Publisher and data controller: DILARA ECE KAMAN, a sole proprietorship operating under the Puglia Studio brand.
Privacy and support contact: app@pugliastudio.com.
This policy explains the data processed in the EraPop iOS and Android apps, how it is used and your privacy choices.
Account and game data
A guest game profile is created when you connect to the online service. The server stores an account identifier, display name, player code, session authentication records, XP and ranking points, friend connections, completed game results and records of recently shown questions.
We use this information to identify your account, run games, verify scores, display rankings and reduce repeated questions. Your display name and game scores may be visible to opponents and people viewing rankings. You do not need to use your real name as your display name.
If you choose to link your account with Apple, the verified account identifier supplied by Apple is associated with your game profile. Account recovery does not require an email address. A cryptographic hash of a single-use recovery code is stored rather than the code itself. Using a recovery code revokes previous account sessions.
Information stored on your device
Offline progress, some game records, your avatar, language and app preferences, and reminder settings are stored on your device. Mobile session secrets use the operating system’s secure storage. Recovery codes do not transfer offline progress or device preferences to another device.
Advertising and Google services
Mobile versions with advertising enabled use Google AdMob and the User Messaging Platform. The app requests non-personalized ads. These ads can still involve data processing.
Depending on the enabled SDK, permissions and configuration, Google may process your IP address and approximate location inferred from it, device or advertising identifiers, ad and app interactions, diagnostics and performance data, and consent choices for ad delivery, measurement, analytics and abuse prevention. EraPop does not request precise location permission for gameplay.
Consent and advertising privacy choices are offered where required for your region and configuration. Ad requests are managed according to consent status. Read how Google uses data from partner apps and the Google Privacy Policy for more information.
Local network and notifications
If you choose nearby room discovery or room sharing, visible rooms on the same Wi-Fi network can be discovered. Sharing broadcasts the room code, player display name, category, expiry and technical compatibility information to devices on that network. Session secrets and recovery codes are not broadcast. Sharing stops when disabled, a match starts, you leave the relevant screen, the app enters the background or sharing expires. Joining still requires internet access.
If you enable reminders, notifications are scheduled locally on your device. No push notification token is sent to the server for this feature. You can manage notification and Local Network permissions in your device settings.
Gameplay does not require access to your camera, microphone, photo library or contacts.
Service providers and security
The online game server is hosted on Oracle Cloud infrastructure in Frankfurt, Germany. Online requests use HTTPS. IP addresses may be used for short-term request limiting to prevent abuse. Hosting and email providers may process technical records or data sent to them when providing their services.
Apple may process data for optional account linking. Google may process data for advertising and consent services in versions with ads enabled. Using the server and third-party services may involve processing outside your country. Provider data processing terms and applicable law apply to that processing. External source and photo credit links are governed by the privacy policies of the sites you visit.
Support messages
When you email us, we process your email address, message and any technical details you voluntarily include to answer and follow up on your request. Correspondence may be kept for as long as needed to resolve the request, address related disputes and meet applicable recordkeeping obligations. Do not send unnecessary personal information or recovery codes.
How long is data kept?
Account and related game records are kept while your account remains in the service. Simply stopping use of the app does not automatically erase these records. Deleting your account initiates removal from the active system.
Daily rotating database backups are maintained. Under the current configuration, aged backups are removed by daily cleanup; deleted records may remain in earlier backups for approximately 7–9 days through the normal backup cycle. If a backup must be restored, you can contact support to have deletion requests reapplied.
Information stored on a device can be removed through in-app deletion or the operating system’s app data removal options. Advertising service records and technical provider records are subject to the relevant providers’ retention conditions.
Account deletion and records that may remain
You can delete your account and progress in the account and data section of Profile and confirm the action. The English interface calls this option “DELETE ACCOUNT & PROGRESS”. This removes your server account, sessions, friend connections, your own match history and recovery records, and resets progress on that device.
An earlier opponent’s own match record may retain your former display name as an opponent label for as long as that player’s match history is retained. Contact support if you also want this label removed. Copies in technical backups follow the backup cycle described above.
Uninstalling the app does not delete your server account. If you cannot access the app, initiate an email request from the account deletion page. Account ownership may need to be verified. A web request does not remotely erase local data on other devices.
Your privacy rights
Depending on applicable law, you may have rights to learn whether your data is processed, access it, correct inaccurate information, request deletion, object to processing and withdraw consent for processing based on consent. Where applicable, you may also have rights to data portability and to contact a relevant supervisory authority.
Send requests to app@pugliastudio.com. We assess requests after verifying account ownership and within applicable legal time limits. See Privacy choices to manage advertising consent, notifications and Local Network permissions.
Requests concerning children
If you believe your child’s data is being processed through EraPop, contact support. We may ask for information needed to identify the account and assess your request. Do not email a child’s recovery code or unnecessary personal information.
AI-assisted preparation
AI-assisted tools have been used in EraPop’s development, design and translation processes. Translations are bundled with the app; this translation feature does not call a translation service during gameplay. Report question or translation errors to support.
Changes
We may update this policy to reflect changes to the app or data processing. The current policy is published on this page. Additional notice or consent will be provided where required.