Privacy Policy

Who we are

Goal Titans (com.patpatgames.goaltitans) is made and published by PatPat Games, an independent studio based in Türkiye. For anything in this policy, write to contact@patpatgames.com — a person reads it. We are the data controller for the little we are responsible for, which is set out below.

What we never collect

We think this list matters more than the one after it:

• No name, no email address, no phone number. There is nothing to sign up for and no button anywhere in the game that asks for any of them.
• No cloud save and no account system. Your progress is not backed up anywhere. That is a real trade-off — a lost phone is lost progress — and it is the price of the line above.
• No location, no contacts, no photos, no microphone, no camera. The app requests none of these permissions.
• No advertising in the game itself. Nothing interrupts a match. The only adverts are the ones you tap on purpose.

What is stored on your device

One save file, written by Android's own preferences store, readable only by this app:

• your coins, gems, characters, character levels, power cards and power levels;
• your division, season standing, match record and cup run;
• your season-pass progress and which rewards you have collected;
• the player name shown on the tables — assigned automatically as player plus six digits, and changeable in settings. It is a label, not an identity: it is not checked for uniqueness against anybody and it is never sent anywhere;
• your kit colours, flag, goal effect, chosen stadium and sound settings;
• a record of which purchases have been honoured, so a receipt cannot be counted twice.

Uninstalling the game deletes all of it. We hold no copy and cannot restore it.

A note about your rivals

Goal Titans is single player. The hundred names in your division table, the sixteen entrants in the cup and the opponent in every match are generated on your own phone from your division and the season number. They are not other people, no result of yours is ever uploaded, and this is why the whole game works with no connection at all.

The services we use

Each has its own privacy policy, linked below.

If you never watch an advert, AdMob is never asked for anything on your behalf. If you never buy anything, RevenueCat has no record of you. Crashlytics only speaks up when something has actually gone wrong.

Why we are allowed to process any of it

Under the GDPR every purpose needs a legal basis, and under the KVKK a hukuki sebep. Ours:

• Personalised advertising — your consent. Where the law requires it the game asks before requesting a personalised advert, and you can refuse or change your mind at any time without losing access to any part of the game (GDPR Art. 6(1)(a), KVKK Art. 5(1)).
• Non-personalised advertising — our legitimate interest in keeping a free game funded, balanced against an interest limited to an advertising identifier and an advert you chose to open (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)).
• Crash reports and gameplay counts — our legitimate interest in a game that does not crash and a difficulty curve that is not guesswork. The data is anonymous and only ever read in aggregate (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)).
• Purchases — performance of a contract. Validating a receipt and remembering what you own is the thing you paid for (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)).

Where your data goes

Google and RevenueCat process data on servers outside Türkiye and outside the European Economic Area, mainly in the United States. We transfer nothing ourselves — it happens between your device and those providers — but you should know that it happens.

Both rely on the European Commission's Standard Contractual Clauses, and Google is additionally certified under the EU–US Data Privacy Framework. Their own policies, linked above, set out the safeguards in full. If you would rather nothing left your device at all, the game is completely playable offline: every division, the cup, the season pass and every match work with no connection.

Advertising and your choices

Adverts are how the game stays free, and every one of them is optional. Nothing interrupts a match, and nothing behind an advert is locked away from a player who never watches one: the 2× is a bonus on a payout you already earned, and the free pack of matches can be bought with coins instead.

You can limit ad personalisation at any time in Android Settings → Privacy → Ads, where you can also delete or reset your advertising ID. Resetting it breaks the link between you and anything collected before.

Where local law requires it — the EEA, the UK and comparable regions — the game asks for your consent before requesting a personalised advert, using Google's own consent form. You can decline and still play the entire game.

Buying Reklamsız / No Ads stops the game asking for adverts at all, and with it the AdMob data collection described above. It does not reduce what you earn: the doubled payout stays, it simply arrives without the video.

Children

The game is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has provided data through one of the services above, contact us and we will pass the deletion request to the relevant provider.

Data retention

Your save stays on your phone until you delete it or uninstall the app. AdMob and RevenueCat keep what they hold for the periods set out in their own policies. Google Play keeps purchase records for as long as tax and consumer-protection law requires, which is a legal obligation neither we nor you can waive.

Security

The save file is stored in the app's private storage, which Android keeps out of reach of other apps. Everything that leaves the device goes over HTTPS to Google or RevenueCat. We hold no database of players, which is the strongest security measure available to us: there is nothing of yours for anybody to breach.

Your rights

Under the GDPR and the KVKK you have the right to know what is held about you, to get a copy, to have it corrected or erased, to object to processing based on legitimate interests, and to withdraw consent. Most of it you can exercise yourself in under a minute — see Delete your data. For anything held by a provider rather than on your phone, email us and we will submit the request on your behalf and complete it within 30 days.

Complaining about us

If you think we have handled your data badly, tell us first — but you are entitled to go straight to a regulator. In Türkiye that is the Kişisel Verileri Koruma Kurumu; in the EEA it is the supervisory authority of the country you live in.

Changes to this policy

If a game update changes what is collected, this page is updated before that version ships and the date at the top changes with it.

Contact

contact@patpatgames.com