Our games

Candy Trails

Privacy Policy

Effective date: November 2, 2026

This Privacy Policy explains how Galora Games ("we", "us") collects, uses and shares information when you play Candy Trails (the "Game") on iOS or Android, and the choices and rights you have.

1. Who we are

Galora Games is the trading name of Glasir Yazilim Teknoloji Danismanlik Limited Sirketi, a company registered in Türkiye. We are the data controller for the personal data described in this policy.

Email: [email protected]

2. Data we collect

Device and advertising identifiers

  • iOS: the Identifier for Advertisers (IDFA), only if you allow tracking in Apple's App Tracking Transparency prompt, and the Identifier for Vendors (IDFV).
  • Android: the Google Advertising ID.
  • Device model, operating system and version, device language, country and IP address.

Gameplay data

  • Level progress, stars and scores.
  • Gold and booster balances.
  • Purchase history (which items you bought and when).

Display name and avatar

The display name and avatar you choose in the Game are shown publicly to other players on the in-game League leaderboard.

Game Center and Google Play Games

If you sign in with Apple Game Center or Google Play Games Services, we receive your player ID from that service. We use it only to sign you in and to save and restore your progress in the cloud.

Payments

Purchases are processed by the Apple App Store or Google Play. We never receive your card or payment details; we only receive confirmation of the purchase so we can deliver it.

3. How we use your data

  • To run the Game and provide its features.
  • To save your progress in the cloud and restore it on your devices.
  • To show the League leaderboard.
  • To analyze how the Game is played, fix bugs and improve it.
  • To show ads, including personalized ads where permitted.
  • To attribute installs and measure the performance of our ads and marketing.
  • To process and deliver in-app purchases.
  • To prevent fraud, cheating and abuse.

4. Third-party services

We share data with the following providers only as needed for the purposes above. Each provider handles data under its own privacy policy:

We do not sell your personal data for money. We may also disclose data when the law requires it, or to a successor if the Game or our business changes ownership.

5. Tracking and advertising choices

  • iOS: If you choose "Ask App Not to Track" in Apple's App Tracking Transparency prompt, we do not track you across other companies' apps and websites, and the ads you see are non-personalized. You can change this at any time in Settings > Privacy & Security > Tracking.
  • Android: You can reset or delete your Advertising ID in your device settings (usually Settings > Google > Ads or Settings > Privacy > Ads).
  • Rewarded ads are always optional: you choose whether to watch one in exchange for a reward.

6. Legal bases and your rights

European Union and United Kingdom (GDPR / UK GDPR)

We process your data to perform our contract with you (running the Game, cloud save, the leaderboard and purchases), on the basis of our legitimate interests (analytics, non-personalized ads, fraud prevention and security), on the basis of your consent where the law requires it (personalized ads and ad measurement), and to meet our legal obligations.

California (CCPA / CPRA)

Using advertising identifiers for personalized advertising may count as "selling" or "sharing" personal information under California law. You can opt out at any time with the device settings in section 5 or by emailing us. We will not discriminate against you for exercising your rights.

Türkiye (KVKK)

Under Law No. 6698 on the Protection of Personal Data you have the rights listed in Article 11, including the right to learn whether your data is processed, to request information, correction or deletion, and to object to processing.

Your rights

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your data.
  • Object to or restrict processing.
  • Opt out of the sale or sharing of your data for advertising.
  • Withdraw consent at any time, without affecting earlier processing.

To exercise any of these rights, email [email protected]. We reply within 30 days. You can also lodge a complaint with your local data protection authority. To delete your account, see Delete account.

7. Data retention

  • Account, cloud save and leaderboard data: for as long as your account exists, and deleted within 30 days of a deletion request.
  • Analytics and advertising data: according to each provider's retention periods.
  • Purchase records: as long as required by law.
  • Data stored on your device: until you uninstall the Game.

8. International transfers

Our providers may store and process data outside your country, including in the United States and the European Union. Where required, these transfers are protected by appropriate safeguards such as standard contractual clauses.

9. Security

Data is sent over encrypted connections and protected by our providers' security measures. No system is completely secure, but we take reasonable steps to protect your data.

10. Children

The Game is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, email [email protected] and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we change the effective date at the top of this page, and we announce important changes in the Game.

12. Contact

Glasir Yazilim Teknoloji Danismanlik Limited Sirketi (Galora Games) · [email protected]

Terms of UseSupportDelete account