Privacy Policy

Who we are

In this policy, "Mimic2", "we" and "us" mean the operator of the Mimic2 game, its apps and this website. We decide how and why your personal data is used, so we are the data controller under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, where they apply, the EU and UK General Data Protection Regulation (GDPR). Our contact address is at the end of this page.

This website

When you visit this website, some data is processed as described below. If we add cookies or similar technologies that are not strictly necessary, for example for advertising or for measuring visits across other sites, we will ask for your consent first where the law requires it.

• Preferences such as your language may be saved in your browser's own storage so the site remembers them. That stays on your device.
• Visits are counted with privacy-friendly analytics that report aggregate figures such as pages viewed, country and referring site.
• Some resources, such as web fonts from Google, load from third-party providers, so your browser sends them a request that includes your IP address and browser details.
• Our hosting and delivery provider processes connection data, such as your IP address, to deliver the pages and protect the site from abuse.

Your account

You create a full account by signing in with a provider such as Google, Apple or Steam. From the provider we receive an identifier for your account and, where the provider gives it, your email address. We never see your password for that provider.

When you register, you choose a character name and tick the box to accept the Terms of Service and confirm you have read this Privacy Policy, and we record the date you did so. You can also choose to receive news, updates and offers about the game by email. That box is never ticked for you, and if you tick it, we record the date you opted in.

If you play as a guest, we create an account in one tap, without a sign-in provider and without an email address. It stays tied to your browser or device until you save it to a full account, and saving it takes you through the same registration choices.

What we collect while you play

To run the game we store what your account holds and what happens in it, such as:

• Your character name, level, progress, quests and rewards.
• Gold, items, upgrades and everything else in your inventory.
• Battle records, such as kills, damage totals and when battles started and finished.
• Bazaar listings, buy orders and trades, including the players you traded with.
• Chat messages you send, with the chat room and the time, the players you block, and reports you make or that other players make about you.
• Messages you send us by email or through our support channels.
• A session token on your device that keeps you signed in.

Device, connection and diagnostic data

When you use the game, our apps or this website, we and our providers automatically collect technical data, such as:

• Your IP address and the approximate location it suggests, such as your country.
• Device, operating system, browser and app details, such as model, version, language and screen size.
• Session and usage data, such as when you sign in, how long you play and which pages and features you use.
• Crash reports, error reports and performance measurements with technical details.
• Server logs of the requests your device makes to the game.

What we may collect in the future

As Mimic2 grows we may add features that involve more data. If we do, we may also collect:

• Purchase records, such as what you bought, when, the price and the platform, from Google Play, the Apple App Store, Steam or another payment provider. The provider handles the payment, and we never receive your full card details.
• Advertising identifiers and data about the ads you see, if we show ads. Where the law requires it, we will ask for your consent before using them to personalise ads or to track you across other apps and websites.
• Push notification tokens, if you allow notifications from our apps.
• Your entries and answers when you take part in a survey, contest or event.
• Information from other sign-in options or platforms you choose to connect to your account.

How we use your data

We use personal data to:

• Create and run your account, save your progress and provide the game on every platform where you play.
• Keep the game secure and fair, including detecting cheating, bots, fraud and people who run several accounts, for example by comparing IP addresses, devices, sessions and trading patterns.
• Moderate chat messages and character names, and handle reports and blocks.
• Answer your questions and support requests.
• Measure how the game is played, monitor crashes and performance, and improve and develop Mimic2.
• Send service messages to everyone with an email address on file, and news, updates and offers to players who opted in.
• Run leaderboards, events and rewards, and show character names and gameplay when we present or promote the game.
• Process purchases, refunds and payment fraud checks, if we offer purchases.
• Show ads and measure them, if we show ads, with your consent where the law requires it.
• Meet legal obligations, respond to lawful requests from authorities, enforce our terms and protect the rights and safety of our players and of Mimic2.
• Prepare for or carry out a merger, acquisition or sale of all or part of the game.

Legal bases

We process personal data only where the law allows it. Under the KVKK and the GDPR, we rely on the grounds below. Where we rely on consent, we ask for it separately from accepting our terms, and you can withdraw it at any time without affecting what was done before.

• Contract: to provide the game and your account under the Terms of Service.
• Legitimate interests: to keep the game secure and fair, prevent fraud and abuse, understand and improve the game, and promote it, always weighed against your rights and freedoms.
• Consent: for news and offer emails, for personalised ads and tracking where the law requires consent, and for notifications you allow on your device.
• Legal obligation: to keep the records and give the information the law requires.
• Legal claims: to establish, exercise or defend our legal rights.

Emails and notifications

We may send service emails to any account with an email address on file, for example about your account, security, changes to our terms or this policy, and important changes to the service. These are part of providing the game, so they continue while you have an account.

We send news, updates and offers about the game by email only to players who opted in, when registering or later. You can withdraw at any time with the unsubscribe link in every such email or by emailing us. Accounts created before this option existed are not opted in.

Guest accounts have no email address and get no email from us.

We may also show notices inside the game. If you allow notifications from our apps, your device may show reminders and alerts, and you can turn them off at any time in your device settings.

What other players and the public can see

Your character name and in-game details, such as level, equipment, kill counts and damage, can be seen by other players, including on leaderboards in the game and on our website. We may show them, and screenshots or recordings of gameplay, wherever we present or promote the game. Your email address and sign-in details are never shown to other players.

Chat messages you send are shown, with your character name, to the players in that chat room. Please never share personal information in chat.

Pick a character name you are happy to have seen in public. It does not need to be your real name, and we would rather it was not.

Who we share it with

We share personal data only as described below. Some of these companies, such as sign-in providers and app stores, also handle it under their own privacy policies.

• Service providers who process it on our behalf, such as server and database hosting, content delivery and security (such as Cloudflare), analytics, diagnostics and monitoring (such as Grafana Labs), email delivery, and web fonts (such as Google).
• Sign-in providers you choose to use, such as Google, Apple and Steam.
• App stores, Steam and other payment platforms, when you install our apps or make a purchase.
• Advertising and measurement partners, if we show ads, with your consent where the law requires it.
• Courts, public authorities and others when the law requires it, or when it is needed to protect the rights, property or safety of our players, the public or Mimic2.
• A buyer or successor, if all or part of the game is merged, acquired or sold. They may continue to use your data as this policy describes.
• Anyone else, with your consent or at your request.

International transfers

Our servers and providers may be located outside Türkiye and outside the country where you live, for example in the European Union or the United States, so your data may be transferred to and processed in those countries. When we transfer personal data abroad, we rely on the safeguards the law provides, such as adequacy decisions or standard contractual clauses, or on another ground the law allows.

How long we keep it

We keep account and game data, including chat messages, blocks and reports, for as long as your account exists. When the account is deleted, we delete or anonymise that data, except what we need to keep to meet legal obligations, resolve disputes, prevent fraud and abuse, or enforce our terms.

Server logs and diagnostic and usage data are kept for a limited period. Backups are replaced on a rolling basis, so deleted data can remain in them for a limited time.

Copies already published elsewhere, such as a screenshot, a recording or a post, may remain. We may keep anonymised or aggregated data that no longer identifies you without a time limit.

Security

We use technical and organisational measures to protect personal data, such as encrypted connections and limited access. No way of storing or sending data is completely secure, so we cannot guarantee absolute security. Keep your sign-in to yourself, and tell us if you think someone else has used your account.

Your rights

Depending on where you live, including under the KVKK and the GDPR, you may have the right to:

• Learn whether we process your data, get a copy of it, and find out why and how it is used.
• Have inaccurate or incomplete data corrected.
• Have your data deleted.
• Learn which third parties in Türkiye or abroad received your data, and have corrections and deletions passed on to them.
• Object to processing based on our legitimate interests, and to a result against you that comes only from automated analysis.
• Restrict processing, or receive your data in a portable format.
• Withdraw your consent at any time.
• Claim compensation for damage caused by unlawful processing.
• Complain to a data protection authority, such as the Personal Data Protection Board (KVKK) in Türkiye or the authority where you live.

How to use your rights

You can delete your account at any time in the game under Settings, with Delete account. This removes your account and your character, and it cannot be undone.

For anything else, email us and include your character name so we can find your account. We may ask you to confirm that the account is yours before we act. You do not need to quote a law; just ask.

You can also remove Mimic2's access in your sign-in provider's account settings. That stops the sign-in working, but it does not delete your game data, so delete the account too if that is what you want.

Children

The game is not intended for children under 13, and they should not create accounts. If you are in the UK or the European Economic Area and under 16, please ask a parent or guardian first, including before you opt in to news emails. If you believe a child under 13 has made an account, email us and we will remove it.

Changes to this policy

We may update this policy, for example when we add features or providers or when the law changes. The date at the top shows when it last changed. If a change is significant, we will tell you in the game or by email. Where the law allows, the updated policy applies once you keep using Mimic2 after a change, and where a change needs your consent, we will ask for it.

Contact

Questions, requests and complaints about privacy all go to the same place: