BUMP ROLL

Privacy Policy

Last updated: 10 October 2026

Bump Roll ("the game") is a Superb Games title published by Hazar Üstün under the Shimal studio ("we", "us"). This page explains what data is processed when you play, why, and how to reach us about it.

1. No account, no personal profile

The game has no accounts and no servers of ours. It never asks for your name, email address or any other identifier. Your progress, stars and settings are stored only on your own device and are removed when you delete the game.

2. Advertising

The game is free and shows ads through Google AdMob: occasional interstitial ads between levels and rewarded ads you choose to watch (extra time, skip level, show solution). To deliver and measure ads, Google's SDK may collect and process:

• your device's advertising identifier (IDFA) — only if you allow tracking when iOS asks;
• general device and app information used to serve and measure ads (device type, OS version, approximate location inferred from your IP address, ad interaction events);
• diagnostic data such as crash and performance information.

We do not receive this data in a form that identifies you. Google processes it under its own privacy policy (policies.google.com/privacy) and explains how it uses data from apps at policies.google.com/technologies/partner-sites.

Your choices

• Tracking permission (iOS): allow or refuse tracking in the system prompt, and change it later in Settings → Privacy & Security → Tracking. If you refuse you still see ads, but they are not personalised using your advertising identifier.
• Consent (EEA, UK, Switzerland and some US states): where required, the game shows Google's consent form before any ad is requested. Nothing is collected for advertising until you answer it.
• Rewarded ads are always optional; you only watch them if you choose to.

Legal basis (EEA/UK)

• Personalised advertising and the advertising identifier — your consent, GDPR Art. 6(1)(a), withdrawable at any time.
• Non-personalised advertising, fraud prevention and ad measurement — our legitimate interest in funding and protecting a free game, GDPR Art. 6(1)(f).
• Purchases — performance of a contract, GDPR Art. 6(1)(b), carried out by Apple.

3. Purchases

The optional "Remove ads" purchase is processed entirely by Apple through the App Store (StoreKit). We never see or store your payment details. The purchase is tied to your Apple ID and can be restored from the game's settings.

4. Notifications

If you allow notifications, the game schedules a few local reminders on your device (for example a day after you last played). They are created on the device itself; nothing is sent to us or to any server. Turn them off any time in Settings → Notifications → Bump Roll.

5. What we do not collect

• No account, no email, no phone number
• No user-generated content, no chat, no social features
• No analytics SDK of our own and no servers of our own
• No location tracking beyond the coarse, IP-based signal AdMob uses for ad delivery
• No sale of personal data, ever

6. Data retention

Gameplay data lives on your device for as long as the game is installed; deleting the game deletes it. Advertising identifiers are governed by Apple's and Google's own retention rules, not ours.

7. Children's privacy

The game is rated 4+ for a general audience. It is not directed at children, and we do not knowingly collect personal data from children under 13 (or under 16 in the EEA where local law sets that age). Where tracking is declined or the consent form is answered "no", ads are served in non-personalised form. If you believe a child has provided personal data through the game, contact us and we will have it deleted.

8. Your rights

We hold no account and no personal profile tied to you, so most requests are answered by your own device: Ask App Not to Track, and deleting the game, which erases everything it stored. Where the GDPR or the UK GDPR applies you nevertheless have the right to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. Write to the address below and we will answer within one month, routing anything held by an advertising partner to that partner. You may also lodge a complaint with a supervisory authority — in the UK the ICO, in Türkiye the KVKK.

9. International transfers

We run no servers of our own. Google LLC and Apple Inc. process data in the United States and other countries outside the EEA, UK and Türkiye, relying on the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework under each company's own terms.

10. KVKK aydınlatma metni (Türkiye)

6698 sayılı Kişisel Verilerin Korunması Kanunu kapsamında veri sorumlusu Hazar Üstün'dür. Oyun; reklam gösterimi amacıyla reklam kimliği (IDFA), cihaz ve uygulama bilgileri ile reklam etkileşim verilerini, açık rızanıza dayanarak (KVKK m.5/1) Google LLC aracılığıyla işler. Satın alma işlemleri Apple Inc. tarafından sözleşmenin ifası hukuki sebebiyle yürütülür. Verileriniz yurt dışına, yukarıda belirtilen güvenceler çerçevesinde aktarılır. KVKK m.11 uyarınca verilerinizin işlenip işlenmediğini öğrenme, düzeltilmesini veya silinmesini isteme haklarına sahipsiniz; başvurularınızı aşağıdaki e-posta adresine iletebilirsiniz.

11. Changes to this policy

The current version always lives at this address; material changes will be reflected here with an updated date.

12. Contact

Questions about this policy: hello@shimal.app