Privacy Policy — Tavla
Last updated: 2 November 2026 · Türkçe
Tavla ("the app") is a 3D backgammon game developed and published by Vitrincim (Bilal Faruk Özdemir). Vitrincim is responsible for your data; contact: info@vitrincim.com. If this English text and the Turkish original differ, the Turkish version prevails.
In short
You can play Tavla in the Android app or in a browser at tavla.vitrincim.com. In a browser you can play against the bot without an account; no account data is processed while you do. To play online you create an account, with a username and password or with your Google account. The app asks for a name shown at the table and your year of birth, and asks you to accept the terms of use and this policy. The Android app has optional rewarded ads: only if you choose to watch an ad, Google AdMob shows one and you receive chips in return. There is no third-party analytics. Your data is not sold.
What data we process
Name shown at the table: can be a nickname you choose. Each name is unique and visible to your opponents and, on the leaderboards, to everyone.
Year of birth: only the year is asked (not month or day). It is used to enforce the minimum age of 13 and age-appropriate settings.
Guest account: if you arrive through an invite link, a guest account can be created with a name, your birth year and your consent; no email is requested. Randomly generated sign-in details are stored in your browser. If you neither set a password nor link a Google account, you cannot return to the account after clearing browser data.
Password: only if you choose to sign in with a password. It is never stored in plain text, only as a one-way hash.
Google or Facebook account: if you sign in with one of them, your account ID and email address; when you first create an account this way, your name is suggested as your table name (you can change it). Your email address is not shown to anyone and is used only to identify your account and to contact you if needed, never for ads or newsletters. We do not receive your profile photo, friends list or posts.
Consent record: which version of the terms of use and this policy you accepted, and when.
Game data: chip balance and chip transactions, skill rating, completed lessons, match records (opponent, result and the dice seeds that prove the dice were fair). Kept to run the game, to handle disputes about results and to detect cheating and abuse.
Free-text messages: typing messages at the table is only available when both players are 18 or older. Messages pass through a profanity filter; the filtered text is kept so that reports can be reviewed and is deleted automatically after 30 days. You can mute, block and report your opponent; reports (who reported whom, in which match) are kept to review abuse.
Friends list: your friends, incoming and outgoing requests, blocked players and when you were last online, to show your friends that you are online and to invite them to a table.
Cosmetics: the table, board, checker set and prayer beads you buy and equip in the shop. Your opponent sees your checker set and prayer beads.
Real-money purchases: if you buy a chip pack or a special cosmetic in the app, the payment is handled by Google Play; your card details never reach us. We only keep which product you bought, the Google Play order number, the payment verification token and the date, to grant the product exactly once and to review disputes and refunds. Players under 18 cannot make real-money purchases. Chips have no monetary value, are not refundable and cannot be cashed out.
In-game events: events such as opening the app, starting and finishing a match, finishing a lesson, viewing the shop and buying, and offering a drink. They are kept on our own server only to improve the game; they are not used for advertising and are not shared with third parties.
Connection data: your IP address and connection times when you connect to the server, for security and to limit abuse such as mass fake accounts.
Stored on your device: your sound and graphics settings, your statistics and the session key that recognises you the next time you open the app. In a browser these are kept in browser storage and game files are cached for faster loading; the web version does not use cookies. If Android backup is enabled on your device, the system may include this data in your Google backup, according to Google's rules and your backup settings.
What we do not process: location, contacts, microphone and camera.
Rewarded ads (Google AdMob)
The Android app has a "watch an ad, earn chips" button. An ad is shown only when you press this button; ads never appear during a match or on their own. The web version has no ads.
Ads are served by Google AdMob. To do so, Google collects and processes, under its own rules, your device's advertising ID (Android advertising ID), IP address (to infer approximate location), device and app information, your interactions with the ad and crash/performance information: to show and measure ads and to prevent fraud. Details: How Google uses information from sites or apps that use its services.
In the European Economic Area, the United Kingdom and Switzerland, Google's consent form is shown before ads; your consent is asked for personalised ads and you can change your choice later. You can reset or delete your advertising ID in Android settings.
To credit chips to the right account, Google notifies our server directly when the ad has been watched; this notice only contains a random identifier for your account and a single-use code. We only keep how many rewarded ads were watched on which day, to apply the daily limit and prevent cheating. Your advertising ID never reaches us.
Where it is stored and who it is shared with
The game and account servers are in Contabo GmbH's data centre in the European Union (Germany). Nightly database backups are stored in Cloudflare R2 over an encrypted connection. These providers only host your data on our behalf. If you sign in with Google or Facebook, they are contacted for sign-in; if you make a purchase, Google Play is contacted to verify the payment. If you watch a rewarded ad, Google AdMob collects the data described above. Your data is not sold or shared with anyone else. Your opponent sees your table name, skill rating, checker set and prayer beads, your moves in the match and (if you are both 18 or older) the messages you type.
How long it is kept and how to delete it
Your data is kept for as long as your account exists. You can delete your account inside the app: Account → "Delete my account". Deleting removes your name, chips, chip history and rating permanently; the records of matches you played remain in your opponents' history without your name. Deleted data disappears from server backups within 30 days at the latest. If you cannot access the app, you can request deletion by writing to info@vitrincim.com. You can also disconnect Google or Facebook by removing the app's access in that account's settings.
About chips
Chips exist only inside the game: they cannot be converted into real money, are not refundable and cannot be transferred between players.
Age
The app is for users aged 13 and over. Your year of birth is asked when you create an account; children under 13 cannot create an account.
Your rights
Under Article 11 of the Turkish Personal Data Protection Law No. 6698 (KVKK) — and, where applicable, the GDPR — you have the right to learn whether your data is processed, to request information, correction or deletion, and to object. Send your requests to info@vitrincim.com; they are answered within 30 days at the latest.
Changes
If this policy changes, it is announced in the app and the date above is updated.