Legal

Privacy Policy

We collect the minimum data we need to ship a great game and keep it working. This page explains exactly what that means in plain language.

Effective: 3 May 2026 Last updated: 3 May 2026 Applies to: nifugames.com & Marvelous Fantasia

1. Who we are

Nifu Games (“Nifu”, “we”, “us”) is an independent mobile games studio operating from Istanbul, Türkiye. This Privacy Policy explains how we handle information when you visit nifugames.com or play our mobile games, including Marvelous Fantasia (the “Game”).

We are the data controller for the personal information described below. Our contact details are at the bottom of this page.

2. Information we collect

We collect only what we need to run the Game and keep it improving.

Information you provide

  • Support requests. When you email us, we keep your message, your email address, and any attachments you send so we can reply.
  • Purchases. When you buy in-app content, Apple processes the payment. We receive a transaction receipt that confirms what was bought, but we never see your full card number, expiry, CVC, or Apple ID password.

Information collected automatically

  • Gameplay data. Levels played, progress, streaks, soft- and hard-currency balances, settings, and similar in-game state. This is needed to save your progress and tune the difficulty.
  • Device information. Device model, operating system version, app version, language, region, and a non-resettable advertising identifier (only when you have allowed tracking — see §5).
  • Crash and diagnostic data. If the Game crashes or hits an error, we collect a stack trace plus the device and app version so we can fix it. We do not look at your personal files.
  • iCloud sync. If you are signed in to iCloud and have iCloud Drive enabled, we store your game progress in your own private CloudKit container so it follows you between devices. We cannot see what is stored there; only your Apple ID can read it.
  • Game Center. If you opt in, your Game Center alias and scores are visible to other players on the leaderboards we publish. You can disable this in iOS Settings → Game Center.

Information we do not collect

We do not ask for your real name, address, phone number, contacts, photos, microphone, camera, or precise location.

3. How we use information

  • To run the Game, save your progress, and sync between devices.
  • To process purchases and confirm subscription entitlements.
  • To diagnose crashes and fix bugs.
  • To measure aggregate gameplay metrics (e.g. average completion rate per level) so we can tune difficulty and content.
  • To show ads in the parts of the Game that are ad-supported, and to limit how often you see them.
  • To respond to your support requests.
  • To detect and prevent fraud, abuse, or violations of our Terms of Service.
  • To comply with legal obligations.

Our legal bases under the EU and UK GDPR are: contract performance (running the Game and processing your purchases), legitimate interests (security, analytics, fraud prevention, product improvement), consent (advertising tracking via App Tracking Transparency), and legal obligation (tax records, responding to lawful requests).

4. Third-party services

The Game uses the following third-party services. Each provider acts as an independent processor or controller for the data they receive. We have linked their privacy policies so you can read exactly what they do.

ServicePurposeData sharedMore info
Apple — App Store, StoreKit, iCloud, Game Center, Push NotificationsApp distribution, in-app purchases, cloud sync, leaderboards, alerts.Apple ID-linked transaction data, device identifiers, iCloud container contents (private to your Apple ID).apple.com/legal/privacy
RevenueCatReliable subscription and in-app purchase entitlement checks.Pseudonymous app-installation ID, transaction receipts, country, subscription status.revenuecat.com/privacy
Google AdMob (Google Ireland Ltd.)Showing rewarded and interstitial ads in ad-supported flows.Advertising identifier (only with your consent), IP, device type, ad interaction data.policies.google.com
Google User Messaging PlatformShowing the EU/EEA/UK consent prompt that lets you choose between personalized and non-personalized ads.Your consent choices.support.google.com/admob
Firebase Analytics & Crashlytics (Google)Aggregate gameplay analytics and crash reporting.Pseudonymous app-instance ID, device/OS info, gameplay events, crash stack traces.firebase.google.com/support/privacy
CloudflareHosting and protection for nifugames.com.IP address and request metadata for security and abuse prevention.cloudflare.com/privacypolicy

We do not sell your personal information. We do not share it with advertisers other than as described above, and we do not allow our ad partner to use it to build cross-app profiles unless you have opted in via App Tracking Transparency.

5. Tracking and advertising

On iOS, before any cross-app or cross-website tracking happens, the system shows you Apple's App Tracking Transparency prompt. If you choose Ask App Not to Track, the Game and our ad partner stop using your advertising identifier and you will only see non-personalized ads. You can change your choice at any time in Settings → Privacy & Security → Tracking or Settings → [Game name] → Allow Tracking.

In the European Economic Area, the United Kingdom, and Switzerland, we additionally show a consent prompt powered by Google's User Messaging Platform that complies with IAB TCF v2 and the Google Additional Consent specification. You can review and change your choices later from the in-game Settings screen.

Short version: if you decline tracking, ads still appear in the parts of the Game that are ad-supported, but they are generic and not based on your behaviour.

6. Children's privacy

Marvelous Fantasia is rated 4+ for content suitability, but the Game is designed for a general audience and is not directed at children under the age of 13 (or the equivalent age of digital consent in your country). We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will delete it.

Parents can also use Apple's Screen Time and Family Sharing controls to require approval for in-app purchases and to restrict content.

7. Data retention

  • Gameplay state in iCloud: kept until you delete the app or your account, or sign out of iCloud.
  • Crash and analytics data: retained for up to 14 months, then deleted or fully anonymized.
  • Purchase records: retained for the period required by tax and consumer-protection laws (typically 10 years in Türkiye, 6 years in the UK).
  • Support emails: retained for up to 24 months after the conversation ends.

8. Your rights

Subject to local law, you have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. EU/EEA, UK, and Swiss residents may also lodge a complaint with their local supervisory authority.

California residents have rights under the California Consumer Privacy Act, including the right to know, delete, correct, and opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined in the CCPA.

To exercise any of these rights, email [email protected] from the address you used in the Game (or include enough information for us to verify your identity). We will respond within 30 days.

Quick deletion: Inside the Game, open Settings → Account → Delete account. This removes your iCloud-synced progress and any pseudonymous IDs we hold.

9. International transfers

We are based in Türkiye. Some of our service providers store data in the United States, the European Economic Area, and other regions. When we transfer personal data out of the EEA, the UK, or Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism approved under applicable law.

10. Security

We use industry-standard safeguards including TLS 1.3 in transit, scoped API keys, encrypted-at-rest storage with our cloud providers, and least-privilege access controls. No system is ever perfectly secure, and we cannot guarantee absolute security. If we ever become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, give you a more prominent notice (for example, an in-game banner). Please review this page periodically.

12. Contact us

Privacy questions

Data access, deletion, and other rights.

[email protected]

General support

Bugs, lost progress, account issues.

[email protected]

Postal: Nifu Games, Istanbul, Türkiye. Please email first — postal requests take longer to process.