This page explains how KaBooom handles personal data under Turkey’s Personal Data Protection Law No. 6698 (KVKK). Read it alongside the privacy policy, which describes the same processing in general terms.
Data controller
KaBooom is the data controller (veri sorumlusu) for the data described here. Contact: privacy@kabooom.live.
Which data is processed
Players: a nickname and in-game answers. Hosts: an email address, a display name, the quizzes they create and the reports their games produce. Visitors to this site: the requests their browser makes to it, including the IP address, and cookieless aggregate analytics.
When visitors use the contact page or players join a room: Cloudflare processes browser signals and IP addresses for an automated check (Cloudflare Turnstile) to distinguish people from scripts. KaBooom receives the check outcome and does not store an IP address with a beta request.
People who try to sign in to Studio during its private beta before receiving access: the email address and name provided by Google, and the time and number of attempts. When someone submits the beta form, we collect identity and contact data (name and Google sign-in address), room size, the occasion you describe, optional organization and message, and the page language. These form answers are sent only on submission. Requests and form answers are deleted 30 days after the last contact; submitting again or attempting sign-in restarts this period. They are deleted immediately when access is granted or the request is dismissed. No IP address is stored with the request.
Purpose and legal basis
Data is processed to deliver the service you asked for — running a game, producing a report, billing a subscription — and to keep that service secure and available. The bases relied on are performance of a contract and legitimate interest, and for optional features, consent.
Visits to this site are also measured, in aggregate and without cookies, to understand how the site is used. The basis for that is legitimate interest.
Automated checks protect the contact form against bots and help protect rooms against bot flooding and attempts to guess room PINs. The basis for that is legitimate interest.
Sign-in attempts by people without Studio beta access are recorded so that the beta administrators can grant access. Beta form answers are processed to decide on and reply to a beta request. The basis for both is legitimate interest.
Transfers
This website is served, and its cookieless analytics measured, by Cloudflare on its global network, so the requests a visitor’s browser makes to the site, including the IP address, are processed by Cloudflare, possibly outside Turkey and the EU. The bot checks on the contact page and before joining a room are also operated by Cloudflare, so the browser signals and IP address it uses may likewise be processed outside Turkey and the EU. Payment processing is carried out by a merchant of record, which receives billing data and never shares card details with us.
Your rights under Article 11
You may learn whether your personal data is processed and request information about it; learn its purpose and whether it is used accordingly; know the third parties it is transferred to; request correction of incomplete or inaccurate data; request erasure or destruction; require that corrections and erasures be notified to third parties; object to a result produced solely by automated analysis; and claim compensation for damage caused by unlawful processing.
Send requests to privacy@kabooom.live. We respond within thirty days.
The Turkish version of this site includes a Turkish-language KVKK disclosure (aydınlatma metni).
Contact
For questions about these policies, contact privacy@kabooom.live.