Privacy Policy and Data Protection

Last Updated: November 3, 2026

Application: THE LAST CAT: Rebellion

Data Controller: Moon Paw Studios

Contact: info@moonpawstudios.co

1. Introduction

This Privacy Policy explains how personal information is collected, processed, stored, transferred and protected when using THE LAST CAT: Rebellion, an online platform game.

The game is designed for a general audience aged 13 and older and is not specifically directed at children under 13.

By using the application, you acknowledge that you have been informed about the data processing practices described in this policy. This acknowledgement does not constitute consent where separate consent is legally required.

Personal information is processed in accordance with applicable data protection laws, including the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the European Union General Data Protection Regulation (GDPR).

2. Information We Collect

To provide the game's features, we may process the following categories of information:

2.1. Account and Identification Information

• Email address (guest accounts use a random account identifier instead of an email address).
• Player name or username.
• Account identifier and session information.

This information is used to create, authenticate and manage player accounts.

2.2. Gameplay and Performance Information

• Game scores.
• Completed levels and stages.
• Achievements and gameplay progress.
• Saved game data.
• Game preferences and settings.
• Friend code and friend relationships.

This information is used to maintain game progress across devices, operate online leaderboards and provide ongoing gameplay services.

Your player name, scores and friend code are visible to other players in leaderboards and friend lists. We recommend not using your real name as your player name.

Your saved game and sign-in session are also stored locally on your device.

2.3. Advertising and Device Information

• Advertising ID.
• Advertising impressions and interaction information.
• Technical information relating to the application and device.
• Crash reports and performance logs.

This information may be used to display advertisements, measure advertising performance, maintain security and troubleshoot technical issues.

Personalized advertising and the use of advertising identifiers are subject to applicable consent requirements and user preferences.

2.4. Purchase and Transaction Information

In-app purchases offered through the game are processed through Google Play and Apple App Store.

Information such as transaction identifiers, product details and purchase status may be processed to verify purchases, provide purchased digital content and manage transactions.

Payment card numbers and banking details are not directly collected by the developer. Such information is handled by the relevant app store's payment infrastructure.

2.5. Website and Contact Forms

Information you enter in the contact and waitlist forms on moonpawstudios.co (name, email address, message, selected topic) is processed to answer your request and, for the waitlist, to inform you about the game's release. The website is hosted on Netlify infrastructure; Netlify may process connection data such as IP addresses for technical purposes. The website stores your language choice only in your browser and does not use tracking cookies.

3. Purposes of Data Processing

We may process personal information for the following purposes:

• Creating and managing user accounts.
• Authenticating player identities.
• Creating and updating online leaderboards.
• Storing gameplay progress and saved games in the cloud.
• Synchronizing gameplay across devices.
• Verifying and delivering purchased digital content.
• Displaying advertisements and measuring advertising performance.
• Maintaining application security.
• Preventing cheating, fraud and unauthorized access.
• Identifying technical issues and improving the application.
• Responding to user support requests.
• Complying with legal obligations.

Personal information will not be used for purposes incompatible with those described in this policy.

4. Legal Bases for Processing

Personal information is processed under the applicable legal grounds set out in Article 5 of KVKK and Article 6 of GDPR, as relevant to each processing activity.

These grounds may include:

• Performance of a contract or steps necessary to provide the game services.
• Compliance with legal obligations.
• Legitimate interests, such as service security and fraud prevention, where these interests do not override users' rights and freedoms.
• Consent for personalized advertising and other optional processing activities where required.

Where consent is required, it will be requested separately and freely. Users may withdraw their consent at any time for future processing.

Refusing optional advertising or tracking activities will not unnecessarily prevent access to the game's essential features.

5. Sharing of Personal Information

Personal information may be shared with the following parties to the extent necessary to provide our services:

Supabase

Used to store and manage player accounts, usernames, scores and saved game data in cloud infrastructure.

Netlify

Used to host the website and receive contact form submissions.

Advertising Providers

Relevant information may be shared with advertising providers to display advertisements, measure advertising performance and provide personalized advertising where consent has been obtained when required.

Google Play and Apple App Store

Necessary transaction information may be shared with the relevant app stores for application distribution, in-app purchases, payment verification and delivery of digital content.

Technical Service Providers

Necessary information may be shared with third-party providers of hosting, security, crash reporting and technical support services.

Information may also be disclosed to competent public authorities or judicial bodies where required by applicable law.

Third-party service providers may process information under their own privacy policies and data processing agreements.

6. Data Storage and International Transfers

Player accounts, scores and saved game data may be stored using Supabase infrastructure.

The physical storage location depends on the server region configured for the relevant service.

Certain information may be processed or stored outside Türkiye by advertising providers and app store service providers.

Transfers of personal information outside Türkiye will take place only where the applicable requirements and safeguards under Article 9 of KVKK are satisfied.

Transfers from the European Economic Area will be conducted in accordance with Articles 44–49 of GDPR, including applicable adequacy decisions, appropriate safeguards or other valid transfer mechanisms.

7. Data Retention

Personal information is retained only for as long as necessary for the purposes described in this policy.

• Account information: While the account remains active and until the deletion process is completed.
• Scores and saved game data: For as long as necessary to provide the gaming services.
• Purchase records: For the period required by applicable financial and legal obligations.
• Advertising and technical logs: For the period necessary for their respective purposes and legal requirements.

When information is no longer required, it will be deleted, destroyed or anonymized. Data stored in backups will be deleted according to the applicable backup retention schedule.

8. Account and Data Deletion

Users may request deletion of their accounts and associated personal information.

Deletion requests may be submitted through:

• The account deletion feature within the application (Profile & rankings > Account > Delete account).
• An email sent to info@moonpawstudios.co.

Requests should include sufficient information to identify the relevant account. Additional verification may be required to protect account security.

Deletion requests will be processed subject to applicable legal retention obligations and other lawful exceptions.

Player names, scores and saved game data associated with the account will be deleted or anonymized as applicable. Payment records retained by app stores remain subject to the relevant store's policies and legal obligations.

9. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, loss or unlawful processing.

These measures may include:

• Secure connections and data transmission.
• Authentication and access controls.
• Server and database security.
• Security updates.
• Monitoring for unauthorized access and misuse.
• Data backup and recovery procedures.

No internet-based service or storage system can be guaranteed to be completely risk-free. However, we take reasonable and appropriate measures to protect personal information as required by applicable law.

10. Children's Privacy and Age Restrictions

The game is designed for a general audience aged 13 and older and is not specifically directed at children under 13.

We do not knowingly intend to collect personal information from children under the age of 13.

Under Article 8 of GDPR, the age at which parental or legal guardian consent is required for consent-based processing of children's personal information in online services varies between 13 and 16 years depending on the relevant EU Member State.

Where required, appropriate parental or legal guardian consent and additional safeguards will be implemented in accordance with applicable law.

Advertising and device identifier processing will be restricted in accordance with applicable children's privacy laws and app store policies.

11. Your Rights Under KVKK

Under Article 11 of Turkish Personal Data Protection Law No. 6698, you may have the right to:

• Learn whether your personal information is being processed.
• Request information about processed personal information.
• Learn the purposes of processing and whether information is used accordingly.
• Learn the third parties to whom your information has been transferred.
• Request correction of incomplete or inaccurate information.
• Request deletion or destruction where legally applicable.
• Exercise applicable rights to object and claim compensation for damages.

Requests may be submitted to info@moonpawstudios.co.

Requests will be evaluated in accordance with KVKK and applicable procedures and deadlines.

12. Your Rights Under GDPR

Where GDPR applies, you may have the right to:

• Access your personal information.
• Request correction of inaccurate information.
• Request erasure of personal information.
• Request restriction of processing.
• Request data portability.
• Object to processing based on legitimate interests.
• Withdraw consent.
• Lodge a complaint with the competent data protection authority.

These rights are subject to applicable legal conditions and exceptions.

13. Third-Party Services and App Stores

Our game uses third-party infrastructure and services to provide its functionality.

Supabase, advertising providers, Google Play and Apple App Store may process information within the scope of their respective services.

Their processing activities are governed by their own agreements and privacy policies.

Users are encouraged to review the privacy policies and terms of these third-party services.

14. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in our services or applicable legal requirements.

The latest version will be published on this page. Significant changes may be communicated through the application or other appropriate communication channels.

15. Contact Information

For privacy-related questions, personal data requests or account deletion:

Data Controller: Moon Paw Studios

Address: Ankara, Türkiye

Email: info@moonpawstudios.co

Application: THE LAST CAT: Rebellion