Privacy Policy

Effective date: 3 November 2026 · Version 1.0.0

This policy explains which personal data we process when you play Amiral Battı, why, who we share it with, how long we keep it and how you can use your rights. It is written for players everywhere. Players in Türkiye can also read the Turkish KVKK notice (KVKK Aydınlatma Metni).

Amiral Battı and our other game, Tabula Domino, use the same account system. If you sign in to both with the same linked account (for example Google), you have one account: your account, profile, friends and any sanctions are shared, while your Akçe balance, Bazaar items, ad-free pack and Club membership are separate in each game. This policy describes Amiral Battı; everything about the shared account is the same for both games.

Some features of the shared account exist only in Tabula Domino, not in Amiral Battı: changing your display name, uploading a profile photo or picking an avatar, the online visibility setting, choosing kinds of notification, seeing your open sessions and the in-app support form. Tabula Domino's privacy policy describes them. In Amiral Battı, support is by email only (section 3.5).

1. In short

• To play, we do not ask for your email address, phone number or real name. Your account starts with a display name given automatically (such as "Player #K7M2").
• If you sign in with Google, we may put the name and profile photo of your Google account on your profile once: the name only if you still have the name given automatically, the photo only if you have no photo yet (section 3.1). Amiral Battı has no screen for changing them; you can ask at privacy@tabulastudios.com to have them changed or removed. We still do not take your email address.
• We process the data needed to run the game: your matches, moves, results and rating.
• We do not sell your personal data.
• In-app analytics and personalised ads run only if you allow them. You can withdraw your permission at any time. If you say no, the game works just the same.
• Crash reports (Android only, for now) are on by default; you can turn them off at any time with the Settings → Privacy → "Crash reports" switch.
• If you are 13 to 17, the game runs in protected mode: no personalised ads, no analytics, no crash reports and no announcement notifications; the name and photo of your Google account are not taken.
• Our servers are in the European Union: in Finland (production) and in Germany (test environment).
• You can delete your account from inside the app (Settings → Account → Delete account). If you change your mind within 14 days, the deletion is cancelled.

2. Controller and contact

Once a representative has been appointed, players in the EU or the UK will also be able to write to them, and they will pass the request on to us. Until then, we answer every request ourselves.

3. What data we process

The tables below say what the data is and why we need it. Legal bases are in section 5 and retention periods in section 9.

Your display name, age information and game data are needed for the Service itself; you cannot play without them. Analytics and personalised ads are optional: they run only if you allow them. Crash reports are on by default; you can turn them off at any time (section 3.10).

3.1 Account and profile

Name and photo taken from Google. The first time your account meets Google (sign-in, registration or linking), we do this once only:

• The first name on your Google account (for example "Mustafa"; never your surname) becomes your display name only if you still have the name given automatically (such as "Player #K7M2", never changed). A name you chose yourself is never replaced. The name goes through the same rules as any name (2 to 20 characters, blocked words); if it does not pass, your account keeps its name.
• Your Google account's photo becomes your profile photo only if your account has no profile photo yet. Our server downloads the photo from Google once, re-encodes it (two small copies, all metadata removed) and runs the same automated check as for any uploaded photo; other players see it only once it is approved.
• Amiral Battı has no screen for changing your name or photo; you can ask at privacy@tabulastudios.com to have your name changed or your photo removed. We do not take them from Google again.
• If you are 13 to 17 (protected mode), the name and photo of your Google account are not taken: your name stays the one given automatically.
• We never read your email address. Apple's sign-in token carries no name.

Other players see this name like any display name; they see the photo only in Tabula Domino (section 7). The name is kept in your name history like any other name; both are deleted with your account like any name and photo.

The country estimate uses DB-IP's "IP to Country Lite" database (db-ip.com) under the Creative Commons Attribution 4.0 licence. The estimate may be wrong (for example when you use a VPN).

3.2 The game

Where your ships are is kept only on the server; your opponent sees a ship of yours only once it is sunk, and your whole fleet only when the battle ends.

3.3 Matchmaking and fair play

3.4 Social features

3.5 Support, reports and moderation

Amiral Battı has no support form: support and appeals are by email. The "Support by e-mail" row opens your phone's email app; you send the email yourself, and the app sends nothing on its own. Please do not put passwords, card numbers or other personal details you do not need to share in your email.

3.6 Notifications

We only receive a notification address if you allow notifications on your device. A notification comes only while you are away from the game: when an opponent is found, your table is ready, it is your turn, your table wants a rematch or a friend invites you to their table. Turn, invitation and announcement notifications do not come during your quiet hours. A notification carries nobody's name: an invitation says "A friend is inviting you to their table", and you see who when you open the app. On Android 13 and later and on iPhone, we ask for notification permission only when you tap the Settings → Notifications row; you can turn notifications off there or in your phone's settings at any time. Amiral Battı does not let you choose kinds of notification one by one. If you are 18 or older, a calm reminder may also come now and then; if you are 13 to 17, no reminders come.

3.7 Virtual currency and purchases

Your payment is taken by the App Store or Google Play. We never receive your card or bank details.

Your Akçe Bazaar items are game data of your account. They are handled under our existing account and game-data purposes, with no new recipients and no new countries, and are not used for profiling or ads. They are included in the file from Settings → Account → "Copy of my data". Akçe spent in the Bazaar also appears in the virtual currency movements. Amiral Battı has no weekly goals.

3.8 Ads

Ads are served by Google AdMob: an interstitial shown between matches, limited in how often it appears, rewarded ads that you watch only if you choose to, and one small banner on the quick-play waiting screen. The interstitial appears at most once every 3 finished matches, at least 4 minutes apart and at most 10 a day. It is never shown before your second finished match on this device or during your first 3 days of playing on this device, nor within 10 minutes after you watched a rewarded ad, nor right after a match you lost. At lobby tables it appears only when you get up from the table, not between games at the same table. No ads are shown during a match or when the app opens. A banner ad can appear in one place only: one small (320×50) banner at the bottom of the waiting screen while quick play looks for an opponent. There is no banner on the fleet placement, battle or match result screens, or on any other screen. Amiral Battı's Ad-free Pack and Amiral Club membership remove the ads between matches and the banner on the waiting screen; an ad-free pack or Club membership bought in Tabula Domino does not count in Amiral Battı.

AdMob processes your device's advertising ID, IP address and ad interactions to show ads, limit how often you see them and prevent fraud. Your advertising ID is used for personalised ads only if you allow it (section 5 and "Ad Choices and Permissions"). If you do not, you still see ads, but they are not personalised. In countries where you are not asked (Türkiye included), ads are for now always non-personalised. To verify the reward of a rewarded ad, AdMob is sent only a random, single-use reward number created for that one reward; it is not your player number and does not identify you. Your player number is not sent to AdMob. Your advertising ID never reaches our servers or our analytics.

3.9 Product analytics

Your name, email, IP address, advertising ID, precise location, any text you write and the positions of your ships are never included in analytics.

On Android, with the same permission, Google Analytics for Firebase (Google LLC, processor) also measures how the app is used: automatic events such as the app opening and session and engagement time, device model, operating system and app version, a random number for the installation, and a coarse location (country, city) derived from the IP address. No advertising ID is collected and none of this is used for ads. If you do not allow it, or withdraw it, nothing is sent to Firebase. Nothing is sent for players aged 13–17.

3.10 Crash reports

When the app crashes, a technical report is sent to Google Firebase Crashlytics so we can find the problem: the error trace, device model, operating system and app version, and a random number for the installation. The report does not include your name, your player number, any text you wrote or the positions of your ships. Crash reports are on by default: keeping the app working and fixing crashes is our legitimate interest (section 5). You can turn them off at any time with the Settings → Privacy → "Crash reports" switch; when you do, sending stops and reports waiting on your device are deleted. For now they are sent on Android only, and never for players aged 13–17.

3.11 Technical records

• Access logs in front of our servers: each time you connect, your IP address, the time and path of the request and the app's identification string (User-Agent) are logged for security and fault investigation.
• Application logs and metrics: our servers keep logs to find errors. Logs may include your player number; they do not include your name, your IP address or your session key.
• Rate limiting: to prevent abuse, your IP address is kept in memory only, for the length of the counter's window (at most 1 hour).
• Backups: encrypted backups of our database are kept in a separate store in the EU.

3.12 What stays on your device

Your session key (in your device's secure storage), your language, sound, vibration, motion and one-handed play preferences, the result of the age screen, your ad consent record and similar settings are stored on your device. Details are in "Cookies, Device Storage and Tracking".

4. What we do not collect

Your email address, phone number, postal address, precise location (GPS), contacts, other photos in your gallery, voice recordings (the app does not ask for microphone access), files, health data or payment card details. There is no free-text chat in the app. We do not process special categories of personal data (such as health, religion, ethnic origin or biometric data), and we do not use facial recognition on photos.

We do not ask for your real name. However, if you sign in with Google, Google's sign-in token carries your Google account's name, which may be your real name. We use it only as described in section 3.1.

5. Purposes and legal bases

Our legitimate interests are: keeping the game fair and safe; protecting players from harassment, inappropriate content and cheating; measuring how much and how well the Service works; keeping the app working and fixing crashes; funding a free game with ads; telling you about new features; and being ready for legal claims. You can object to this processing (section 10).

6. Ages 13 to 17: protected mode

If you are 13 to 17 (in India, if you are under 18), the game runs in protected mode:

• only non-personalised ads are shown, and the ad network is told that you are a minor;
• we do not ask for analytics permission; neither analytics nor crash reports are sent;
• the name and photo of your Google account are not taken;
• reminder and announcement notifications are not sent;
• your name is moderated more strictly;
• when you tap to buy the ad-free pack or the Amiral Club, a calm information page is shown before the store opens: what you are buying, that it is optional, that it is paid with real money and that you may talk to a parent or guardian first ("Continue" or "Not now").

Protected mode turns off by itself at the end of the year in which you turn 18; if we then ask for analytics or personalised-ad permission, the choice is yours. If Google Play tells us a parent supervises your account (for example with Family Link), protected mode stays on whatever your age; if that is a mistake, you can write to support@tabulastudios.com to have it corrected. Details are in "Age Policy and Child Safety".

7. What other players see

• Players at your table: your display name, the Bazaar items you wear, your shots in the match (not where your ships are: a ship is revealed when it is sunk, your fleet when the battle ends), the result and score, and the quick messages you send.
• Everyone: your name and rank in the league and rankings. Amiral Battı shows no profile photos; players in Tabula Domino see your shared account's name and, if there is one, its photo there.
• Your friends: whether you are online or at a table (Amiral Battı has no setting to turn this off).
• Anyone who knows your player tag: can send you a friend request.
• When you report or block a player, they are not told.

8. Who we share data with

We do not sell your personal data. We share it only with the recipients below, for the stated purposes.

We sign contracts with our processors requiring them to process your data only on our instructions and with the same or equivalent protection as this policy.

International transfers.

• Data of players in Türkiye is transferred to our servers in Finland (production) and Germany (test environment) and to our service providers. For these transfers out of Türkiye, we have submitted to each recipient for signature the standard contract of the Turkish Personal Data Protection Board provided for in Article 9 of the KVKK. Hetzner, Cloudflare and Brevo did not sign it; these recipients process the data under their own data processing agreements (including, where applicable, the EU standard contractual clauses) and the technical and organisational security measures they apply (encryption in transit, access restriction). With Google, we are assessing the application route for signing the Board's standard contract. We will update this section when the situation changes.
• Data of players in the EU and the UK is hosted in the EU. Transfers to providers in the USA rely on the EU–US Data Privacy Framework certification and/or the European Commission's standard contractual clauses (with the UK addendum for UK data).
• We apply the same contractual safeguards for players in other countries.
• Player connections (including api.tabulastudios.com) are routed through Cloudflare's global edge network; the origin servers remain with Hetzner in the EU (Finland for production, Germany for the test environment), where the data is stored. In doing so Cloudflare processes the IP address and request metadata. This transfer relies on Cloudflare's Data Processing Addendum (DPA) and the EU standard contractual clauses.

You can ask for a copy of these safeguards at privacy@tabulastudios.com.

9. How long we keep data

Retention periods are set in our server configuration and applied automatically by scheduled jobs. When a period ends, data is either deleted or kept under a pseudonym: your name and linked accounts are removed and the record stays only with a random player number. Pseudonymised records are still personal data, and this policy still applies to them.

10. Your rights

Wherever you live, we give you these rights:

• to see your data and get a copy (in the app: Settings → Account → Copy of my data; on Android it is saved to your Downloads folder, on iPhone the share sheet opens);
• to have wrong data corrected (Amiral Battı has no screen for changing your name; write to privacy@tabulastudios.com);
• to have your data erased (section 11);
• to restrict processing;
• to receive your data in a portable file;
• to object to processing based on our legitimate interests;
• to withdraw a permission at any time (Settings → Privacy). Withdrawal does not make earlier processing unlawful;
• to contest a decision based solely on automated processing that significantly affects you (section 12);
• to complain to a data protection authority.

Your right to object. You can always object, on grounds relating to your particular situation, to processing based on our legitimate interests. We will stop unless we have compelling grounds that override your interests or need the data for a legal claim. To object to announcement notifications, simply turn notifications off in Settings → Notifications or in your phone's settings; for crash reports, simply turn off the Settings → Privacy → "Crash reports" switch.

How to make a request. Write to privacy@tabulastudios.com; the Settings → Help → "Support by e-mail" row in the app also opens an email to support@tabulastudios.com. Amiral Battı has no request form. Because we do not know your email address, we confirm your identity with your player tag and, if needed, a check through your linked account. We answer within 30 days, free of charge. If a request is complex and the law allows, we may extend this period and tell you why.

Information for your region:

• Türkiye: your rights under Article 11 of the KVKK are set out in the KVKK notice. If you find our answer insufficient, you can complain to the Personal Data Protection Board.
• EU, EEA and Switzerland: you can complain to the data protection authority where you live, work or where the infringement took place.
• United Kingdom: you can complain to the Information Commissioner's Office (ICO).
• US states (California and states with similar laws): you have the right to know, delete and correct, and to opt out of the "sale or sharing" of personal information. We do not sell your data for money. However, personalised advertising counts as "sharing" under some state laws; you can stop it in the app under Settings → "Ad choices" (Google's consent form). We will not treat you differently for using your rights. We do not process sensitive personal information. You may also make a request through an authorised agent.
• Brazil: you have the rights in Article 18 of the LGPD (confirmation, access, correction, anonymisation, deletion, portability, information about sharing, withdrawal of consent). You can complain to the Autoridade Nacional de Proteção de Dados (ANPD).
• Other countries: you can use the rights your local law gives you in the same way.

11. Deleting your account

• You can delete your account in Settings → Account → Delete account. The account is shared by both games: your accounts in Amiral Battı and in Tabula Domino are deleted together. If you cannot reach the app, use the route on the "Deleting Your Account" page: tabulastudios.com/amiral/delete-account.
• After the request your account is frozen for 14 days: you cannot play and your name no longer shows in friends lists. During this time the app shows the "Your account is about to be deleted" screen, and you can cancel with "Cancel the deletion". The app does not sign you out. When the time ends, the deletion happens automatically.
• Deleted: your display name (including its copies in match records), name history, birth year, profile photo, avatar, player tag, linked accounts, sessions, country, notification records and preferences, friendships, requests, blocks, invites, quick message logs, matchmaking records, Akçe Bazaar items and analytics consent records. If you signed in with Apple, your Apple link is revoked too.
• Kept under a pseudonym (without your name or account links, only with a random number): match records and move logs (these are also other players' records), statistics and rating totals, sanction and staff action records, virtual currency movements and purchase records. Their periods are in section 9.
• Your analytics events remain, unlinked from you.
• A report made about you stays until the end of its retention period; your player number in it is replaced with a new number that cannot be traced back to you.
• Deleted data disappears from backups when they expire (at most 16 days).

12. Automated decisions

• Matchmaking: the system picks your opponents automatically, based on your rating.
• Short matchmaking waits: if you cancel many searches in a short time or do not show up for a match, the system may keep you out of matchmaking for a few minutes. This is not an account sanction.
• Name and photo filters: a name that seems to break the rules may be refused automatically; a new photo may be refused automatically, or shown only to you until someone from our team has looked at it. You can challenge these decisions by writing to support@tabulastudios.com (in the app: Settings → Help); a person reviews your challenge.
• Account sanctions are always decided by a person.

These automated steps do not produce legal effects or similarly significant effects on you; you can still challenge them.

13. Security

• All traffic between the app and our servers is encrypted (TLS).
• Your session key is in your device's secure storage; only a hash of it is kept on our servers. We do not use passwords.
• Identity data is kept in a separate part of the database; other parts only know your random player number.
• Backups are encrypted and kept in the EU, in a store separate from the server.
• Our staff access data only when their work requires it, and every action is logged.

No system is completely secure. If a data breach occurs, we notify the competent authority within the legal deadlines (for example 72 hours under the GDPR and the KVKK) and, where required, we notify you.

14. Changes and languages

We may update this policy. Each version has a number and an effective date. We announce material changes in the app in advance. If processing based on your permission changes materially, we ask for your permission again. This policy is published in several languages; if the versions differ, the reading more favourable to you applies.

15. Contact

For any privacy question: privacy@tabulastudios.com · BumuStudios, an independent developer (no postal address is published yet) · in the app: Settings → Help → "Support by e-mail" (support@tabulastudios.com). Our EU and UK representatives have not been appointed yet (section 2); until then, write to privacy@tabulastudios.com.

Back to top ↑