Privacy Policy

Fishburg: Aquarium · Last updated: 28 October 2026

The short version

Fishburg has no sign-up: you never give us an email address, a password or your name. When the game first starts, it creates an anonymous account by itself, with a random player ID and a generated display name.
Your game is saved on your device, and a backup copy of it is kept on our server with that account, so your progress can come back after you reinstall the game, restore a backup or move to a new iPhone, iPad or Android phone. Only your own game can read the copy.
For the friends feature, more is stored (your level, a copy of how your tanks look, friends, likes, blocks and reports) only after you join Friends and accept its rules.
You can delete the account at any time in the game's Settings (Settings → About → Delete social account); that deletes the backup copy and the friends data too. Without the app, see Delete your account. We don't use this data for ads and we don't sell it.
Ads are provided by Google AdMob; through AdMob, Unity Ads and Liftoff Monetize can also offer an ad. They are personalised only if you agree: on iPhone and iPad in Apple's tracking prompt (and, in the EEA, the UK and Switzerland, also in the consent form); on Android only in the EEA, the UK and Switzerland, in the consent form. Otherwise you get non-personalised ads. Either way, these ad companies collect some device and usage data to show ads, measure them and prevent fraud.
Purchases are handled by Apple (App Store) or Google (Google Play), and Game Center by Apple. We never see your payment details.
Rate Fishburg, Share Fishburg and the occasional rating request open Apple's or Google's own screens and send nothing to us.
The game has no analytics or crash-reporting tools of its own. It works fully whatever you choose in any privacy prompt.

This policy covers the Fishburg game for iPhone and iPad (App Store) and for Android (Google Play), listed in both stores as Fishburg: Aquarium, and this website. Where the two versions differ, the policy says so.

1. Who we are

Fishburg is made by BEYDANUR DONMEZ (Beydanur Dönmez) ("we", "us"), an individual developer. We are responsible for how the Fishburg app handles personal data: the "data controller" under the GDPR and the veri sorumlusu under Turkey's Personal Data Protection Law (KVKK). You can reach us at fishburg.sandbox@outlook.com.

Google and Apple provide some services inside the app (ads; purchases; Game Center on iPhone and iPad; push delivery). They handle the data they collect under their own privacy policies, which are linked below. Supabase hosts the friends feature and the backup copy of your game for us and handles that data only on our instructions. Expo passes the notifications about friends on for us, to Apple's push service on iPhone and iPad and to Google's Firebase Cloud Messaging on Android (see Notifications).

2. Your game and its backup

You can play Fishburg without an internet connection. Your game is saved in the app's private storage on your iPhone, iPad or Android phone:

your tanks, fish, decorations, coins, gems, level, awards, daily tasks and calendar progress (your save game);
your settings, such as language, sound, music and notifications;
which purchases you have made (for example, Remove Ads or the Starter Pack), so the game can apply them.

We do not use our own analytics, crash reporting or tracking tools. The Android version contains Google's Firebase only to deliver push notifications (see Who stores it); Google Analytics for Firebase and Firebase Crashlytics are not used.

The backup copy on our server (cloud save)

So that you don't lose your progress when you delete and reinstall the game, restore your device from a backup or move to a new device, the game keeps a backup copy of your save on our server (hosted by Supabase in Frankfurt, see Who stores it). This is done for every player who has the anonymous account that the game creates when it first starts with an internet connection (see Created when the game first starts), also if you never join Friends and before you accept its rules. It starts once the first setup of the game is done.

What is copied: your whole save, as the game keeps it on your device. That is your tanks with their fish and decorations, including the names you gave your fish and your tanks; your coins, gems, XP and level; eggs and items in storage; awards, daily tasks, the Reward Chest, the Free Gift and the calendar; game statistics (for example, how many fish you have sold); your settings (language, sound, music, notifications); how many times and since when you have played; the time of the last full-screen ad and how many ad rewards you collected today; and whether you have bought Remove Ads and the Starter Pack (Apple's privacy label lists this as "Purchase History"). The transaction numbers of your purchases (on Android, the Google Play purchase tokens) are left out. With the copy, the server stores your account ID, the version of the save and of the app, your level and the time of the upload.
When: while you play, at most every 2 minutes, and when you leave the game. Only the latest copy is kept. To apply a daily limit, the server counts the uploads and downloads of each day (counted in UTC); these counters are deleted after 7 days.
Who can read it: only your own game, signed in to your account. Friends and other players cannot see it: friends see only the separate copy of how your tanks look, which leaves the names out. We use the copy only to give you your game back. We do not use it for ads, analytics or tracking, and we do not sell it.
How it is used: each time the game starts or you come back to it, it compares the copy with the game on your device. If the device has nothing newer (for example, after a reinstall or on a new device), the copy replaces the game on the device. If both have changed (two devices on one account), the side with more total XP is kept.
How long: until the account is deleted, by you (Deleting your social account) or by us (Reports and moderation). The copy is then deleted at once. The game on your device is not touched.

Remove Ads comes back through Apple or Google Play with Settings → General → Restore Purchases, not from this copy. Gems and coins you bought come back with the copy, because they are part of your game.

How the game finds your account again

To sign you back in to the same account after a reinstall or on a new device, the game keeps a random secret key on your device.

iPhone and iPad: the key is kept in your device's iOS Keychain. This Keychain entry stays on the device when you delete the app, and it moves to a new device with an iCloud backup, an encrypted computer backup or Quick Start. It is not synced through iCloud Keychain, so your iPhone and your iPad stay two separate players.
Android: the key is kept in the app's private files on the phone (not in the Android Keystore). Android's own backup (the Google One backup of your phone, or a transfer from your old phone when you set up a new one) copies it together with your game save and the sign-in to Friends; Google encrypts this backup end to end when your phone has a screen lock (PIN, pattern or password). Reinstalling Fishburg from Google Play on a phone that has such a backup, or setting up a new Android phone from it, therefore brings back the same player. Deleting the app deletes the key from the phone; without such a backup, a reinstall starts a new game.

A game cannot be moved between an iPhone or iPad and an Android phone: they are always separate players, because Fishburg has no account linking. On our server, the account gets a sign-in name in the form <account ID>@recovery.fishburg.invalid, which is not a real email address and can never receive mail, and a password made from the secret key, which Supabase stores only in hashed form. We never ask for or collect a real email address.

A new device set up without a backup or transfer (or, on iPhone and iPad, from an unencrypted computer backup of a different device) cannot get the account or the game back; on Android, neither can a reinstall without an Android backup. Because deleting the app does not start the game over when a backup or the Keychain brings the key back, delete the account first if you want to start over: Settings → About → Delete social account, then delete the app.

3. Friends and your social account

Fishburg has a friends feature. You add other players with a player ID, look at their tanks, leave a like and clean their glass. It runs on a server that we rent from Supabase (see Who stores it). Together with the backup copy of your game (see The backup copy on our server), this is the only data we keep about you.

Created when the game first starts

The first time Fishburg starts with an internet connection, it creates an anonymous social account for the game on your device. You give no email address, no password, no name and no Apple Account or Google Account, and we do not learn who you are. It is used for the backup copy of your game and for Friends. Apart from the backup copy and the sign-in described under Your game and its backup, the server then stores only:

a random account ID and the time the account was created;
a public player ID in the form FB-XXXX-XXXX;
a display name that the game generates for you;
your app language, so that text sent to you can be in your language;
your device's time zone (a name such as Europe/Istanbul, taken from your device's settings), used only so that notifications about friends follow the quiet hours and the daily limit in your local time (see Notifications).

Nothing else is sent for Friends until you join. Until then no other player can find you, even with your player ID.

Stored after you join Friends

The first time you use Friends, the game shows the rules and asks you to accept them. If you don't accept, nothing below is sent. After you accept, the server also stores:

Data	What it contains
Display name	The generated name, or the one you type instead (3 to 16 characters, checked by a filter for offensive words)
Level	Your player level
A copy of your tanks	Tank size, background, sand, decorations and where they stand, your fish (species, colour, growth stage and whether they are hungry), how dirty the glass is, and the time of the upload. The copy is read-only and is uploaded when the game saves, at most about once a minute. The names you gave your fish and your tanks are not uploaded.
Friends	Friend requests you sent or received, and your friends list
Likes and glass cleanings	The ones you gave and the ones you received: who, whose tank and which day
Blocks	The players you blocked
Reports	Reports you file about another player: who filed it, the reported player with their player ID and display name as they were at that moment, the reason (offensive name, harassment, cheating, spam or other), an optional note of up to 500 characters, the date, and our review status
Inbox	The last 100 events for you: a friend request arrived or was accepted, someone liked your tank or cleaned your glass
Daily counters	How many friend requests, likes, rewarded glass cleanings, reports and name changes you made today, so that the server can apply its daily limits. A day is counted in UTC, and the counters are deleted after 7 days.
Rules accepted	The date you accepted the Friends rules
Push notification token	Only if the Notifications switch in the game's Settings is on and you have already allowed notifications for Fishburg (in iOS, or in Android): a push token for your device (an Expo push token, which the game gets through Expo from Apple's push service on iPhone and iPad, or from Google's Firebase Cloud Messaging on Android), at most 5 device tokens per account. To issue the token, Expo receives your device's Apple push token (on Android, its Firebase Cloud Messaging registration token) and a random installation ID that Expo's notification library creates for Fishburg on your device; we do not store that installation ID. On Android, Google's Firebase Installations service also creates a Firebase installation ID for Fishburg on the phone, which Firebase Cloud Messaging uses to deliver messages to it; we do not store that ID either. We use the push token to send you the notifications about friends described under Notifications. A token is removed when you switch Notifications off in the game on that device, when Apple, Google or Expo reports that the device is no longer registered, and with the account.
Notifications sent	When each notification about friends was sent to you and how many events it covered, so that the server can keep the gap between notifications and the daily limit. These entries are deleted after 2 days.

This tank copy for your friends is separate from the backup copy of your game (see The backup copy on our server): it leaves the names out, and it is not used to restore a game.

A friend can change one thing in your game: when a friend cleans your glass, the server notes when it happened, and your game then wipes the glass clean on your device. The friend gets a small coin reward in their own game. You get no coins for it, and a friend can change nothing else.

Who can see it

Your display name, player ID and level can be seen by anyone who enters your player ID in the game.
The copy of your tanks can be seen only by friends you have accepted.
Players you have blocked see nothing of yours.
Reports are seen only by us.

There is no chat and there are no messages. The only text that other players can read from you is your display name.

What we use it for

We use this data only to run the friends feature and to keep it safe (for example, to review reports and remove offensive names). We do not use it for advertising or tracking, we do not sell it, and we share it with nobody except the providers named below: the hosting provider and, for notifications about friends, the push services.

Who stores it

The data, and the backup copy of your game, is stored by Supabase (Supabase, Inc.), which hosts the database and the sign-in for us and acts only on our instructions (as our "data processor"). The database is in Supabase's Central EU region in Frankfurt, Germany (Amazon Web Services region eu-central-1). Like any web server, Supabase's servers also see your IP address in ordinary request logs when the game talks to them, and the sign-in service uses it to limit how many new accounts can be created from one address in an hour. See the Supabase Privacy Policy and the Supabase Data Processing Addendum.

Notifications about friends are sent by our server to the push service of Expo (650 Industries, Inc., United States). On iPhone and iPad, Expo passes them to the Apple Push Notification service, and Apple delivers them to your device. On Android, Expo passes them to Google Firebase Cloud Messaging (FCM), and Google delivers them to your phone. For this, Expo and Apple or Google receive your device's push token and the text of the notification, which contains the display name of the other player (a notification that groups several events gives only their number). Fishburg's Firebase project is used only for this delivery: Google Analytics for Firebase is off and Crashlytics is not used. See the Expo Privacy Policy and Privacy and Security in Firebase.

Deleting your social account

In the game, open Settings → About → Delete social account. This removes the account from the server at once, together with everything listed above, the backup copy of your game and the sign-in, and the game deletes the secret key from your device (the iOS Keychain, or the app's files on Android). Your game on the device is not touched, but it can then no longer be brought back after a reinstall or on a new device. Things to know:

Reports. Reports are the one thing that outlives the account, for safety review. A report that another player filed about you loses its link to your account and keeps only your player ID and display name as plain text. A report that you filed loses its link to you. We review reports, and every report is deleted 12 months after it was filed.
No new account. After deletion the game stays signed out, no new account is created and no backup copy is made. If you later open Friends and choose to join again, you get a brand-new anonymous account with a new player ID, and the backup copy starts again with it.

If you can no longer open the app, email fishburg.sandbox@outlook.com from any address with your player ID and we will delete the account, including the backup copy of your game, for you, and answer you, within 30 days. The steps, and what is deleted and kept, are also on a separate page: Delete your account.

Reports and moderation

You can report a player whose player ID you have (a friend, or someone who sent you a friend request) from inside the game, once per player per day, and you can block players. We review reports ourselves. We remove offensive names and delete the accounts of abusive players (which also deletes their backup copy), and we aim to act within 24 hours of a report. The rules are in the Terms of Use.

4. Ads by Google AdMob and its partners

Fishburg is free to play and is funded by ads. Fishburg shows ads from Google AdMob (the Google Mobile Ads SDK): rewarded videos that you choose to watch (for example, to revive a fish or to collect the Free Gift), and an occasional full-screen ad after a level-up. There are no banner ads. Ads in Fishburg are limited to content rated PG (Google's "parental guidance" rating). Fishburg is not directed at children.

Ad partners through AdMob mediation

From version 1.0.1, Fishburg still asks Google AdMob for every ad, and through AdMob mediation these ad networks can also bid to show that ad, using their own SDKs, which are part of the app:

Unity Ads (Unity Technologies): privacy policy
Liftoff Monetize (Liftoff Mobile, Inc., formerly Vungle): privacy policy

They follow the same choices as Google. In the EEA, the UK and Switzerland they read your answers in the consent form. In every case in which Fishburg asks Google for non-personalised ads (see below), Fishburg also tells Unity Ads and Liftoff that your data may not be used for personalised ads. On iPhone and iPad, unless you chose "Allow" in the tracking prompt, iOS gives none of them your advertising identifier. Their SDKs collect the same kinds of device and usage data as Google's (see What the ads SDKs collect) and send it directly to them, not to us. Unity's own disclosures also list an identifier that the Unity Ads SDK creates for the app, information about in-app purchases, other usage data and device details such as language, make, model, screen and connection type, for advertising and analytics; Fishburg's store privacy labels include them. The ads themselves are still limited to content suitable for the game's audience: Unity Ads is set not to show ads rated 13+ in Fishburg.

When you first open Fishburg, Google's consent tool asks for your choices: in the EEA, the UK and Switzerland, a consent form; on iPhone and iPad, everywhere, also Apple's App Tracking Transparency prompt (after a short explanation). Android has no tracking prompt. Ads are loaded only after this step. The details are under Your privacy choices.

Personalised ads, only if you agreed

You get personalised ads only if you agreed:

iPhone and iPad: you chose "Allow" in Apple's tracking prompt and, if you are in the EEA, the UK or Switzerland, you also agreed to personalised ads in the consent form.
Android: you are in the EEA, the UK or Switzerland and you agreed to personalised ads in the consent form. Everywhere else, the Android version always asks Google for non-personalised ads.

With personalised ads, Google may use your device's advertising identifier (the IDFA on iPhone and iPad, the Android advertising ID on Android) and information about the ads you see and how you use the app to show ads based on your interests and to measure them, also across other companies' apps and websites. Apple calls this "tracking", which is why we ask first.

Non-personalised ads in every other case

In every other case Fishburg asks Google for non-personalised ads only: on iPhone and iPad when you chose "Ask App Not to Track", have not answered, tracking is restricted on your device, or you refused personalised ads in the consent form; on Android when you are outside the EEA, the UK and Switzerland, or you did not agree to personalised ads in the consent form.

Non-personalised ads are not based on your past behaviour, but Google still uses some data to deliver them: your IP address for approximate (city-level) location and to prevent fraud and invalid activity; device or app-specific identifiers to limit how often you see the same ad and for aggregated ad reporting; the ads shown to you and your taps on them; and crash and performance data. Without your permission in the tracking prompt, iOS does not give the advertising identifier to Fishburg or Google. On Android, the identifiers used for non-personalised ads are the Android advertising ID (unless you have deleted it, see Your privacy choices) and the app set ID.

In the EEA, the UK and Switzerland, if you do not consent, Google may show "limited ads" that use no data for personalisation.

Fishburg never reads your advertising identifier itself and never gives Google, Unity Ads or Liftoff your Fishburg account or player ID.

What the ads SDKs collect

According to Google's own disclosures (for iOS and for Android), Google's Mobile Ads SDK in the app collects the following. The table says where personalised and non-personalised ads differ. The Unity Ads and Liftoff SDKs collect the same kinds of data for the same purposes, as described in their privacy policies linked above.

Data	Examples	Used for
Device identifiers	iPhone and iPad: your device's advertising identifier (IDFA), only if you chose "Allow" in the tracking prompt; otherwise identifiers limited to this app or developer. Android: the Android advertising ID (unless you deleted it in Android's settings) and the app set ID	Showing and measuring ads, limiting how often you see the same ad, aggregated reporting and analytics; with personalised ads also ads based on your interests
Approximate location	Estimated from your IP address (city or region level, never GPS)	Showing ads suitable for your region, preventing fraud and invalid activity, analytics
Advertising data	Which ads you have seen	Delivering and measuring ads, limiting how often you see the same ad, ad reporting
Product interaction	App launches, taps, ad video views	Delivering ads and improving their performance, analytics
Diagnostics	Crash logs, performance data such as launch time or hang rate, and other diagnostic data	Fixing and improving the ads SDK, advertising and analytics

Google's consent tool (the User Messaging Platform) also uses your approximate location and basic device data to decide which privacy messages apply where you live, and it stores your choices on your device.

Fishburg's privacy label on the App Store lists the device ID as "used to track you", because it is used for personalised ads when you allow it. It lists the other ad data above as "linked to you", except crash logs and other diagnostic data, because Google can connect it to your device's identifiers. It also names "Developer's Advertising or Marketing" as a purpose, because Google declares that purpose for its SDK; we run no advertising or marketing of our own.

This data goes directly to Google (and, for their SDKs, to Unity and Liftoff), not to us. We only see anonymous, combined reports (for example, how many ads were shown). We only work with partners that protect user data at least as well as this policy describes. How Google uses this data: https://policies.google.com/technologies/partner-sites and Google's Privacy Policy https://policies.google.com/privacy.

5. Your privacy choices

Before any ad loads, Google's consent tool shows the privacy messages that apply to you:

Consent form (EEA, UK and Switzerland). You can agree to or refuse personalised ads and the use of your device's storage and identifiers. The form has a "Do not consent" button. If you refuse personalised ads, Fishburg asks Google for non-personalised ads only; if you do not consent, Google may show "limited ads" that use no data for personalisation.
Tracking prompt (iPhone and iPad, everywhere). Google first shows a short message explaining why we ask (in the EEA, the UK and Switzerland, the consent form can take its place), and then Apple's App Tracking Transparency prompt asks whether Fishburg may track your activity across other companies' apps and websites. If you choose Allow, ads can be personalised (in the EEA, the UK and Switzerland only if you also agreed in the consent form). If you choose Ask App Not to Track, iOS does not give your advertising identifier (IDFA) to Fishburg or Google, and Fishburg asks for non-personalised ads only.
Android. There is no tracking prompt on Android. In the EEA, the UK and Switzerland the consent form above is your choice; everywhere else the Android version asks Google for non-personalised ads only, and no choice is needed for that.

You can change your choice at any time:

Tracking (iPhone and iPad): iPhone Settings → Privacy & Security → Tracking → Fishburg (on iPad, the same path in iPad Settings). Fishburg checks your tracking choice each time you return to the game, and the next ad follows it. More about tracking permission from Apple.
Android advertising ID: Android Settings → Privacy → Ads (the path differs between phones), where you can reset the ID or delete it. More from Google.
Ad consent, in the EEA, the UK and Switzerland (iPhone, iPad and Android): also Fishburg → Settings → Privacy options, which opens the consent form again.
Google ad personalisation in general: My Ad Center.

The game works the same whatever you choose, and no reward depends on it. You can still play everything and still choose to watch rewarded ads.

6. In-app purchases

Purchases (gem packs, coin packs, the Starter Pack and Remove Ads) are processed entirely by Apple through your Apple Account on iPhone and iPad, and by Google through Google Play Billing and your Google Account on Android. We never receive your name, email, card or other payment details. Apple only tells the app that a purchase succeeded, with a transaction number; Google Play does the same with a purchase token. The game keeps that number or token on your device so that it applies each purchase exactly once. The backup copy of your game (see The backup copy on our server) includes whether you bought Remove Ads and the Starter Pack and the gems and coins in your game, but not the transaction numbers or purchase tokens. Apple handles this data under the Apple Privacy Policy, and Google under the Google Privacy Policy. Refunds are handled by Apple or Google Play. See the Terms of Use for what each purchase includes.

7. Game Center

If you are signed in to Apple's Game Center, Fishburg sends your total XP to a leaderboard and reports achievements (one for each award tier you reach). Your Game Center nickname and score can be seen by other players on the leaderboard, according to your Game Center settings. Apple processes this data under Game Center & Privacy. We don't receive or store your Game Center data outside of what Apple shows on the leaderboard.

Game Center is optional and the game works fully without it. You can sign out at any time in iOS Settings → Game Center.

Game Center exists only on iPhone and iPad. The Android version has no leaderboard and uses no comparable Google service: your awards are shown only in the game, under Awards, and nothing is sent anywhere for them.

Settings → About → Rate Fishburg opens the game's page in the App Store or in the Google Play Store. Settings → About → Share Fishburg opens your device's share sheet with a short text, the store link and, if you have joined Friends, your player ID, so that a friend can add you; you choose whether and where to send it.

Now and then, at a happy moment in the game (for example, after you sell an adult fish or reach level 5) and at most once every 30 days, the game may ask Apple or Google to show their own rating window. Whether it appears, and what you write in it, is handled by Apple or Google under their privacy policies. The game only keeps on your device the date it last asked.

None of these send anything to us.

9. Notifications

Fishburg can remind you when a fish is hungry or about to starve, when an egg has hatched, when the glass needs cleaning and when your Free Gift is ready. These are local notifications: they are scheduled on your device by the game itself, from your save, and nothing is sent to us for them. You get at most three reminders a day and none between 22:00 and 09:00. The game asks for permission at the end of the tutorial (and at most once more later, if a fish has starved; on Android 12 and older, Android allows notifications without asking), and you can turn reminders off, all of them or one kind at a time, in the game settings or in iOS Settings → Notifications → Fishburg. On Android, use Android Settings → Apps → Fishburg → Notifications (the path differs between phones), where the game's notification categories "Aquarium reminders", "Aquarium reminders (silent)" (used when the game's sound is off) and "Friends" can also be turned off one by one.

Notifications about friends are push notifications. If you have joined Friends, the Notifications switch in the game's Settings is on and you have already allowed notifications for Fishburg, the game registers a push token for your device and stores it with your social account on our server (see Stored after you join Friends). The game shows no extra permission prompt for this: it uses the notification permission it already asks for. You then get notifications when you receive a friend request, when a friend request of yours is accepted, when someone likes your tank and when a friend cleans your glass. Our server applies limits like those of the reminders, counted in your local time from your device's time zone (UTC until the server knows it):

none between 22:00 and 09:00; what arrives at night is sent after 09:00 as one notification;
events are gathered for a minute, and after a notification nothing is sent for 30 minutes, so several events become one notification (for example "You have 3 new updates from friends"). A notification therefore arrives a minute or two after the event, not at once;
at most three notifications about friends a day, in addition to the up to three reminders;
an event that could not be sent within 12 hours is not sent any more.

A notification about a single event begins with the other player's display name; a grouped one gives only the number of updates. The text is in the language of your account. Our server sends it to Expo's push service, which passes it to the Apple Push Notification service on iPhone and iPad, or to Google Firebase Cloud Messaging on Android (see Who stores it). The Inbox in Friends shows every event, including those that were not sent as a notification.

To stop notifications about friends on a device, switch off Notifications in the game's Settings (the switch for all reminders; the switches for single kinds of reminder do not affect them). The game then removes that device's push token from our server (if the device is offline, as soon as it is online again), and registers it again when you switch Notifications back on. Turning notifications off in iOS Settings → Notifications → Fishburg, or in Android Settings → Apps → Fishburg → Notifications, also stops them, together with the reminders (on Android you can also turn off only the "Friends" category). Deleting your social account deletes all push tokens.

10. Children and age rating

Fishburg is rated 9+ on the App Store and is not in the Kids category. On Google Play its target audience is 13 and older. On every platform it is a general-audience game, not directed at children under 13, and we do not ask for anyone's age. The friends feature has no chat, no messages and no photos: the only text players can see from each other is a display name, which passes a filter for offensive words, and the account holds no real name, email address or other contact details. If you are a parent and want your child's account removed (with the backup copy of the game), use Settings → About → Delete social account in the game or email us with the player ID. Ads are limited to content rated PG, and they are personalised only if the user agreed (on iPhone and iPad, "Allow" in Apple's tracking prompt and, in the EEA, the UK and Switzerland, also the consent form; on Android, the consent form in the EEA, the UK and Switzerland); in every other case they are non-personalised (see Ads by Google AdMob). If you are a parent and have a question, please contact us.

11. Keeping and deleting data

Your save game stays on your device until you delete the app. Deleting Fishburg removes the save and your settings from the device. A copy may remain in your own iCloud, computer or Android (Google One) backups until those backups are replaced or expire.
The backup copy of your game (only the latest one) and the sign-in for your account are kept on our server until the account is deleted (Settings → About → Delete social account, or by us after a report), and are deleted with it at once. On iPhone and iPad, the secret key in your device's Keychain stays after you delete the app; it is deleted when you delete the account in the game, or when the device is erased. On Android, the key is deleted with the app or when you delete the account in the game; a copy may remain in your Android backup until that backup is replaced or expires.
Your social account and the friends data are kept on the server until you delete the account (Settings → About → Delete social account) or until we close the friends feature. An account is not deleted automatically when you stop playing, because the game can come back to it after a long break; if you want it gone, delete it. Deletion takes effect at once. Reports are deleted 12 months after they were filed; if an account in a report is deleted earlier, the report loses its link to that account, as described under Deleting your social account. The inbox keeps only the last 100 events. Push tokens are deleted with the account, or earlier when you switch Notifications off in the game on that device or when Apple, Google or Expo reports that the device is no longer registered. The record of notifications sent is deleted after 2 days, the daily counters after 7 days. Supabase keeps its request logs (which include IP addresses) for a limited time under its own rules. The steps for deleting the account, also without the app, are on Delete your account.
Emails you send us are kept only as long as we need to answer them, and at most two years.
Google keeps ad data for the periods described in How Google retains data. You can withdraw ad consent at any time (see Your privacy choices).
Apple keeps purchase and Game Center data under its own policy, and Google keeps Google Play purchase data and the Firebase data used for push delivery on Android under its own policies.

12. Why we may use your data (legal bases)

What	GDPR (EEA and UK)	KVKK (Turkey)
The anonymous account, the backup copy of your game and the recovery sign-in	Performance of a contract (providing the game you use and keeping your progress), and our legitimate interest in players not losing their games	Necessary for the performance of a contract (Article 5(2)(c)), and our legitimate interest (Article 5(2)(f))
Friends data, push tokens and the time zone, after you join Friends	Performance of a contract (the feature you joined)	Article 5(2)(c)
Reports, blocks, the name filter, daily limits and request logs	Our legitimate interest in keeping the game and its players safe and preventing abuse	Article 5(2)(f)
Personalised ads	Your consent (the consent form and, on iPhone and iPad, "Allow" in the tracking prompt), which you can withdraw at any time	Your explicit consent (Article 5(1)), which you can withdraw at any time
Non-personalised or limited ads, ad measurement and fraud prevention	Our legitimate interest in funding a free game	Article 5(2)(f)
Answering your emails and requests	Our legitimate interest in helping you, and our legal obligations	Article 5(2)(f), and Article 5(2)(ç) for requests under the law

Withdrawing consent does not affect use that happened before. The game works the same whatever you choose.

13. Your rights and how to use them

Depending on where you live, you have rights over your personal data. For the friends data you can do most things yourself: change your display name in the game, and delete the whole account with Settings → About → Delete social account. For everything else, such as a copy of your data (including the backup copy of your game), a correction or an objection, email fishburg.sandbox@outlook.com:

say what you want us to do, and
include your player ID (FB-XXXX-XXXX, shown on the Friends screen). The account holds no name or email address, so the player ID is the only way we can find it. We may ask you to show it from the game, for example with a screenshot of the Friends screen, so that nobody else can ask for your data.

We answer within 30 days, free of charge. Requests about ad data are best sent to Google, Unity or Liftoff directly (see Ads), but we're happy to help. Purchase and Game Center data are held by Apple or Google.

Turkey (KVKK)

Under Article 11 of Law No. 6698 on the Protection of Personal Data, you can learn whether your data is processed and ask for information about it; learn the purpose and whether it is used for that purpose; learn which third parties in Turkey or abroad it is transferred to; ask for incomplete or wrong data to be corrected, or for data to be deleted under Article 7, and for those third parties to be told; object to a result against you that comes solely from automated processing; and claim compensation for damage from unlawful processing. Apply to us first by email as described above; we answer within 30 days (Article 13). If we refuse, do not answer in time or you find the answer insufficient, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). The legal bases are in the table above. A Turkish version of this policy is available.

EEA and UK (GDPR)

You can ask to access, correct or delete your data, restrict or object to its use (including where we rely on our legitimate interest), and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. The legal bases are in the table above. You can also complain to your local data protection authority.

California (CCPA/CPRA)

We do not sell personal information for money, and we neither sell nor share the friends data. Where the use of your advertising identifier for personalised ads counts as "sharing" under California law, you can opt out by choosing Ask App Not to Track on iPhone and iPad (Fishburg then asks Google for non-personalised ads only) and, where the game offers it, in Settings → About → Privacy options. Whenever Fishburg asks Google for non-personalised ads, it also tells Unity Ads and Liftoff that you opted out. In California the Android version asks Google for non-personalised ads only, and you can also delete the Android advertising ID in Android's settings. You also have the right to know about and delete personal information, and you will not be treated differently for using your rights.

14. This website

These Fishburg pages are part of the developer's website, beydadonmezz.github.io. They use no cookies, no analytics and no trackers, and load nothing from other sites. Until October 2026 they were at beydadonmezz.github.io/fishburg-site/; those old addresses forward here. The website is hosted on GitHub Pages, and GitHub logs visitors' IP addresses for security purposes (see the GitHub Privacy Statement). The Privacy Policy, Terms and Support links in the game open this website in Safari on iPhone and iPad, and in your default browser on Android.

15. International transfers and security

Google, Unity Technologies, Liftoff, Apple and GitHub may process data in countries other than yours, including the United States, using the safeguards described in their privacy policies. Expo (650 Industries, Inc.) is a company in the United States: for notifications about friends it receives your device's push token, the random installation ID described under Stored after you join Friends and the notification text (with another player's display name, or only a number of updates) and passes them on to Apple (iPhone and iPad) or to Google Firebase Cloud Messaging (Android), under the Expo Privacy Policy.

The friends data and the backup copy of your game are stored in Frankfurt, Germany, in a Supabase data centre run on Amazon Web Services (region eu-central-1). It is in the European Union, not in Turkey, and it may be outside the country where you live. Supabase is a company based in the United States, and it and its sub-processors may also handle data in the United States and other countries, for example for support and to operate the service. Supabase's Data Processing Addendum includes the European Commission's standard contractual clauses for such transfers. The connection between the game and the server is encrypted, and other players can read only what is listed under Who can see it.

If you live in Turkey, this means that data described in this policy is transferred abroad: to Germany (Supabase), and to the United States and other countries (Supabase's sub-processors, Expo, Google, Unity Technologies, Liftoff, Apple and GitHub).

On your device, your save is protected by the app sandboxing of iOS or Android and your device's security.

16. Changes to this policy

If our data practices change (for example, if we add a new ad partner or change what the friends feature or the backup copy stores), we will update this page and the "Last updated" date at the top and bottom of it. For significant changes we will also mention it in the app's update notes.

17. Contact

BEYDANUR DONMEZ
Email: fishburg.sandbox@outlook.com