Local progress.
Clear choices.

1. Scope and Data Controller

This Privacy Policy explains how Mehdi YILDIRIM, publishing under the Logosmind name, handles information in connection with Vesperline.

This Privacy Policy applies to:

• the iOS and iPadOS versions of Vesperline;
• the Android version of Vesperline, if made available;
• development, testing and preview builds of the game;
• the Vesperline webpages available under logosmind.app/vesperline; and
• support, privacy and other correspondence concerning the game.

Mehdi YILDIRIM is the independent developer, publisher and data controller responsible for these activities and is based in Istanbul, Türkiye.

Logosmind is a commercial name, publishing brand and storefront used by Mehdi YILDIRIM and is not a separate legal entity.

Contact details are provided in Section 15 below.

Platform references in this Policy do not mean that every platform or feature is currently available. The current configuration described below is as of 19 September 2026.

2. Data Stored Locally on Your Device

Vesperline stores a local run checkpoint: seed and route, current stage and wave, enemies and remaining health, player health, earned gold, powers, item charges and progression state. These records support Continue Stage. A new run replaces the previous run.

The purchase-enabled release also keeps a cached Full Game entitlement and a bounded record of recent transaction identifiers to avoid acknowledging the same purchase more than once. These records are separate from the run save. Starting a new run does not remove a purchase entitlement.

Display, audio and haptic options control behaviour on the device. Where available, device gravity readings are used transiently for decorative background movement; they are not recorded or sent to Logosmind. Reduce Motion disables this decorative movement. Haptics are generated locally and can be disabled separately.

The game does not upload run saves. It has no account sign-up or cloud run save. Optional GameAnalytics collection in participating TestFlight builds is described in Section 4. Purchase-enabled builds send Apple-signed purchase proofs or Google Play purchase tokens to our Cloudflare-hosted ownership service as described in Section 7. The game does not access the camera, microphone, photo library, precise location, IDFA or cross-app tracking identifiers.

3. App Network and Platform Use

Core pinball gameplay works offline. Optional gameplay analytics remains off until explicit consent; no advertisements are requested. Apple’s StoreKit services communicate with Apple for product information, verification, transaction status and restoration. Purchase-enabled builds also send signed purchase proofs to our Cloudflare ownership service; Apple can send signed purchase and refund notifications to that service. Website and email links open external services only when selected.

Apple and TestFlight may independently process download, installation, update, crash, diagnostic, feedback and purchase information under their own policies and your settings. Logosmind may receive the information Apple makes available to developers. TestFlight purchases use Apple’s sandbox and do not charge real money.

See Apple’s Privacy Policy and TestFlight’s data information. Android test builds include Google Play Billing. Product availability depends on the build and whether purchasing has been activated. The initial Android internal test does not offer purchases. When activated, Google Play provides product information, processes purchases and restores eligible ownership. Google Play may independently process installation, purchase, diagnostic and feedback information under Google’s Privacy Policy (https://policies.google.com/privacy) and your platform settings. Test-track membership alone does not make purchases free; only Google-designated test payment methods are test transactions.

4. Optional TestFlight Analytics

Participating 1.0.4 TestFlight builds offer optional GameAnalytics to understand progression and balance stamina, items and earned-gold prices. The published 1.0.3 App Store version does not contain this integration. Analytics is OFF by default and is offered separately to players who confirm they are at least 16. Declining has no effect on gameplay or purchases. No analytics events or identifier are created before consent.

After consent, we send a random installation identifier, random session identifier, session counts and duration, tutorial/run/round outcomes, aggregate stamina presses/weak returns/timed returns, earned-gold and item transactions, purchase-request/verified/restore outcomes, timestamps, app build, platform and OS version. These records are pseudonymous personal data, not anonymous. No name, email, advertising/vendor identifier, Apple receipt, payment details, full run checkpoint, precise location or free-form player content is sent to GameAnalytics. We do not combine this identifier with purchase-ownership records or use it for advertising or cross-app tracking. GameAnalytics processes request IP addresses to derive country.

Mehdi YILDIRIM / Logosmind is the controller; GameAnalytics processes these analytics on our behalf. The legal basis for this optional collection is consent. Processing may occur outside your country; GameAnalytics describes its subprocessors and applicable transfer safeguards, including standard contractual clauses, in its trust documentation: GameAnalytics developer privacy policy. Apple/platform and purchase processing remain separate (Sections 3 and 7).

The device queue is limited to 512 events and seven days; older data is dropped before submission. The random identifier and permission record remain locally while enabled. Settings > Share gameplay analytics > OFF stops new collection and removes the local identifier and unsent queue. Re-enabling creates a new identifier and never replays declined-period behavior. Already received data is not automatically deleted by withdrawal or uninstall. GameAnalytics reporting retention varies by event and metric; see retention practices. Contact mehdi.yildirim@logosmind.app for access or deletion requests; identifying a record may require the analytics ID shown in Settings before switching off. No fixed server-deletion deadline is promised by the local OFF control.

Before a future service changes these practices, we will update this Policy and the relevant in-app and store disclosures to describe its data categories, purposes, recipients, legal bases, retention, international transfer safeguards and user choices. Consent-dependent processing will remain disabled until any required permission or choice is obtained.

Declining optional analytics or tracking consent will not remove access to otherwise available gameplay, paid content, purchase features, legal information or support. Acknowledging a privacy notice is not advertising consent, Terms acceptance or age verification.

5. Advertising and Tracking

The first release is ad-free. Vesperline has no active advertising provider, rewarded advertisements, tracking pixels, Google UMP integration, device fingerprinting or access to IDFA. No Apple App Tracking Transparency permission is currently requested.

Advertising may be considered later, but no provider or format is currently committed. Before activation, we will publish updated data practices and implement the required privacy choices. Any cross-app tracking requiring Apple ATT would need its own permission; buying the game, supporting the developer or acknowledging these notices does not supply that permission.

See Privacy Choices for the controls relevant to the current release.

6. The Vesperline Website

The Vesperline website is not intended to use advertising cookies, advertising pixels, device fingerprinting or similar technologies to track visitors for behavioural advertising.

Infrastructure used to host, secure and deliver the website may process standard technical request information such as:

• IP address;
• requested URL;
• basic browser information;
• basic device or operating-system information;
• date and time information;
• connection records; and
• security-related information.

This information may be processed in order to:

• provide and deliver the website;
• maintain availability;
• protect the website and related infrastructure;
• detect or prevent attacks and abuse;
• diagnose technical problems; and
• maintain security.

The Vesperline website may use Cloudflare or similar infrastructure, security and delivery services.

Logosmind does not use standard website infrastructure records to build behavioural advertising profiles of players or to target personalized advertising.

Third-party infrastructure providers may process information as part of their own services and in accordance with their own privacy policies, terms and technical practices.

Cloudflare’s cookie-free Real User Measurement (RUM) beacon may also send page-performance measurements, page and referrer URLs and a per-page identifier to Cloudflare. It does not use browser storage to track visitors across websites. Logosmind uses these measurements for website performance, not behavioural advertising or player profiling. See Cloudflare’s RUM documentation and Cloudflare’s Privacy Policy.

7. Purchases and Payment Information

The purchase-enabled release offers Full Game, a restorable non-consumable unlock, and optional repeatable Support the Developer purchases, which grant no gameplay advantage and are not restorable entitlements. Availability depends on the installed build, purchase-service activation and the relevant Apple or Google Play storefront.

Apple processes iOS payments; Google Play processes purchases in supported Android builds. Logosmind does not receive or store full payment-card details. The app receives product identifiers, localized prices, verified purchase or entitlement status, transaction identifiers and refund or revocation status as needed to fulfil, restore and avoid duplicate handling of purchases.

A local entitlement cache and a bounded queue of Apple-signed purchase proofs are stored on your device. After a verified purchase or restoration, the app sends the signed proof over HTTPS to our ownership service on Cloudflare Workers and D1. Our service checks purchase status with Apple. Apple also sends signed purchase, refund and revocation notifications. No run save, gold balance, health, item build or gameplay history is sent. A temporary connection or service failure queues a retry and does not by itself remove cached Full Game access.

The ownership database stores the Apple transaction and original transaction identifiers, product identifier, production or sandbox environment, ownership type, purchase and signing dates, refund or revocation status, a one-way proof digest, and first-seen/update times. It also records signed notification identifiers and separate Full Game, ad-free and any explicitly granted Founder rights. These pseudonymous purchase records are personal data when they can relate to an individual. We do not store your name, email address, Apple Account identifier, payment-card details or raw signed proof in this database.

Android review access: reviewers who receive a developer-provided code can enter it in Legal & Help. The app sends the code, Android platform and app package identifier over HTTPS to our Cloudflare service for verification. We store only a one-way digest of the configured code on the server; submitted codes are not logged or stored in the purchase database. Access is held in memory for the current app session and must be verified again after restarting. No purchase, account, device identifier or gameplay upload is created by this feature. Cloudflare processes network metadata for delivery and abuse prevention as described below.

On Android, the app keeps a bounded private purchase-token journal and a separate ownership cache. When purchasing is enabled, it sends the token and product identifier over HTTPS to our Cloudflare service. The service verifies the current purchase with Google before granting ownership or acknowledging or consuming a purchase. The Google ledger stores a one-way token digest, product identifier, production or test environment, purchase time, state and record timestamps. It does not store the raw token, your Google account identity, name, email address or payment-card details. Purchase tokens remain in private device storage where needed for retries and restoration. Ownership is rechecked on store connection, app resume and Restore; the current Android integration does not receive Google push refund notifications. No gameplay or run-save data is uploaded.

We use these records to fulfil purchases, restore eligible access, prevent duplicate handling and maintain benefits for eligible purchasers. Full Game owners retain an ad-free game if advertising is introduced later. Purchase dates are retained so a future Founder programme can recognize eligible earlier purchases under its published rules; no Founder eligibility cutoff or additional benefit is currently promised. Developer support grants no Full Game, ad-free or Founder entitlement.

Cloudflare processes service requests on our behalf, including network information such as IP address and request metadata for delivery, security and rate limiting. Application receipt logs and Worker request tracing are disabled. D1 is provisioned with EU jurisdiction; this does not mean all Worker processing, Cloudflare operational information or international transfers remain in the EU. Cloudflare’s applicable privacy terms and safeguards apply.

Purchase and entitlement records are retained while reasonably needed to provide durable ownership and related benefits, resolve refunds or disputes, prevent fraud, or meet legal obligations. Periodic review removes information no longer needed; provider backups follow their retention cycle. Contact mehdi.yildirim@logosmind.app about access, correction or deletion. We may need proportionate proof that a record belongs to you, and lawful exceptions may require retention. Never email a signed purchase proof, Google Play purchase token, password or payment-card information. Deleting a server record does not cancel a store purchase or delete records held by Apple or Google.

Deleting local app data removes local purchase records but does not delete records held by Apple or Google. Eligible Full Game access can be restored using the purchasing account in the same store. Purchases do not transfer between Apple and Google Play, and restoring ownership does not restore a deleted run. Requests about platform-held payment information should use the relevant platform’s account and privacy controls. See the purchase terms.

8. Support Correspondence

If you contact us by email or another available support channel, we may receive:

• the email address you use;
• your message;
• screenshots you choose to provide;
• logs or error information;
• device or operating-system information; and
• other information you voluntarily provide.

We may use this information to:

• respond to your request;
• provide support;
• investigate gameplay or technical problems;
• investigate security incidents;
• prevent fraud or abuse; and
• maintain a reasonable record of the request and its resolution.

Support correspondence is retained only for as long as reasonably necessary for these purposes or as required by applicable law.

Logosmind does not use support correspondence for behavioural advertising.

Logosmind does not sell personal information contained in support correspondence.

Unless we specifically explain why it is reasonably necessary for your request, please do not send:

• passwords;
• payment-card information;
• government-issued identification; or
• other highly sensitive information.

9. Purposes, Legal Bases and Information Sharing

Information may be processed for purposes including:

• providing and operating Vesperline;
• preserving game functionality and user settings;
• responding to support requests;
• maintaining security;
• preventing fraud, abuse or misuse;
• diagnosing technical problems;
• complying with legal or platform requirements;
• processing and validating purchases;
• protecting legal rights; and
• establishing, exercising or defending legal claims.

Device-local game information remains on the device unless a feature expressly transmits it.

Where processing relies on consent, the user may withdraw that consent through available privacy controls or by using an applicable contact method described in this Policy.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal took effect.

Where applicable, processing may also rely on another lawful basis, including where processing is necessary to:

• enter into or perform a contract;
• comply with legal obligations;
• pursue legitimate interests permitted by applicable law;
• protect legal rights; or
• establish, exercise or defend legal claims.

Information may be shared with or made available to the following persons or entities only where reasonably necessary:

• Apple;
• Google;
• website, server and infrastructure providers;
• hosting and security providers;
• email service providers;
• analytics providers, if enabled;
• crash-reporting providers, if enabled;
• advertising, attribution or measurement providers, if enabled;
• professional advisers; and
• courts, regulators, law-enforcement authorities or other competent authorities where disclosure is required or permitted by law.

Some service providers may process information outside the country in which the user is located.

Where required by applicable law, appropriate safeguards for international transfers will be implemented before the relevant production processing is enabled.

Logosmind does not sell personal information that it controls through Vesperline.

10. Retention, Deletion and Privacy Choices

You may remove locally stored game information by deleting Vesperline or by using applicable storage-clearing mechanisms made available by your device or operating system.

Because the current development/preview configuration:

• does not require an account; and
• does not upload its local run checkpoint,

Logosmind generally cannot remotely identify, access, recover or delete the local game save stored on your device.

Subject to applicable law, you may have rights to request:

• access to personal information we control;
• correction of inaccurate or incomplete information;
• deletion of personal information;
• restriction of certain processing;
• objection to certain processing;
• withdrawal of consent; and
• other privacy or data-protection rights available in your jurisdiction.

The availability and scope of these rights depend on applicable law and may be subject to lawful limitations or exceptions.

We may take reasonable steps to verify the identity or authority of a person making a privacy request.

Analytics Withdrawal

In participating TestFlight builds, Settings > Share gameplay analytics > OFF stops collection and removes unsent analytics and the local identifier. Data already sent is separate; contact the privacy address for an access or deletion request. See Section 4 for data categories and provider retention information.

Withdrawal does not automatically require deletion of information that was lawfully processed before consent was withdrawn.

Before extending this TestFlight integration to a public App Store release, we will review:

• whether received analytics information can be associated with a particular user;
• applicable retention periods;
• deletion procedures; and
• lawful retention exceptions.

Where information is genuinely anonymous and cannot reasonably be associated with an identifiable individual, certain privacy rights may not apply to that information.

Deleting the app does not delete Apple or Google purchase records, any separately held provider information or device backups. Platform backup and restore settings may affect local data. Use the relevant provider’s privacy and account controls for information it holds. Support and website operational records are retained only as long as reasonably necessary for their stated purposes or applicable legal obligations.

11. Children and Younger Users

Vesperline is a general-audience game and is not intended for children under the age of 13.

Users must be at least 13 years old to use Vesperline.

If a user is under the age of legal majority in the country or region where they live, use of Vesperline may require the permission or supervision of a parent or legal guardian as required by applicable law.

Vesperline does not currently require users to create an account.

Optional TestFlight analytics is offered only to players confirming age 16 or older; younger players should keep it OFF. We do not request a birth date or transmit the age confirmation. This analytics choice does not change the game's existing age and guardian-permission requirements.

Where applicable law requires parental or legal-guardian consent for processing personal information relating to a minor, consent-dependent processing will not be enabled unless the required consent or another valid legal basis is available.

We do not knowingly serve personalized or interest-based advertising to minors where such advertising is prohibited by applicable law, platform rules or applicable advertising-service requirements.

If you are a parent or legal guardian and believe that a child has provided personal information to Logosmind, please contact us so that we can review the circumstances and take appropriate action, including deletion where required by applicable law.

12. Security and Data Breaches

Logosmind uses reasonable technical and organizational measures appropriate to the nature of the information processed and the operation of Vesperline.

However, no method of electronic storage, transmission or security is completely secure, and absolute security cannot be guaranteed.

If Logosmind becomes aware of a personal-data breach, security incident or unauthorized disclosure involving information under its control, Logosmind will investigate the incident and take reasonable steps to contain, mitigate and remediate it.

Where applicable law requires notification to affected individuals, regulators or other competent authorities, Logosmind will provide the required notification within the applicable legal timeframe.

13. Regional Privacy Information

13.1 United States

Users located in the United States may have privacy rights under federal or state law depending on the state in which they reside, the nature of the information processed and whether the relevant law applies to Logosmind.

Where applicable, such rights may include rights relating to:

• access;
• correction;
• deletion;
• obtaining information about categories of personal information processed;
• opting out of certain forms of targeted advertising, sale or sharing; and
• appealing certain privacy-request decisions.

Logosmind does not sell personal information through Vesperline.

Where an applicable U.S. privacy law provides additional rights, Logosmind will honor those rights as required by law.

13.2 Japan

Users located in Japan may have rights under applicable Japanese privacy and data-protection laws regarding personal information controlled by Logosmind.

Where applicable, users may request information concerning the handling of their personal information and may exercise rights relating to access, correction, suspension of use or deletion as provided by applicable law.

Additional disclosures required specifically for users in Japan may be provided through:

• this Privacy Policy;
• a separate legal disclosure page;
• Vesperline;
• the Logosmind website; or
• the applicable Apple App Store or Google Play listing.

Nothing in this Privacy Policy limits rights that cannot lawfully be waived under applicable Japanese law.

13.3 Singapore

For users located in Singapore, Logosmind handles personal data in accordance with applicable requirements of Singapore’s Personal Data Protection Act 2012 (PDPA) where the PDPA applies.

Subject to applicable law, users may contact Logosmind regarding access, correction, consent withdrawal or other requests concerning personal data under Logosmind’s control.

Logosmind has designated a person responsible for overseeing relevant data-protection matters for Singapore.

Data Protection Officer / Privacy Contact for Singapore:

Mehdi YILDIRIM

Email: mehdi.yildirim@logosmind.app

Where a data breach is subject to notification obligations under applicable Singapore law, Logosmind will provide the required notifications to the relevant authority and/or affected individuals as required.

14. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect:

• changes to Vesperline;
• changes to technical architecture;
• new or modified data-processing practices;
• changes to analytics or advertising systems;
• third-party service changes;
• platform requirements; or
• applicable legal requirements.

This Privacy Policy will be updated before a feature is enabled that materially changes the data practices described here where prior updating is required or appropriate.

The revised Privacy Policy will display an updated effective date, last-updated date or version information.

Where applicable law or platform requirements require notice, permission, consent or another user choice before a material change takes effect, the required action will be taken before the relevant consent-dependent processing begins.

In particular, this Privacy Policy and applicable in-app disclosures will be reviewed before enabling:

• production analytics;
• production advertising;
• cross-app tracking;
• Apple IDFA access;
• new advertising identifiers;
• cloud accounts or cloud save;
• materially different crash or telemetry reporting; or
• another materially different collection or sharing practice.

15. Contact

Vesperline is developed by Mehdi YILDIRIM and published under the Logosmind name in Istanbul, Türkiye.

Logosmind is a commercial name, publishing brand and storefront used by Mehdi YILDIRIM and is not a separate legal entity.

General Support

support@logosmind.app

Privacy and Personal Data

Mehdi YILDIRIM

Istanbul, Türkiye

Email: mehdi.yildirim@logosmind.app

For privacy-related emails, we recommend using:

“Vesperline Privacy”

as the subject line.

For users in Singapore, the above privacy contact also serves as the designated Data Protection Officer / privacy contact.

Unless we specifically explain why such information is reasonably necessary for your request, please do not send passwords, full payment-card information, government identification or other highly sensitive information.