Sapla privacy policy

Last updated: 2026-10-29

This policy explains which data is processed in the game Sapla, developed by Aslan İnteraktif Studios ("we"). Sapla is available in English and Turkish.

In short

Creating an account is optional. If you don't create an account, Sapla collects no personal data about you; your progress stays on your phone. If you create an account, your email address, the player name you choose and your game progress are stored on our server; the leaderboard, profile, friends, online play (Duel and Leap Arena), the weekly challenge and support messages work with it. The game shows optional rewarded ads (see Ads).

If you don't create an account

Your level progress, stars, streak, coins, themes, sound and language settings are stored only on your device and are not sent to us. If your phone's own backup (Google backup / iCloud) is on, this information may be part of your device backup; we cannot access that backup.

If you create an account

Your email address and password: for signing in. Your password is stored encrypted; we cannot see it.
Your player name: shown to your opponents on the leaderboard and in online matches. You don't have to use your real name.
Your game progress: for the cloud save (so it isn't lost if you change phones).
Your Endless scores and the furthest level you reached: shown to everyone on the leaderboard with your player name.
Profile photo (optional): if you add one, it is downsized (256x256), uploaded to our server and shown to everyone next to your name on the leaderboard. You can remove it at any time from the My Account screen. Inappropriate photos can be reported by other players and removed by us. The photo picker only gives the game the picture you select; the rest of your gallery is not accessed.
Leap weekly challenge: your score is shown to everyone on the leaderboard with your player name. To verify the score and prevent cheating, the tap record of the game you played (at which moments you tapped) is sent to our server linked to your account. The tap record of each player's best game of that week is stored on the server and deleted after 6 weeks. The Ghost feature, which you can turn on from the Leap screen (off by default), shows the weekly winner's game — the tap record of a player whose name is already public on the leaderboard — as a faint pin in your game; this record is not used for any other purpose. The record of weekly rewards (coins, themes) is also kept linked to your account.
Applause: you can applaud a player on the leaderboard. Who applauded whom in which week is recorded; the applauded player can see the name of the player who applauded them. Applause can't be sent to or received from players you blocked. These records are deleted when you delete your account.
Messages, coins and badges from the team: our team can send you a personal message, coins or a badge; these records are kept linked to your account, and a badge appears next to your name on the leaderboard.
Online matches: a match record (who played whom, and when) is kept for matchmaking; moves during a match are passed only between the two players and are not stored.
Profile and status: besides your photo and player name you can optionally write a status of up to 60 characters. The text passes an inappropriate-word filter and cannot contain links or email addresses. Your profile card also shows your friend code, unlocked achievements, your records (Sapla, Balance, Leap, Endless) and Arena numbers (matches played, won). In your profile you choose who can see these: everyone, only your friends, or only you. Your player name and photo are visible on the leaderboard regardless of this choice. An inappropriate status can be reported and removed by our team. You can turn off friend requests and lobby invites in your profile.
Friends: you can add friends with your friend code or player name. Who sent a request to whom, who is friends with whom and the request date are recorded. Your friends can see you as online (opened the app in the last 90 seconds); people who are not your friends cannot. Friendship ends with a player you block or who blocks you, and you can't see each other's profiles.
Leap Arena: you play the same course at the same time with real players (and bots, which are clearly marked). You can join a public lobby or create a private room and invite friends. The lobby and race record (your player ID, name, score, rank, whether you are ready) and your tap record in the race are stored on the server and shown to the other players in the game (for example as faint pins during the race). Lobby records are deleted after 30 days. Room invite records are deleted after 7 days. Your friend's notification address is used for your invite.
Weekly Champions: at the end of each week, the player name, photo, score and number of consecutive weeks of the players who came first on some leaderboards are recorded and shown to everyone in the app. A winner's reward (coins) is recorded linked to your account. These records are deleted when you delete your account.
Support messages: if you write to us from the Support screen, your message, the topic you chose, the message time and your platform (iOS or Android) are stored linked to your account; only our team reads and answers them. Messages from our team to you appear in the same place. Don't write personal information (passwords, card details, etc.) in your message. Your messages are deleted when you delete your account.
Notifications: if you allow notifications, a notification address of your phone (Expo Push token), a random device ID, the platform, the app version and the app language (English or Turkish) are stored on our server; they are used to send notifications such as messages from the team, support replies and friend invites in your language. You can turn notifications off in your phone's settings. When you delete your account, the notification address is no longer linked to your account.
Reporting and blocking: if you report a player (inappropriate name, inappropriate photo, harassment, cheating), the reporting account, the reported account, the reason and the date are recorded; they are used only for review and are not shown to the reported person. The list of players you blocked is stored in your account; the blocked person doesn't see it. If a reported or blocked account is deleted, the record is deleted too; if you delete your own account, your blocks are deleted and your reports are no longer linked to you.

From every user (also without an account)

While the app is open, a randomly generated device ID, where you are in the game (menu, Sapla, Endless, online, etc.) and the app version are sent to the server for the "how many people are playing now" count. This ID is not linked to your phone or to any other ID of yours; if you have an account it is matched to your player name. If the app hits an error, a short error text (e.g. which operation failed), the app version, the operating system and the same random device ID are sent to the server; your account, email address or player name are not sent. These records are used only to fix the app and are deleted after 30 days. At what hours and in which mode the game is played, the number of sessions and how sessions end (for example quitting right after losing a level) are also sent as aggregate daily counters; these counters are not linked to your account, name or device ID, and no per-person profile can be built from them. We also send aggregate daily counters, not linked to a person or device, that show how many times a feature was used (e.g. online search, starting Leap, ad result counts), how many discs Leap games ended on, whether the weekly score reached the server, and how many times levels were tried and passed. To keep levels balanced, the times of the shots in a finished Sapla level attempt, measured from the start of the level (e.g. "0.5 s, 1.2 s"), are sent anonymously; this record is not linked to your account, device or identity. Android — ad campaign measurement: if you installed Sapla from Google Play through an ad link, the campaign label (source, campaign name and content name; e.g. "tiktok / october / video-01") is read on first launch from the Install Referrer information provided by Google Play. This label and the fact that the first game started are sent to our server once with the randomly generated device ID; the purpose is to see in aggregate how many installs and games each ad brought. The label is not matched with your account, name, email or advertising ID. If you did not install through an ad link, nothing is sent. This measurement is not done on iOS.

This data is hosted on Supabase infrastructure in the European Union (Frankfurt). It is not sold and not used for advertising; the information you give Google AdMob to show ads is described in the Ads section below.

Where data is processed and your rights

We are based in Türkiye. Your data is stored in the European Union (Frankfurt) and may be accessed by us from Türkiye. Under the laws that apply to you (for example the EU/UK GDPR, Turkish KVKK, the California CCPA/CPRA) you have the right to know whether your data is processed, to access it, to have it corrected or deleted, and to object to or restrict processing. You can delete your account from inside the game, or write to us. We process your data to provide the game you asked for (account, progress, leaderboard, online play, support), on the basis of our legitimate interest to keep the game fair and safe (cheat prevention, reports, error logs, aggregate counters), and on your consent where you give it (notifications, advertising choices). We do not sell your personal data and do not share it for cross-context behavioural advertising. You can also complain to your local data protection authority.

Deleting your account

In the game, you can delete your account at any time with My Account > Delete my account. Your email address, player name, profile photo (the file is also deleted from the server), status, profile card, friendships and requests and invites you sent/received, cloud save, leaderboard scores, match, lobby and race records, support messages, champion records, block list and device records are permanently deleted. The progress on your phone stays.

Sapla can show rewarded ads for optional rewards such as continuing where you left off. You don't have to watch ads; there are ad-free ways to continue (coins). Ads are provided by Google AdMob. To show ads, measure impressions and prevent abuse, Google may process your device's advertising ID (Advertising ID on Android, IDFA on iOS — on iOS only if you allow it), device and app information, your approximate location (from your IP address) and your interaction with the ad. This information is not collected by Sapla and does not reach our servers.

In the European Economic Area, the United Kingdom and similar regions you see a consent form on first launch; on iOS you are also asked whether to allow apps to track you. If you don't consent or you decline the permission, non-personalised ads may be shown or no ads may be shown; the game is played the same way. You can change your choice at any time in Settings > Privacy options (in regions where the form is required); on iOS you can also change the permission in your phone's Settings > Privacy > Tracking. How Google uses data: https://policies.google.com/technologies/partner-sites

Purchases

There are no in-app purchases in this version. If they are added, this policy will be updated beforehand.

Children

Sapla is not directed at children under 13; the profile, friends and online play features are for ages 13 and over. We don't use the child-directed treatment tag in ads and we don't knowingly collect personal data from this age group. If you believe a child under 13 has an account, write to us and we will delete it.

Changes

If we update this policy we change the date at the top of this page and announce important changes in the app.

Contact

Aslan İnteraktif Studios · destek@aslaninteraktif.com