Website privacy and cookie notice
Last updated: 25 October 2026
This notice is given by the data controller GAME Market Anonim Şirketi (Görükle Mahallesi, Üniversite-1 Caddesi, No:933, Bursa Uludağ Üniversitesi Görükle Kampüsü, 16285 Nilüfer / Bursa, Türkiye, MERSİS: 0388173454000001) for the websites at gamestudiocompany.com and its subdomains (paintory.gamestudiocompany.com, shapesmack.gamestudiocompany.com), including under Turkish Personal Data Protection Law No. 6698 ("KVKK"). The games themselves are covered by the privacy policies on their own sites: Paintory, Shape Smack.
The short version
- There are no accounts, forms, cookies, analytics or ad tracking on these sites.
- Pages are served through Cloudflare, which processes your IP address and technical connection details to deliver the page and stop attacks.
- If you email us, we use your address and message only to reply.
Data, purposes and legal bases
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| IP address, browser details, requested address, time (connection logs) | Serving the site, keeping it secure, preventing abuse | Legitimate interest (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)) | Cloudflare's log retention periods |
| Your email address, name and the content of your message | Answering your question, request or business proposal | Establishing and exercising rights and legitimate interest; taking steps towards a contract where your request is about one | Up to 2 years after the conversation ends, or for the limitation period if there is a legal dispute |
Cookies
These sites use no cookies or similar tracking technologies, so they do not ask for cookie consent. The language is chosen by the address (/tr/); nothing is stored on your device.
Transfers
Connection logs go to our infrastructure provider Cloudflare, Inc. (USA) and emails to our email service provider, whose servers may be outside Türkiye. Transfers abroad rely on the standard contracts published by the Turkish Personal Data Protection Board (KVKK Article 9(4)), notified to the Authority within 5 business days of signing, and on the safeguards those providers use for other countries, such as EU Standard Contractual Clauses. Data may be disclosed to public authorities when legally required.
Your rights
You can ask whether we process your data and for access, correction, deletion or restriction, object to processing, and claim compensation for unlawful processing (KVKK Article 11; where the GDPR applies, also portability and the right to complain to your data protection authority). Send your request in writing to Görükle Mahallesi, Üniversite-1 Caddesi, No:933, Bursa Uludağ Üniversitesi Görükle Kampüsü, 16285 Nilüfer / Bursa, Türkiye, or signed with a secure electronic or mobile signature to [email protected]. We answer free of charge within 30 days.