SPAN — Privacy Policy

SPAN is a daily word game: each word starts with the last two letters of the one before it.

• You need no account to play. The puzzle, your root, your museum and your Essence are generated on your device and stay there.
• An account is needed only for the Friend League. If you never create one, nothing is sent to any server.
• There are no ads, no analytics, no tracking and no in-app purchases, and the app contains no SDK for any of them.
• You can delete your account from inside the app, or by email without the app.

• Data controller: Serdar Şahin (Sole Proprietorship)
• Trade name: E²S Studio
• Tax office / Tax ID: Davutpaşa Tax Office — 7960782593
• Address: Çırpıcı Mah. Yeşilyol G Sk. No:40, Zeytinburnu, 34025 Istanbul, Türkiye
• Contact: info@e2sstudio.com

The app is published under the E²S Studio brand; the legal person behind the brand is the sole proprietorship above. The App Store shows Serdar Şahin as the seller, being the business's legal name, while Google Play shows E²S Studio as the developer. They are the same business.

This policy is written under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the European Union General Data Protection Regulation (GDPR).

Everything the single-player game is made of is held in the app’s own storage. It is sent to no one, us included, and removing the app deletes it.

• Essence, Leaves, Vitality, the day count, your streak and your best Purity Score
• Which branch nodes you own and how deep each one is
• The museum cards you have collected and the rare words that became branches
• Your past puzzle results and your chosen game language

If you create an account to start or join a Friend League, the following is held on the server:

• Your email address — to sign in and to recover the account
• Your password — held only as a hash by the authentication provider; we cannot see it
• Your display name — the name the other players in your league see
• The age of your root in days — shown beside your name on the league card
• Your daily results — language, date, puzzle number, Purity Score, whether the run was completed and clean, how long the opening span took, and any ability penalty. League standings and the weekly duel are calculated from these.
• Your league memberships — which leagues you are in, their names and invite codes
• Security logs — the authentication provider keeps technical records such as the IP address and time of a sign-in, to prevent abuse

Your display name and results are visible only to players in the same league. A league is invisible to anyone without its invite code.

Legal basis: this data is processed to provide the league service you asked for (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)).

Account and league data is hosted by Supabase; authentication and the database run on its servers in the Frankfurt (EU) region, Germany. The data is therefore held outside Türkiye. Supabase processes it only to provide that service, under its own data processing agreement.

Retention periods:

• Data on your device: until you delete the app.
• Account, results and league memberships: until you delete your account.
• Provider backups: deleted data may remain in backups for a while and is overwritten on the provider’s backup cycle.

Your data is not sold, rented or shared with third parties for their own purposes.

Supabase privacy information: https://supabase.com/privacy

• Location, contacts, photos, camera, microphone
• The advertising identifier, or tracking across apps and websites
• Health, biometric or financial data
• Anything about how you use the app beyond the results listed above

The app requests no location, camera, microphone or contacts permission.

SPAN is not directed at children under 13, and its store listing declares its audience accordingly. We do not knowingly collect data from anyone under 13.

If you believe a child under 13 has created an account, write to info@e2sstudio.com and the account will be deleted.

Inside the app: League tab → the row showing your name → “Delete account”. It asks you to confirm once.

Without the app: email info@e2sstudio.com from the address the account uses, with the subject “SPAN account deletion”. The account is deleted within 30 days at the latest.

What is deleted:

• Your account, your email address and your display name
• Every daily result you have submitted
• All of your league memberships

If you founded a league that other players are still in, the league is not destroyed; it passes to its longest-standing member. A league with nobody else in it is deleted with your account.

Your root, your museum and your Essence are not deleted, because they live on your device and were never part of the account. Removing the app deletes them too.

Under Article 11 of the KVKK and under the GDPR you have the right to learn whether your data is processed, to request information, to access your data, to have it corrected, exported or erased, to object to its processing, and to complain to a supervisory authority.

Write to info@e2sstudio.com with any request and we will answer within 30 days at the latest. Deleting your account, as above, does all of it at once.

Questions, bug reports and requests: info@e2sstudio.com · E²S Studio (Sole Proprietorship · Davutpaşa Tax Office · Tax ID: 7960782593)

If we update this policy, the effective date on this page changes with it. If the kinds of data collected change materially, we will say so inside the app as well.