Privacy Policy

Last updated: September 2026

What we collect

  • Anonymous identity: your device is given a random identifier in a signed cookie. We do not ask for an email address or phone number.
  • Stage name and avatar: shown on leaderboards and in duels.
  • Game results: stored for scores, boards and the community feed.
  • Payment data: handled by the App Store in the iPhone app, by Google Play in the Android app and by Stripe on the web; card details never reach us. Only the transaction id and subscription end date are stored, to verify the purchase.
  • Sign in with Apple: the anonymous user identifier Apple provides and, if you share it, your name are used to create your account. Your email address is not stored.
  • Notifications: if you allow them, your iPhone's notification token is stored so friend requests and invites can reach you. You can turn this off in your phone's Settings at any time. In the Android app, notifications are only reminders scheduled on your device.
  • Account deletion: Profile → Account settings → Delete account permanently removes your account, keys, friendships and progress.

Stored on your device

XP, Journey stars, achievements and settings live in your browser's local storage. You can reset them from the Profile page.

Third parties

Song previews and artwork load from Apple servers, so Apple can see your IP address during those requests. The app is hosted on Vercel.

Tracking and ads

The app (iPhone and Android) only shows an ad when you ask for one: if you choose "watch an ad" to unlock a locked playlist for a limited time or to double the keys you earned at the end of a game, Google AdMob shows a rewarded ad. There are no ads during gameplay, at launch or on the website, and Nakarat+ members see no ads.

While an ad is shown, Google may collect your IP address (to estimate approximate location), a device identifier, the ads you see and how you interact with them, and crash and performance data, to serve and measure the ad and to prevent abuse. Nakarat requests non-personalized ads only and does not ask for access to the advertising identifier (IDFA) on iPhone; on Android the advertising ID may be read by Google only to serve and measure the ad. Nakarat does not track you across other apps or websites. Your account, stage name and game data are not shared with the ad network. How Google uses this data: policies.google.com/technologies/partner-sites

Your rights

You can ask for a copy of your data or for it to be deleted: berkemkudun@icloud.com. Your recovery key works like a password; never share it.