1. Data controller
Last Colony is provided by Mehmet Oğuz Arıkan, acting as the data controller. Address: Şehit Cevdet Özdemir Mahallesi, İğde Sokak No: 13, Çankaya, Ankara, Türkiye. You can contact [email protected] with privacy and personal data requests.
2. Scope of this policy
This policy covers the iOS and Android apps, game servers, player messaging, notifications, advertising services, and the promotional website at lastcolonygame.com.
The promotional website currently has no active account or launch-notification registration form. Hosting and security services may nevertheless process limited technical data such as IP address, browser/device information, and access logs to keep the site secure and available.
3. Personal data we process
Depending on how you use the service, we may process:
- Account data: email address, username, player ID, and account identifiers.
- Technical data: IP address, device model, operating system, app version, language, session and security logs, and device or app identifiers.
- Gameplay data: nation and season progress, in-game actions, scores, inventory, and service usage records.
- Communications and user content: player messages stored on our servers and support, complaint, or deletion requests sent by email.
- Notification data: OneSignal user/subscription ID, push token, notification permission, device information, and notification interactions.
- Advertising data: advertising identifiers, IP address, ad impressions and interactions, diagnostics, and similar SDK data that Google AdMob may process.
4. Location data
Last Colony does not collect precise location from GPS or similar device sources and does not request precise location permission. Advertising or infrastructure providers may infer an approximate country or region from technical data such as an IP address; this is not precise location tracking by Last Colony.
5. Purposes and legal bases
We process data to create and maintain accounts; operate the shared world, seasons, and player messaging; save progress; protect the service; prevent cheating and abuse; troubleshoot problems; answer support requests; send notifications with permission; display and measure ads; and comply with legal duties.
Depending on the processing and your location, we rely on performance of a contract, compliance with legal obligations, establishment or defence of legal claims, our legitimate interests where they do not override your rights, and consent where required. Permissions required by applicable law are requested separately for personalised advertising, device storage/access, and notifications.
6. AdMob, OneSignal, and other providers
Google AdMob may process data to deliver ads, protect ad systems, prevent fraud, measure performance, and personalise ads where permitted. Ad personalisation depends on your choices, age, region, and applicable law.
OneSignal may process device and subscription identifiers, push tokens, IP address, app information, and notification interactions to create notification subscriptions and deliver messages to your device. You can disable notification permission in your device settings.
App stores, cloud/hosting, security, troubleshooting, and technical infrastructure providers may also process data only as needed to provide their services.
8. Retention
Account, gameplay, and message data is retained while the account is active and afterward only for the limited period needed for service security, dispute resolution, abuse prevention, or legal obligations. When retention is no longer necessary, data is deleted, destroyed, or anonymised.
Submitting an account deletion request starts a three-day countdown. The account remains usable and the request can be cancelled during this period. If the three-day period expires without cancellation, all personal data, gameplay progress, and messages linked to the account are deleted and all Bearer tokens issued for the account are invalidated.
9. Security
We use access controls, secure communications, logging, and reasonable technical and organisational safeguards against unauthorised access, alteration, disclosure, and loss. No electronic system can guarantee absolute security, so please contact us if you suspect an incident.
10. Children's privacy
Last Colony is not directed to children under 13, and people under 13 must not create an account. If your country sets a higher age for online services or consent to data processing, users below that age must not use the service without permission from a parent or legal guardian.
If you believe we processed data belonging to a child under 13 without the required permission, contact us. We will review the matter and take reasonable steps to delete the account and related data.
11. Your rights
Under Article 11 of the Turkish Personal Data Protection Law, you may have rights to learn whether your data is processed, request information, learn the purpose and recipients, request correction or deletion, ask that these actions be communicated to recipients, object to certain automated outcomes, and seek compensation for unlawful processing.
Users in the European Economic Area, United Kingdom, or jurisdictions with similar laws may also have rights of access, correction, deletion, restriction, portability, objection, and withdrawal of consent. Mandatory consumer and data protection rights in your country remain unaffected.
Send requests to [email protected]. To protect your account, we may request limited information to verify your identity and account ownership; we will never request your password.
12. Account deletion
You can delete your account through the account deletion option in the mobile app or send an email request through the web account deletion page below. A three-day cancellation period begins after the request. When it expires, all account-linked information is deleted, and signing in with Google or Apple does not restore the deleted account.
13. Changes and contact
We may update this policy as the service or law changes. Material changes will be announced through the app or website. Contact [email protected] with questions.