Legal Documents

Echowake — Privacy Policy

Publisher: Hakan Timur — a natural person (sole proprietor) trading as Noriloop Studio
Postal address: Yenişehir Konakları, 979. Sokak 14G Daire 6, 26000 Tepebaşı, Eskişehir, Türkiye
Contact email: [email protected]
Application: Echowake: Interactive Thriller (application id com.noriloop.thriller)
Effective date: 4 October 2026
Last updated: 6 October 2026

1. Who we are

Echowake: Interactive Thriller ("the App") is an interactive story game published by the Publisher named in the identity block above ("we", "us"). The Publisher is a natural person acting as a sole proprietor and is the data controller under the EU/UK General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).

2. The short version

To save your progress the App creates an anonymous account; you may link a Google or email account if you want. We store your story progress, crash reports and the minimum needed to show ads or to remember that you bought "Remove ads". We do not sell your data and we never use your story choices for advertising.

3. What we collect

Account identifier. On first start the App signs you in anonymously with Firebase Authentication (Google Cloud). If you link an account, we also receive the email address of the Google or email account you link.
Game progress. Your position in each season, the choices you made and your in-app settings, stored in Google Cloud Firestore so you can continue on another device.
Usage analytics. Firebase Analytics (Google Analytics for Firebase) records how the App is used: screens and episodes opened, episodes and seasons completed, choices made (as story identifiers, not free text), the sign-in method, plus an app-instance identifier, device model, operating system, language and approximate country. Where consent is required, this happens only after you agree in the consent form; otherwise analytics storage stays off. We use it to improve the stories and, in aggregate, to measure our own app-install advertising on Google Ads.
Crash reports. If the App crashes, Firebase Crashlytics receives technical data about the crash: device model, operating system and app version, the error trace and an installation identifier.
Advertising data. The App shows ads through Google AdMob (see §5). AdMob may process your device's advertising ID, IP address, coarse location derived from it, and ad interaction data.
Purchases. "Remove ads" is sold through Google Play Billing. We receive confirmation that the purchase exists; we never receive your payment details.

4. Why we use it (legal bases)

To provide the game, save and sync your progress and keep your account working (performance of a contract).
To detect and fix crashes (legitimate interest in a working app).
To understand how the stories are played and measure our own advertising (consent where required; legitimate interest elsewhere).
To show ads between episodes, and personalised ads only where you consented (consent; legitimate interest for non-personalised ads where permitted).
To remember your "Remove ads" purchase (performance of a contract).

5. Advertising and your choices

A full-screen ad may appear between two episodes; never inside a scene and never in the first two episodes. Where the law requires it (for example in the European Economic Area, the United Kingdom and Switzerland), the App shows Google's consent form before any personalised ad. You can change your choice at any time in Settings → Ads & privacy → Ad privacy choices, and you can reset or delete your advertising ID in your Android settings. Buying "Remove ads" stops all ads in the App. AdMob is governed by Google's privacy policy: https://policies.google.com/privacy and https://support.google.com/admob/answer/6128543.

6. Service providers

Google Ireland Ltd. / Google LLC provide Firebase Authentication, Cloud Firestore, Cloud Storage, Firebase Analytics, Firebase Crashlytics, Google AdMob and Google Play Billing. Data may be processed outside your country, including in the United States, under Google's standard contractual clauses.

7. Retention

Your progress is kept while your account exists. Analytics events are kept for 14 months. Crash reports are kept by Crashlytics for up to 90 days. Purchase records are kept by Google Play under its own terms.

8. How to delete your data

In the App: Settings → Account → Delete account. This immediately and permanently deletes your account and all of your progress.

Without the App: follow the steps at noriloop.net/echowake/delete-account.

9. Children

The App contains suspense and mild peril and is intended for users aged 13 and over. It is not directed at children under 13 and we do not knowingly collect their personal data.

10. Your rights under the GDPR and the KVKK

You can ask for access to, correction or deletion of your data, restriction of or objection to processing, and data portability, and you can withdraw consent at any time. Write to the contact email above. You may also complain to your data protection authority (in Türkiye, the KVKK Board).

11. Permissions

The App uses internet access only. Google Mobile Ads adds the advertising ID permission (com.google.android.gms.permission.AD_ID); Google Play Billing adds the billing permission.

12. Security

Data travels over encrypted connections and is stored by Google Cloud; each player can read and write only their own progress.

13. Changes

If this policy changes we will publish the new version on this page with a new date, and tell you in the App when a change materially affects your data.

14. Contact

Send questions about this policy or your data to the contact email in the identity block.