Version: privacy-notice-en-2026-11-11-v1 · Last updated: 11 November 2026
1. Who is responsible for your data?
208 SOFTWARE SOLUTIONS TEKNOLOJİ ANONİM ŞİRKETİ ("208") is the data controller for the personal data processed in the TIDE OF WAR service. This notice explains, under the Turkish Personal Data Protection Law No. 6698 (KVKK), what information we use, why, and what your rights are. If you live outside Türkiye, any rights you have under the data protection laws of your country are not affected.
Address: Bulgurlu Mahallesi, Toygarçeşme Sk. No:16/B, 34696 Üsküdar, Istanbul, Türkiye
Personal data requests: info@208softwaresolutions.com
Game support: support@208softwaresolutions.com
In the app: Settings → Manage your account (closing and deleting your account), Settings → Legal documents (this notice)
This is an information notice. Reading it or playing the game does not mean you consent to any particular use of your data, to advertising or to marketing.
2. What information we use and why
Your information is collected electronically through your choices in the app, the account forms, the matches you play, your use of clans and chat, in-app purchases and the communication between the app and our server. Playing as a guest does not mean no data is processed: a player record is needed to link your progress to you.
| Data and source | Purpose | Legal basis under KVKK |
|---|---|---|
| Player code, internal account ID, the display name you choose, your avatar and captain choices, your language | Creating your player record and managing your session and in-game identity | Performance of a contract; Art. 5/2(c) |
| If you create an account with email: your email address, a one-way hash of your password (the password itself is never stored), email verification and password reset codes | Signing in, verifying your email and recovering your account | Providing the account service you chose; Art. 5/2(c) |
| Matches, the orders you give, results, your gold and trophy balance and its history, league standing, captain and cosmetic ownership | Running matches, calculating results, recording what you earn and buy | Performance of the game service; Art. 5/2(c) |
| Your clan membership, contributions and donations, the messages you write in clan chat, reports you send and reports about you, players you block | Providing clan features, enforcing community rules, reviewing and removing inappropriate content | Performance of the service; Art. 5/2(c) · Legitimate interest in player safety and preventing abuse; Art. 5/2(f) |
| For in-app purchases, the transaction ID, purchase token, product, date, test-environment flag and refund status reported by the App Store or Google Play | Crediting the gold you bought exactly once, reversing refunded purchases, resolving payment disputes | Performance of a contract; Art. 5/2(c) · Financial obligations; Art. 5/2(ç) · Protection of rights; Art. 5/2(e) |
| Your device's push token, platform, language and notification preferences | Sending the notifications you allow: opponent found, match result, clan chat and clan news, a captain looking for an opponent | Performance of the service; Art. 5/2(c). You can turn notifications off in your device settings, and the opponent announcement in Settings, at any time |
| Hashes of session tokens, connection times, IP address, device/operating system and app version, error and security events | Secure sessions, preventing cheating and unauthorized access, fixing connection problems | Performance of the service; Art. 5/2(c) · Legitimate interest in proportionate security checks; Art. 5/2(f) |
| The player code, email address, description and necessary error details you share in a support request | Investigating and answering your request | Performance of the service; Art. 5/2(c) · Records for disputes; Art. 5/2(e) |
| Records that this notice was presented to you and the terms were accepted (document version and date), account closure and deletion requests | Showing which information was provided, fulfilling your requests and our legal obligations | Legal obligation; Art. 5/2(ç) · Protection of rights; Art. 5/2(e) |
Your age range is stored only on your device and is not sent to our server; your date of birth is not stored.
You do not need an email address to play as a guest. You do not have to use your real name as your display name. Do not put your password, address, ID number or anyone else's private information in your display name, clan name, chat messages or a support request.
Your display name, avatar and captain, match results, league and ranking are visible to other players. Messages you write in clan chat are visible to the members of your clan. Your email address, password data, session tokens and purchase records are never shown to other players.
There are no ads in the app. We do not use third-party advertising, analytics or tracking software; we do not track you across other companies' apps and websites, we do not sell your data and we do not send marketing messages. Necessary messages about account security or an action you requested are not marketing.
3. In-app purchases
Gold packs are bought through the App Store or Google Play. Payment is taken and processed by those stores; we never see or store your card or payment details. The store only sends us the transaction record needed to verify the purchase. Apple and Google are separately responsible for the payment process under their own privacy policies.
4. Who receives your information?
Your information is shared only to the extent needed for the service, with:
Hosting: our game server, database and website are hosted by a virtual dedicated server (VDS) provider located in Türkiye.
Google (Google Workspace email): sending verification and password reset codes by email and support correspondence — your email address and the content of the email.
Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service): delivering notifications to your device — the push token and the text of the notification (for example an opponent's display name or a short preview of a clan message).
Apple (App Store) and Google (Google Play): verifying purchases and processing refunds — transaction records.
Competent public authorities and courts: to the extent required by a valid legal obligation or an authorized request.
Other players in the game: only the in-game information described in section 2.
Transfers within Türkiye follow the conditions of Article 8 of KVKK. Because of the Google and Apple services, the data above may be processed in countries where these companies operate servers, mainly the United States and European Union countries. These international transfers are based on standard contracts signed with these service providers and notified to the Turkish Personal Data Protection Board under Article 9/4 of KVKK.
5. How long we keep information and how to delete your account
We keep your information only as long as needed for the purposes described and for the periods required by law. Your account and game records are kept while your account is open. Details are in the Account Deletion and Data Retention Policy (in the app under Settings → Legal documents; on our website at tideofwar.208softwaresolutions.com/en/delete-account).
Settings → Manage your account offers two separate options:
Close my account: your normal access and all sessions end immediately. The information needed to reopen your account is kept, in a limited way, for 30 days; the last date you can reopen is shown on screen. After that, your account is deleted. Guest accounts cannot be closed, only deleted.
Delete my account and data: your account and personal data are permanently deleted; there is no 30-day waiting period. The request is processed right away and is usually completed within a few minutes, and always within 30 days. The app only tells you "Your account has been deleted" once the deletion has actually completed.
When your account is deleted we delete your email address, password hash, sessions, push tokens, verification and reset codes, your block list and the text of the messages you wrote in clan chat; your display name becomes "Deleted Player". So that other players' match history and rankings stay correct, match results and clan contributions; for financial obligations and refund disputes, purchase transaction records; to show that we met our legal obligations, the records that this notice was presented and the terms were accepted; and for community safety, the content reports that were reviewed, may be kept without your email address or name. These records are never used to reopen your account, create a new profile or for marketing.
Database backups are kept for 30 days; deleted data disappears from backups at the latest when that period ends. If we ever need to restore from a backup, deletion requests completed after that backup are applied again.
Removing the app from your phone or signing out does not delete your account or your data. If you cannot access the app, send your deletion request from your account's email address, including your player code, to info@208softwaresolutions.com.
6. Children and players aged 13–17
TIDE OF WAR is designed for players aged 13 and over; players under 13 cannot use the game. Players aged 13–17 can play as guests. Actions that require the consent of a parent or legal guardian — creating an account with email, reopening a closed account and in-app purchases — are not available to players aged 13–17 in this version; for that reason joining a clan and writing in chat are not available to this age group either.
If you are under 18, review the terms of use and this notice together with your parent or legal guardian. We do not ask for ID, your full date of birth or documents to check your age. For a request about your child's account, use the contact address in section 1.
7. Your rights and how to make a request
Under Article 11 of KVKK you can learn whether your data is processed and, if so, request information about it; learn the purpose of processing and whether it is used for that purpose; ask which third parties it is transferred to; request correction of incomplete or inaccurate data, and deletion or destruction where the legal conditions are met, and that these actions be notified to the third parties it was transferred to; object to a result against you that arises solely from automated analysis; and claim compensation if you suffer damage from unlawful processing.
Send your request to info@208softwaresolutions.com. KVKK requests need the identity, contact and request details set out in the relevant Communiqué. To protect your account, we verify, in proportion to the request, that it comes from you or your authorized representative. We will never ask for your password.
We resolve requests free of charge as quickly as possible and within 30 days at the latest; if an action involves an additional cost, only the fee set by law may apply. If we refuse a request in whole or in part, we tell you why. If our answer is insufficient, your request is refused or we do not answer in time, you can file a complaint with the Turkish Personal Data Protection Board.
8. Changes to this notice
We publish the current version and date of this notice in the app and on our website. If a purpose of processing or an important data practice changes, we present the new notice before that processing begins.