inventory, badges, and quest progress across sessions and devices.
• Display leaderboards and provide the ghost race feature.
• Keep the Game secure and prevent fraud, cheating, or abuse.
• Respond to your support and data requests.

5. Information Visible to Other Players

Your username and high score are shown on the public leaderboard. When another player races against your ghost, they see your username, your character’s appearance, and a replay of your best run. Your email address is never shown to other players. Please do not use your real name or other personal information as your username.

6. Third-Party Sign-In

If you choose to sign in with Google or Apple, that provider verifies your identity and shares the information described above with us. We do not receive or store your Google or Apple password. Their processing of your data is governed by their own privacy policies.

7. Service Providers and International Transfers

We do not sell your personal information and we do not share it with advertisers. To operate the Game we use the following service providers, whose servers may be located outside your country (including in the United States and the European Union):

• Vercel Inc. — application hosting (server location: United States).
• MongoDB Inc. (MongoDB Atlas) — database hosting (server location: Belgium, European Union).
• Google LLC and Apple Inc. — only if you choose to sign in with them.

8. Data Retention

We keep your account and gameplay data for as long as your account exists. When you delete your account in the Game (Account screen → Delete ID) or through our deletion request form, your account and ghost run are deleted. Inactive Guest accounts are deleted after 60 days. Rate-limiting records containing IP addresses are deleted automatically after about 2 minutes.

9. Data Security

We take reasonable technical and organizational measures to protect your information. Passwords are stored only as secure hashes, connections are encrypted, and access to player data is restricted. However, no method of transmission or storage is 100% secure.

10. Children’s Privacy

Pikoo is suitable for a general audience. We do not knowingly collect more personal information than necessary from children. Children should use a Guest account or ask a parent or guardian before creating an account. If you believe a child has provided us with personal data that should be removed, please contact us.

11. Your Rights

Depending on where you live (for example under the Turkish KVKK or the EU/UK GDPR), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to lodge a complaint with your data protection authority. You can delete your account at any time from within the Game, or by using the link below or contacting us directly. We respond to requests within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for significant changes, notify you in the Game.

13. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us: