KVKK notice
Last updated: 13 August 2026
Prepared under Article 10 of Turkey's Personal Data Protection Law No. 6698 (KVKK).
Data controller
Case Left Open — contact: info@caseleftopen.com
What is processed, and why
| Data | Why |
|---|---|
| E-mail address | Opening the account, signing in, resetting a password |
| Name (optional) | So we can address you |
| Password digest | Keeping sign-in secure |
| Game progress | Carrying your save between devices |
| IP address, sign-in attempts | Protecting the account from unauthorised access |
| Error records | Fixing what breaks |
| Consent record | Sending announcements, and proving consent was given |
Legal basis
Account and game data are necessary for entering into and performing the contract (Art. 5/2-c). Security records rest on legitimate interest (Art. 5/2-f). Announcement e-mails are sent only with explicit consent (Art. 5/1), and consent can be withdrawn at any time.
Transfers
Data is processed on servers of providers outside Türkiye: Neon for the database (Germany), Vercel for hosting, and a mail provider for letters. It is transferred to no one else, sold to no one, and shared with no one for marketing.
Retention
For as long as the account exists. On a deletion request, or when you close the account yourself, it is deleted at once. Security records are removed automatically after 30 days and error records after 60.
Your rights (Art. 11)
You may learn whether your personal data is processed, request information about it, learn whether it is used for its purpose, ask for it to be corrected, deleted or destroyed, ask that third parties be informed, object to a result reached solely by automated analysis, and claim compensation for damage.
Two of these — downloading your data and deleting your account — are available immediately from Settings → Account. For the rest, write to info@caseleftopen.com; your request will be answered within thirty days at the latest.