Privacy policy

Who we are

The controller (data controller under KVKK, controller under the GDPR) is Muskartech, the developer of Lokopost, a sole proprietorship in Türkiye. You can reach us at info@muskartech.com.

Playing alone needs no account. Your progress and settings stay on your device (in the app's storage, or in your browser's local storage on the web version) and are not sent to us.

What we store when you use online features

Online features (nickname, leaderboards, friends, duels) are optional. Only once you confirm you are 16 or older, we store on our server:

• Your player record: an internal ID number, when it was created and last used; your nickname and when you changed it; your age confirmation (the version of this text and the time); your profile (conductor portrait and rank).
• Your scores: best results per level and per Daily Route, and the weekly total. To check a score against the game's rules, the server receives the moves of the run you submit.
• Your friendships and invitations. If you link Google, the ID number Google gives us (not your e-mail or name).
• Your sessions: times, a rough device label (for example "Chrome · Android") and only a digest of the session key. For actions that change your account or friendships: the type, the time and only the network part of your IP address.
• Duels: your opponent, the map, start and finish times, and the rails and time of your best attempt. When you look for a random opponent: the request (time and status), your Duel Points and your duel counters (played, won, lost, drawn). A random opponent sees your nickname, conductor portrait and rank, nothing else.
• Server logs: request path, method, result, duration, the network part of the IP address and, on API lines, your internal ID. No keys or tokens.

What we do not store

E-mail address, real name, photo, phone number, contacts, location, full IP address, browser information (user agent) and device model.

This website sets no cookies and has no analytics, advertising or tracking scripts. It loads nothing from other sites. Our hosting provider processes technical request data, such as the IP address, in its server logs, as any web host does.

Why we store it

To show leaderboards and your friend list, to check scores with the game's own rules, and to prevent abuse. The data on our server is not used for advertising and is not sold.

Advertising

The Android app can show ads through Google AdMob. Where the law requires it (for example in the EEA and the United Kingdom), a consent message from Google appears first, and no ads are loaded before you choose. You can change your choice later under "Privacy options" in the game's settings.

Google may use your device's advertising ID and other device and usage information to serve and measure ads, under Google's own privacy policy. We do not receive that data. You can reset or delete the advertising ID in your Android settings.

Purchases

In-app purchases are handled by Google Play. Google processes your payment; we never see your card or payment details. What you own is recorded in your game save on your device and by Google Play. Our server does not store purchase records.

How long we keep it

• Your account, scores and action records until you delete your account. After deletion, a single line without any identity remains in place of the action records.
• Friendships and invitations until removed, answered, or until one side deletes their account.
• A guest account that was never linked to Google is deleted automatically after 12 months without use.
• Submitted runs 30 days. Sessions 365 days after last use (30 days once ended).
• Duels are deleted 30 days after they end; they are listed for 7 days.
• Server logs are kept in limited size and the oldest are deleted; at the log service they stay for 3 days at most.
• A deleted account can remain in backups for at most 30 days, then disappears automatically.

Your rights

In the game, open Privacy and data (in your profile and in Settings). There you can download all your data as one JSON file and delete your account at any time. Your progress on your device stays with you. Step by step: see How to delete your account.

Under the GDPR and KVKK (Law No. 6698, Article 11) you have the right to know what we hold, to ask for correction or deletion, to restrict or object to processing, to receive your data in a portable format and to complain to the supervisory authority (in Türkiye the KVKK Board; in the EU your national data protection authority). Write to info@muskartech.com and we will answer within 30 days.

Children

Lokopost is not directed at children. The single-player game is open to everyone, but the online features need your confirmation that you are 16 or older; without it nothing is sent to our server. If you believe a younger person has an account, write to us and we will delete it.

Legal basis and transfers

Under the GDPR we rely on performing the online features you ask for (Article 6(1)(b)), our legitimate interest in security and preventing abuse (6(1)(f)) and, for advertising choices, your consent (6(1)(a)). Under the KVKK we process data to perform the service you request, for our legitimate interests and, where required, with your explicit consent.

Our service providers (hosting, backup storage, a log service, and Google for sign-in and ads) may process data outside Türkiye and the EEA. We use them only to run the game.

Contact

Questions or requests about your data: info@muskartech.com.

Changes

When this text changes, the date at the top changes and, if the change affects online features, the game asks for your confirmation again before you continue.