Who we are
Favo Games is the trade name of NK Kurumsal Teknoloji Çözümleri Sanayi ve Ticaret Limited Şirketi ("Favo Games", "we", "us"), Esentepe Mah. Büyükdere Cad. No:199-6, Şişli, 34394 İstanbul, Türkiye.
We are the data controller for the data described here, under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU and UK General Data Protection Regulation (GDPR).
What this policy covers
- The website favogames.com, including its contact form and job applications.
- Our Android game Cryptogram - Mega Words.
- Our game Rebus Master has its own policy at rebusmaster.com/privacy.
At a glance
| What | Why | How long |
|---|---|---|
| Server and security logs | Deliver the site and keep it safe | A limited time, then deleted automatically |
| Contact form messages | Reply to you | Up to 24 months after our last message |
| Job applications and CVs | Assess your application | Up to 12 months, then deleted |
| Game news and early access sign-ups | Tell you when a game launches or a test opens | Until then, at most 24 months |
| Google Analytics (website) | Count visits and improve the site | Only if you click Accept · 14 months |
| Cryptogram: ads, analytics, crash reports | Fund the free game, fix bugs, improve levels | Set by each provider (see below) |
On the website
When you visit
Our host, Hetzner Online GmbH (Germany), and our network and security provider, Cloudflare, Inc., process technical data so the site loads and stays safe: your IP address, the date and time, the page you asked for, the address you came from, and your browser and device type. Our host keeps these logs for a limited time and then deletes them automatically. We look at them only to fix problems or stop abuse.
Cloudflare may set a short-lived security cookie (__cf_bm) to tell people from bots. Our fonts and scripts load from our own servers, not from Google Fonts.
When you contact us
The contact form sends us what you type: your name, email address, who you are (player, publisher, investor or press), and the details you choose to add, such as your company, the game, the topic, your device, an order number, a level, the times you prefer for a call, and your message. The message arrives in our mailbox, which is also hosted by Hetzner in Germany.
We use it only to reply and to follow up on what you asked. We keep it for up to 24 months after our last message, or longer only if the law requires it, for example for an agreement or an invoice.
When you apply for a job
The application form sends us the role, your name, email address, an optional link to your work, your CV, your message, and your answer to our optional puzzle. We use it only to assess your application and to talk to you about it.
We keep your application for up to 12 months, then delete it. You can ask us to delete it earlier at .
When you ask for game news or early access
If you leave your email address in a "Notify me" or "Get early access" box, we use it only for that: one email when the game launches, or an invite when a test opens. We keep it until then, for up to 24 months. To be removed earlier, write to .
Spam protection
Our forms use Cloudflare Turnstile to check that a person, not a bot, sends them. Turnstile processes your IP address and technical signals from your browser for this check only.
Analytics, only with your consent
If you click Accept in our cookie banner, we use Google Analytics 4 (Google Ireland Limited and Google LLC) to count visits and see which pages help people. It records the pages you view, how you reached us, your approximate location, your device and browser type, and simple actions such as sending a form. Google Analytics does not log or store IP addresses for visitors from the EU. We switched off Google signals and ad personalization for the website.
Google Analytics sets the cookies _ga and _ga_RZ29PLBBQC and keeps the data for 14 months. If you click Reject, Google Analytics does not load at all. You can change your choice at any time with Cookie settings at the bottom of every page.
Saved in your browser only
The site saves a few small notes in your browser, not on our servers: your cookie choice, your motion setting, your progress in the AHA hunt and on the level map, hints you already saw, and an unsent contact message (for 14 days, and never your name or email address). They never leave your device. You can delete them in your browser settings.
Links to other services
Links to the App Store, Google Play, LinkedIn and Rebus Master take you to services with their own privacy policies.
In Cryptogram - Mega Words
Cryptogram is free to play. Ads and optional purchases pay for it. We do not ask for your name, email address or location to play.
| What happens | Provider | Data involved |
|---|---|---|
| Ads | CAS.ai mediation platform (CLEAR INVEST LTD) and its partner ad networks, such as Google AdMob | Advertising ID, IP address, device and app information, ad views and taps |
| Consent for ads | The consent form in the game (CAS.ai and Google tools) | Your consent choices |
| Analytics | Google Firebase Analytics | App instance ID, app interactions such as levels played and buttons tapped, device information, the player name you set in the game |
| Crash reports | Google Firebase Crashlytics | Crash logs, device and app information |
| Notifications | Google Firebase Cloud Messaging | A notification token for your device |
| Optional Facebook login | Meta Platforms Ireland Limited | Your Facebook public profile (first name and profile picture), shown in the game |
| App events | Facebook SDK (Meta) | App opens and in-game spending of coins, with device identifiers, to measure the app |
| Purchases | Google Play | What you bought and when. Google handles the payment; we never see your card. |
| Ratings and sharing | Google Play In-App Review, Android share sheet | Only what you choose to rate or share |
Your choices in the game
- Ads: in the EEA, the UK and Switzerland, the game asks for your consent before it shows personalized ads. Elsewhere, you can turn off personalized ads and reset or delete your advertising ID in your Android settings.
- Notifications: turn them off in your Android settings at any time.
- Facebook login is optional. You can play without it and remove the app from your Facebook settings.
- Your progress is saved on your device. Uninstalling the game deletes it. To ask us to delete data linked to your app, write to .
Cryptogram is not directed at children under 13, and we do not knowingly collect personal data from them.
Why we may use your data
- Your consent: Google Analytics on the website, game news and early access emails, personalized ads in Cryptogram, Facebook login, and keeping your job application.
- Steps before a contract: talking to you about a job, a publishing deal or an investment.
- Our legitimate interests: replying to messages, keeping our services safe, fixing crashes, and measuring and funding our free game with ads.
- Legal obligations: keeping records that the law requires.
Under KVKK, we rely on the matching grounds in Article 5 and, for consent, your explicit consent.
Transfers outside Türkiye and the EEA
Some of these providers process data in other countries, including the United States. We use them only with safeguards such as standard contractual clauses and, for US companies certified under it, the EU-U.S. Data Privacy Framework. For transfers from Türkiye, we follow Article 9 of KVKK.
Your rights
You can ask us to:
- tell you whether we process your data, and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, or limit how we use it;
- stop using your data for a purpose you object to;
- give your data to you or to another company in a common format, where the law allows;
- withdraw a consent at any time (this does not affect what we did before).
Under KVKK Article 11, you also have the right to learn the purpose of the processing, the parties we transfer data to, and to claim compensation for damage caused by unlawful processing.
Write to or send a letter to our address. We reply within 30 days, and free of charge in most cases. We may ask you to confirm your identity first.
You can also complain to the Turkish Personal Data Protection Authority (KVKK Kurumu) or, in the EU and UK, to your local data protection authority.
Security
We use encrypted connections (HTTPS), limit who can access data, and collect only what we need. No method is perfect, so please do not send us passwords or payment details by email.
Changes to this policy
We update this page when our services change. The date at the top shows the latest version. If a change is important, we will say so on the website or in the game.
Contact
NK Kurumsal Teknoloji Çözümleri Sanayi ve Ticaret Limited Şirketi
Esentepe Mah. Büyükdere Cad. No:199-6, Şişli, 34394 İstanbul, Türkiye