Privacy Policy

Version 1.0, in effect from 23 September 2026. Türkçe: Gizlilik Politikası ve KVKK Aydınlatma Metni

Who we are

SpellShot is made and published by Çağlayan Özgün Kasap, a developer in Türkiye (“we”, “us”). We are responsible, as data controller, for the personal data described in this policy, except where we say that Apple decides. You can reach us at support@stratanaut.com.

What stays on your iPhone

Your progress. Your rating and rank, wins and streaks, coins and experience, missions and seasons, the powers, avatars and portal skins you own, your Daily Gauntlet streak and best scores, your in-game name and your settings are saved on your iPhone with Apple’s standard app storage.

Your recent duels. The game also keeps a list of your last 25 duels, each with the rival’s name, whether you won, whether the rival was the bot and how your rating changed. It also keeps a short record of how quickly you answered your recent words, so the bot can match your pace.

None of this is sent to us. What the game shares with other players and with Apple is described below. We cannot see, restore or delete your progress for you. If you back up your iPhone to iCloud or a computer, your progress is included in those backups. Deleting the app deletes it from your iPhone.

Game Center: online duels and leaderboards

Online Duel, friend invites and the leaderboards use Apple’s Game Center. When you open SpellShot, the game asks Game Center to sign you in, and Apple may show its sign-in screen. Every other mode works without Game Center.

To find you a rival, the game asks Game Center for a player with a similar rating, and after 8 seconds for any player. During an online duel, the two iPhones exchange, through Game Center:

• at the start, your in-game name, rating and avatar, plus technical details the two iPhones need to agree which one referees the match, such as a random number made anew each time you open the game;
• during the match, your moves: the letters you fire and whether they are right, when you fire them, the powers and emotes you use, and the score.

Your rival sees your name, avatar and rating. If you have kept the default name, they see “Rival” instead. Their iPhone keeps your name and the result in its list of recent duels, as yours keeps theirs. SpellShot does not read your Game Center nickname or friends list and does not put them in its messages, but Game Center shows your nickname in its own screens, such as invitations.

Leaderboards. If you are signed in, your rating after each duel and your best Daily Gauntlet score are posted to Game Center. Other Game Center players can see them there, with your Game Center nickname and avatar.

Apple runs Game Center and decides how it uses Game Center data, as an independent controller, under its own privacy policy. Apple’s Game Center privacy notice explains what Game Center shares and how to change your Game Center settings. We receive no copy of your matches.

Nearby Duel

Nearby Duel connects two iPhones directly, over Wi-Fi and Bluetooth, with Apple’s Multipeer Connectivity. It does not go through the internet, Game Center or us. The first time you look for a nearby player, iOS asks whether SpellShot may find devices on your local network.

While you are looking for a player, iPhones close by that are also looking for a SpellShot duel can see you in their list, under your in-game name, or as “iPhone” if you have kept the default name. You stop appearing once a duel starts or when you leave that screen. The duel runs over an encrypted connection and exchanges the same things as an online duel.

New words

SpellShot comes with its word lists built in. Each time you open it, the game also downloads the latest list of extra words for your game language, English or Turkish, from our file storage at Cloudflare (suare-weekly.stratanaut.com), and uses them from the next launch. The request carries no account, identifier or game data. Like any server, Cloudflare receives your IP address and the technical details every internet request carries, such as the app and iOS version, and uses them for us, as a processor, to deliver the file and keep its service secure.

Challenge Links and sharing

After a Daily Gauntlet or a Challenge, you can send a friend a Challenge Link. It contains a number that picks the words, your score and your in-game name, and whoever opens it sees your name and score. After a duel, you can share a result card, which shows both players’ names and ratings, or a recap of the rounds without names. The Daily Gauntlet recap shows your score and streak but not your name. Whatever you share goes only where you send it, through the iOS share sheet, and we do not receive it.

Your choices

Game Center

You do not have to sign in. Without Game Center, you can still play Bot Duel, Practice, Nearby Duel, the Daily Gauntlet and Challenges; Online Duel then gives you the bot instead of a player. You manage Game Center on your iPhone in Settings › Game Center.

Local network

You can turn off the local network permission in Settings › Privacy & Security › Local Network. Nearby Duel then cannot find other players. No other mode needs it.

Daily reminder

The daily reminder is a notification about the Daily Gauntlet at 20:00, your local time, and it can mention your streak. Your iPhone schedules and shows it by itself, so nothing is sent to us or to any notification server. It is off until you allow notifications: the game asks once, with Apple’s prompt, after your first Daily Gauntlet. You can turn it off at any time in the game’s Settings.

Your name

You can change your in-game name in your Profile. Until you do, rivals see “Rival” and nearby players see “iPhone”.

If you email us

When you write to us, we receive your email address, your message and anything you attach. We use them only to answer you and to fix what you report. Cloudflare forwards mail sent to support@stratanaut.com to our mailbox at Google’s Gmail and keeps no mailbox itself. We use Gmail under Google’s standard terms, so Google handles those messages under its own privacy policy. We keep messages while we deal with them and then for no more than two years, unless the law requires us to keep them longer.

Beta testing

If you test SpellShot with Apple’s TestFlight, Apple passes on the feedback you choose to send us: your comments, screenshots and crash details, with basic facts about your device such as its model and iOS version. If you joined through our public TestFlight link, you appear as anonymous unless you type your email address into your feedback. If we invited you by email, we see your email address. We use feedback only to improve the game and keep it on the same terms as email.

Apple

You download SpellShot from Apple, under Apple’s privacy policy. If you turn on Share With App Developers in Settings › Privacy & Security › Analytics & Improvements, Apple also shares crash reports and usage statistics with us, without your identity.

This website

spellshot.stratanaut.com sets no cookies, runs no analytics and loads nothing from other companies. It is hosted by Vercel, which processes the technical details every visit sends, such as your IP address and browser type, to deliver the pages and keep the service secure.

What we do not do

• No account or sign-in of our own.
• No ads, and no tracking across other companies’ apps and websites.
• No in-app purchases.
• No access to your location, contacts, photos, camera or microphone.
• No analytics or crash-reporting software, and no software from other companies in the game: it is built only with Apple’s own frameworks.
• We do not sell or rent your personal data.

Legal bases

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases under Article 6(1) of the GDPR:

Online Duel, Nearby Duel and the leaderboards

Providing the game and the features you choose to use, point (b).

Downloading new words

Our legitimate interest in keeping the game’s word lists fresh and delivering them securely, point (f).

Answering your email

Providing the game and the support you ask for, point (b), and our legitimate interest in fixing problems, point (f).

TestFlight feedback and this website

Our legitimate interest in testing the game and in delivering and securing the site, point (f).

Privacy requests and legal claims

Our legal obligations, point (c).

Where data is processed

We work from Türkiye. Apple, Cloudflare, Google and Vercel are based in the United States and may process data in the United States and other countries. Your rival in an online duel may be anywhere in the world.

Your rights

Depending on where you live, you can ask us for a copy of your personal data, and ask us to correct or delete it, to restrict or stop using it, or to give it to you in a portable format. You can also complain to your data protection authority.

In practice we hold very little about you, usually only your emails. We cannot see your progress, and Game Center data is held by Apple, which answers requests about it under the Apple Privacy Policy.

To make a request, email support@stratanaut.com. We reply within one month at the latest. If you live in Türkiye, your rights under Law No. 6698 (KVKK) and how to apply are set out in our KVKK Aydınlatma Metni, in Turkish.

Children

SpellShot is not directed at children under 13, and we do not knowingly collect personal data from them. If you think a child under 13 has sent us personal data, tell us and we will delete it.

Changes

If this policy changes, the updated version will be posted here with a new version number and date. If a change affects what data the game handles, we will also say so in the App Store release notes.

Contact

Questions about privacy? Email support@stratanaut.com.