TopiaLand Privacy Policy
Türkçe: Gizlilik Politikası ve KVKK Aydınlatma Metni
This policy explains what personal data we collect when you play TopiaLand, why we collect it, who we share it with, and what rights you have. We have tried to keep it short and in plain language.
1. Who we are
TopiaLand is developed and operated by Conqity, an independent game developer based in Türkiye ("we", "us"). For the purposes of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR"), Conqity is the data controller for the personal data described in this policy.
Contact: support@conqity.com. The full legal identity and postal address of the data controller are available on request at the same address.
2. What data we collect
2.1 Account data
- Platform IDs: your Steam ID when you sign in with Steam; on mobile, your Google account identifier (and in the future your Apple account identifier). We receive only an identifier from these platforms, never your platform password.
- Username you choose in the game and your in-game account number.
- Linked platforms: if you link your PC and mobile accounts into one TopiaLand account, we record which platform accounts are linked.
2.2 Technical data
- IP address, used to connect you to our servers, for security, rate limiting and to prevent abuse.
- Game version and platform (for example PC or Android).
- Session tokens: temporary keys that keep you signed in. They expire automatically.
2.3 Game data
- Inventory, in-game currencies (Coins, Gems), level and XP, and quest progress.
- Lands you own and the blocks placed in them.
- Trade and marketplace records (what was traded or sold, between which accounts, and when).
- Reputation score, calculated from your play time and any rule violations.
- Moderation records, such as warnings, chat restrictions and bans, including bans set by land owners inside their lands.
2.4 Chat
Messages you send in land chat and global chat. All messages pass through an automatic profanity filter. Violations are recorded and can affect your reputation score. We may review chat messages when a player is reported or when we investigate abuse.
2.5 Purchases
Real-money purchases are processed by Steam, Google Play or the App Store. We never see or store your card or bank details. We only receive and keep a record of the purchase: what was bought, when, and the platform transaction reference, so that we can deliver the item and handle refunds and fraud.
2.6 Support messages
If you contact us, we keep your email address and the content of your messages so that we can answer you.
3. What we do not collect
We do not collect your advertising ID, location, contacts, microphone or camera data. There are no ads in TopiaLand. We do not use third-party analytics, advertising or tracking SDKs, and we do not sell or rent your personal data to anyone.
4. Why we use your data (and the legal basis)
Data protection law requires us to tell you the legal reason for each use. Under the GDPR these are Article 6(1)(b) (contract), 6(1)(c) (legal obligation) and 6(1)(f) (legitimate interests); under KVKK the corresponding grounds are in Article 5(2).
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating and running your account, signing you in, linking platforms | Account data, session tokens | Performance of our contract with you (the Terms of Service) |
| Saving your progress and providing multiplayer gameplay | Game data, IP address, game version | Performance of contract |
| Delivering purchases, handling refunds and payment fraud | Purchase records, account data | Performance of contract; legal obligation (accounting and tax records) |
| Detecting cheating, bots, exploits and multi-account abuse; protecting our servers | IP address, game data, trade and market records | Legitimate interest in keeping the game fair and secure |
| Chat filtering and moderation, handling player reports and appeals | Chat messages, moderation records, reputation score | Legitimate interest in keeping players safe; performance of contract |
| Answering support requests and data protection requests | Email, support messages, account data | Performance of contract; legal obligation |
| Complying with the law and responding to lawful requests from authorities | Any data relevant to the request | Legal obligation |
Where we rely on legitimate interests, we have balanced them against your rights. You can object at any time (see Your rights).
5. Who we share it with
- Valve (Steam): sign-in and payment processing on PC.
- Google and Apple: sign-in and payment processing on mobile.
- Our server hosting provider: stores and processes game data on our behalf. Our game servers are currently located in Türkiye.
- Cloudflare: hosts this website and handles our support email forwarding.
- Authorities: only when we are legally required to, or to protect the rights and safety of players or others.
Other players can see your username, level, the lands you own and the messages you send in chat. We do not share your data with anyone else.
6. International transfers
Some of the services above (Valve, Google, Apple and Cloudflare) are based in or operate servers in countries outside Türkiye and the European Economic Area, including the United States. When your data is transferred abroad, we rely on the safeguards required by law, such as standard contractual clauses under Article 9 of KVKK and Article 46 of the GDPR, or on the transfer being necessary to provide the service you asked for.
7. How long we keep it
| Data | Kept for |
|---|---|
| Account and game data | Until your account is deleted |
| Chat messages | 90 days, then deleted automatically |
| IP addresses in server logs | 90 days |
| Cheating, fraud and ban records | Up to 12 months after the account is deleted, to stop banned players from simply creating a new account |
| Purchase records | As long as required by Turkish accounting and tax law |
| Support emails | Up to 2 years after the conversation ends |
8. Deleting your account
You can ask us to delete your account and personal data at any time on the account deletion page or by emailing support@conqity.com. We may ask you to confirm that you own the account. We complete deletion within 30 days.
Deletion is permanent. Your lands, items, currencies and progress cannot be restored afterwards. The limited records listed in section 7 (fraud/ban records and purchase records) are kept only for the periods stated there.
9. Your rights
Under KVKK (Article 11) and the GDPR you have the right to:
- find out whether we process your data and get a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to processing based on legitimate interests;
- receive your data in a portable format (data portability);
- learn who we transferred your data to, at home or abroad;
- object to a result that goes against you and comes only from automated processing (for example, an automatic chat restriction) and ask for a human review;
- claim compensation for damage caused by unlawful processing.
To use any of these rights, email support@conqity.com. We will reply within 30 days, free of charge.
You also have the right to complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (KVKK, kvkk.gov.tr); in the EU, the authority in your country of residence.
10. Children
You must be at least 13 years old to create a TopiaLand account. If the age of digital consent in your country is higher (for example 16 in some EU countries), you need permission from a parent or guardian to play.
We do not knowingly collect data from children under 13. If we learn that an account belongs to a child under 13, we will delete it. Parents who think their child has created an account can contact us at support@conqity.com.
11. Security
We use encrypted connections, limit access to personal data to the people who need it to run the game, and do not store passwords (you sign in through Steam, Google or Apple). No system is perfectly secure. If a data breach affects you, we will inform you and the relevant authorities as the law requires.
12. This website
conqity.com does not use tracking or advertising cookies. Cloudflare, which hosts the site, may process your IP address to deliver the pages and protect the site against attacks.
13. Changes to this policy
If we make significant changes, we will update the version number and date above, notify you in the game, and ask you to review and accept the new version the next time you sign in.
14. Contact
Conqity · support@conqity.com