TASO · FENRA GAMES
Privacy Policy and Data Protection Notice
This notice covers the Taso mobile game, its online services and playtaso.now, provided by Fenra Games. Last updated: 7 October 2026.
1. Controller and contact
Fenra Games is responsible for processing personal data for Taso. Contact: info@fenragames.com. Postal address: Abdurrahman Gazi Mahallesi, Osmangazi Caddesi, No: 123-127 / 28, Sancaktepe / İstanbul, Türkiye. Use this contact for privacy, access, correction and account deletion requests. Do not include passwords, sign-in codes or an identity document in your first message. We use proportionate checks where account ownership needs to be verified.
2. Information we process
Account and profile: guest or linked account identifiers, player code, display name, avatar, birth year, language/country and account dates. Guest access also creates a server-side game account. If you link Google or Apple, we process the provider account identifier and authentication information, not your provider password.
Game information: collection, equipped discs, coins and other balances, XP, Neighbourhood Points, match and shot results, case openings, progress, rewards, friendships, party/match participation and chosen settings. Online actions and rewards are validated by the server.
Security and technical information: IP address and connection times, app/OS version, device and installation identifiers, session records, error/crash and performance information, abuse reports and account restrictions. When notifications are enabled, we process device notification tokens and permission/preferences. We also process messages and attachments you send to support. The game does not request your contacts, microphone or precise GPS location.
3. Purposes and legal grounds
We process information necessary to create and authenticate accounts, run matches, store collections and rewards, provide friends/party features and support to enter into or perform the service contract. Preventing cheating and unauthorised access, maintaining transaction integrity, investigating errors and protecting the service rely on legitimate interests balanced against your rights. Legal duties and establishing, exercising or defending rights may require certain records. Optional analytics and personalisation rely on your affirmative choice/consent; refusing them does not prevent access to the core game. Providing this notice does not mean that consent is the legal basis for every processing activity.
4. Visibility to other players
Your display name, avatar and the public parts of your profile, collection and game statistics can be visible through matches, friends and leaderboards. Match participants see the name and result of a player who achieves a combo. Your birth year, authentication information and support requests are not public profile fields. Avoid putting personal information you do not wish to share in a display name or attachment.
5. Providers and transfers
Hosting infrastructure and network/security providers such as Cloudflare process connections and server data to deliver and protect the service. Depending on the feature and app configuration, Google/Firebase provides diagnostics, optional analytics and notifications; Google and Apple support account linking and platform services. Unity Technologies, provider of the in-app purchase library, receives purchase-step events (start, payment, failure, delivery) with the product, price, transaction status, store receipt, installation and device identifiers and device/app information, for purchase diagnostics and reporting. Optional analytics follows your preference; diagnostics and server security logs are distinct.
Authorised support and operations staff access data needed for their duties. We may disclose information to competent authorities in response to valid legal requests or to protect rights. Provider infrastructure can involve processing outside your country. Applicable transfer rules and required contractual or other safeguards must be followed; we do not promise that all processing remains in Türkiye. We do not sell personal data.
6. Analytics, ads, purchases and the website
Optional analytics and personalised advertising start switched off for new accounts. Change these choices under Settings → Privacy. Personalised ads are disabled below age 16. Withdrawing consent does not retrospectively invalidate processing based on earlier consent.
Real-money purchases: the game sells one-time cosmetic packs (disc designs) through Google Play and the App Store. The store processes the payment; we do not receive your card or payment details. To deliver a pack we receive and store the store's order or transaction identifier, the product, the purchase time and status, and an account link token created by the game, and we verify them with the store's server. We keep these records to deliver and restore purchases, handle refunds and prevent abuse, and for as long as tax and consumer law requires. Rewarded advertising is disabled in this release.
playtaso.now provides static game and information pages. It has no game account login or direct account deletion panel. It does not run its own advertising or analytics script; network and security infrastructure can process IP addresses, requests and necessary security/cookie information. External services have their own privacy practices.
7. Retention and account deletion
Account and progress information is retained to maintain your account and the service. After you read and confirm the notice under Settings → Manage my account → Delete my account, the server disables the account and sessions and hides its public profile/leaderboard presence. There is a 30-day recovery period. You can cancel through the separate recovery confirmation in the app during that period; signing in alone does not cancel deletion. Scheduled permanent deletion follows expiry. Completion can be delayed if a dependent operation, such as provider authorisation revocation, fails.
The account profile, login links, friendships and personal preferences are within deletion scope. Some match, item/reward transaction, security, report and deletion audit records are retained separately for reconciliation, cheating/dispute investigations, legal duties and protecting rights. Records containing technical account numbers are not described as anonymous just because a name was removed. Retention criteria are the relevant investigation, transaction integrity and applicable legal requirements; not every record disappears on day 30.
Operational logs rotate: web logs use 14 daily rotations, while server journals have a capacity limit. Database backups retain the latest seven successful daily copies. Deletion from active storage therefore does not remove backup copies at the same instant. Backups are not available through normal player access.
Uninstalling the app does not delete the account. If you cannot access the app, use the email route on playtaso.now/en/account-deletion/ to request deletion without reinstalling; ownership is verified before action.
8. Your rights and choices
Depending on applicable law, you may have rights to learn whether data is processed; request information and access; understand purposes and recipients; correct incomplete/inaccurate data; request deletion, restriction or portability; object to certain processing and adverse outcomes based solely on automated analysis. Under Turkish data protection law, you may also request that recipients be informed of correction/deletion and seek compensation for unlawful processing. You retain the right to contact the competent data protection authority.
The account management area offers data export. Use privacy settings for optional analytics/advertising and app/device settings for notifications. Send other requests to the contact above; we respond within applicable legal time limits.
9. Age and changes
Taso is not offered to children under 13. Contact us if you identify an account or data belonging to a child under 13. Higher local age or parental permission requirements also apply. Significant changes to data practices will be reflected here with an updated date and, where required, an in-app notice or a new choice.