Privacy Policy
Last updated: May 31, 2026 · Effective date: May 31, 2026
1. Introduction
This Privacy Policy explains how Mobiza Teknoloji, operating under the brand name Mobiza Games ("Mobiza", "we", "us", or "our"), collects, uses, discloses, stores, and protects personal information when you use Bistro Bounce (the "Game"), including our mobile applications for iOS and Android, related online services at https://bistrobounce.com, and any support channels that link to this Policy.
Mobiza Teknoloji (Mobiza Games) is the data controller for personal information processed in connection with the Game, unless otherwise stated in this Policy.
Contact details
| Legal entity | Mobiza Teknoloji |
| Brand / trade name | Mobiza Games |
| Website | https://bistrobounce.com |
| support@bistrobounce.com | |
| Phone | +90 850 307 90 23 |
| Address | Osmangazi, Bursa, Türkiye |
| Tax ID (VKN) | 1280527561 |
| Tax Office | Uludağ Vergi Dairesi |
| DUNS | 751143161 |
If you have questions about this Policy or wish to exercise your privacy rights, contact us at support@bistrobounce.com.
This Policy is designed to comply with applicable privacy and data protection laws, including:
- the General Data Protection Regulation (GDPR) and applicable EU member state laws;
- the UK GDPR and Data Protection Act 2018;
- the Turkish Personal Data Protection Law (KVKK – Law No. 6698);
- the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) and other applicable U.S. state privacy laws;
- the Personal Information Protection Act (PIPA) of the Republic of Korea;
- the Act on the Protection of Personal Information (APPI) of Japan;
- platform rules of Apple App Store, Google Play, and applicable advertising/consent frameworks.
Where local law grants you rights or imposes obligations that differ from this Policy, we will honor those mandatory requirements.
2. Scope
This Policy applies to personal information we process when you:
- download, install, launch, or play the Game;
- create or use a game account or device-based player profile;
- connect a social login (Google, Facebook, or Apple / Game Center);
- participate in leaderboards, friends, or team features;
- send or receive in-game chat or team messages;
- make in-app purchases or restore purchases;
- receive push or local notifications;
- view advertisements;
- contact customer support;
- visit pages or services that reference this Policy.
This Policy does not apply to third-party websites, app stores, social networks, ad networks, or payment processors that have their own privacy practices. Those services are governed by their respective policies.
3. Important Notice About Children
Bistro Bounce is intended for a general audience and is not directed to children under 13 years of age (or the minimum age required in your country, if higher).
We do not knowingly collect personal information from children below the applicable minimum age without verifiable parental consent where required by law (including COPPA in the United States and equivalent rules elsewhere).
If you believe we have collected personal information from a child without appropriate consent, contact us at support@bistrobounce.com and we will take appropriate steps to delete such information.
If you are a parent or guardian and allow a minor to use the Game, you are responsible for the minor's use and for ensuring that such use complies with this Policy and applicable law.
4. Information We Collect
We collect information in three ways: (a) information you provide, (b) information collected automatically, and (c) information from third parties.
4.1 Information You Provide
Depending on how you use the Game, we may collect:
- Account and profile information: display name, username/player code, avatar selection, profile frame/nameplate choices, language preferences, and other profile settings you choose.
- Social login information: if you choose to link Google, Facebook, or Apple / Game Center, we may receive identifiers, email address (if provided by the platform), display name, profile photo URL, and authentication tokens necessary to verify your account. Facebook linking may also involve friend-list matching where permitted by Facebook and applicable law.
- Team and social content: team names/descriptions, team chat messages, life-request messages, friend requests, and reports you submit about other users or messages.
- Support communications: information you send when contacting support, including email address, message content, screenshots, and player/account identifiers.
- Purchase-related information: product identifiers, transaction IDs, purchase tokens/receipts, platform (iOS/Android), and purchase metadata needed to validate and deliver virtual items or subscriptions.
We do not require you to create a separate Mobiza account with an email/password to play. You may play using a device-based profile, and social login is optional.
4.2 Information Collected Automatically
When you use the Game, we and our service providers may automatically collect:
- Device and app identifiers: device installation ID, device secret used for account authentication, player ID, and platform-specific identifiers needed for gameplay sync, fraud prevention, and account recovery.
- Device and technical data: device model, operating system and version, app version/build number, platform (iOS/Android), install source/store, browser type (if applicable), language, locale, time zone, time zone offset, network state, IP address, and user agent.
- Gameplay and progress data: levels completed, scores, coins, lives, power-ups, biomes, puzzle progress, inventory, entitlements (including ad-free periods and Chef's Pass status), event logs, leaderboard rank, team membership, moderation status, and other in-game activity needed to operate the Game.
- Usage and analytics data: app opens, screen views, feature interactions, session information, performance events, and other aggregated or pseudonymous usage statistics via Firebase Analytics.
- Advertising data: ad impressions, ad interactions, consent status, and advertising identifiers (such as IDFA on iOS where permitted, and Google Advertising ID on Android) processed by Google AdMob, Yandex Mobile Ads, and related partners subject to your consent/settings.
- Push notification data: Firebase Cloud Messaging (FCM) token, notification delivery/open events, and notification preferences.
- Realtime activity data: current in-app page/activity signals and socket connection metadata used for live team updates and gameplay synchronization.
We do not request access to your device camera, microphone, contacts, photo library, or precise GPS location.
Country/region information may be inferred from your device locale and used for country leaderboards and regional features. This is not precise geolocation tracking.
4.3 Information from Third Parties
We may receive information from:
- Apple App Store / Google Play: purchase validation data, subscription status signals, and refund/chargeback notifications.
- Google, Facebook, and Apple: authentication and profile information when you choose social login.
- Advertising partners: measurement and fraud-prevention signals consistent with your consent and device settings.
- Moderation and safety systems: reports submitted by other users regarding your conduct or messages.
5. How We Use Information
We use personal information for the following purposes:
| Purpose | Examples |
|---|---|
| Provide and operate the Game | Creating and syncing player profiles, saving progress, enabling levels, teams, chat, friends, and leaderboards |
| Authenticate and secure accounts | Device authentication, social account linking, fraud prevention, abuse detection, enforcing moderation actions |
| Process purchases | Validating in-app purchases, delivering virtual currency/items, subscriptions, and entitlements |
| Show advertisements | Displaying banner, interstitial, rewarded, native, and app-open ads where permitted |
| Analytics and improvement | Measuring performance, understanding feature usage, debugging, and improving gameplay |
| Communications | Sending push/local notifications about lives, events, teams, and service updates where permitted |
| Customer support | Responding to requests, troubleshooting, and resolving disputes |
| Legal compliance | Complying with law, responding to lawful requests, enforcing our Terms, protecting rights and safety |
| Consent management | Recording acceptance of legal terms and ad/consent choices |
We do not use your personal information to make solely automated decisions that produce legal or similarly significant effects about you, except where permitted by law and disclosed to you.
6. Legal Bases for Processing (EEA, UK, and Similar Jurisdictions)
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction requiring a legal basis, we rely on the following:
| Legal basis | Processing activities |
|---|---|
| Performance of a contract | Providing the Game, syncing progress, processing purchases, operating social/team features you choose to use |
| Legitimate interests | Security, fraud prevention, analytics, service improvement, non-intrusive advertising where permitted, enforcing Terms, and defending legal claims, balanced against your rights |
| Consent | Personalized advertising/tracking where required (including iOS App Tracking Transparency and Google UMP/consent flows), optional notifications, and optional social features where consent is required |
| Legal obligation | Tax, accounting, regulatory, and law-enforcement obligations |
| Vital interests / public interest | Rare cases involving safety or serious misconduct |
You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect prior lawful processing.
7. Advertising, Analytics, and Tracking
7.1 Firebase Analytics
We use Google Firebase Analytics to understand how the Game is used (for example, app opens, screen views, and gameplay events). Firebase may process device/app identifiers and usage data according to Google's policies.
7.2 Advertising
We use:
- Google AdMob for banner, interstitial, rewarded, native, and app-open ads; and
- Yandex Mobile Ads as an additional rewarded ad provider in some configurations.
Ad partners may use cookies, SDKs, device identifiers, and similar technologies to deliver ads, measure performance, and prevent fraud. Where required by law, we request your consent before personalized advertising/tracking (including through Google's User Messaging Platform and iOS App Tracking Transparency).
You can manage ad personalization through:
- in-game privacy/consent settings where available;
- your device settings (limit ad tracking / reset advertising ID);
- Google ad settings and partner opt-out tools where applicable.
Non-personalized ads may still be shown if you decline personalized advertising.
7.3 Push Notifications
With your permission, we send push notifications via Firebase Cloud Messaging and local scheduled notifications (for example, lives regeneration, daily reminders, and weekly events). You can disable notifications in device settings.
8. Social Features, Teams, and User Content
If you use friends, leaderboards, teams, or chat:
- your display name, avatar, scores, team affiliation, and certain gameplay stats may be visible to other players;
- team chat messages and life-request messages are stored on our servers and visible to team members;
- other players may report messages or conduct, and our moderation systems may review content and apply penalties (such as mute or suspension);
- if you link Facebook, friend-matching features may use Facebook friend data as permitted by Facebook and your settings.
Do not share sensitive personal information in chat or public profile fields. You are responsible for content you submit.
9. How We Share Information
We do not sell your personal information for money. We may share information in the following circumstances:
9.1 Service Providers
We use trusted processors that help us operate the Game, such as providers for:
- cloud hosting and databases;
- analytics (Google/Firebase);
- advertising (Google AdMob, Yandex);
- push notifications (Firebase Cloud Messaging);
- app store purchase validation;
- customer support tools;
- security, logging, and fraud prevention.
These providers may access personal information only to perform services for us under contractual confidentiality and data protection obligations.
9.2 Social Login Providers
If you use Google, Facebook, or Apple login, those companies process information under their own privacy policies. We receive only the data needed to authenticate and link your game account.
9.3 Legal and Safety Disclosures
We may disclose information if we believe in good faith that disclosure is necessary to:
- comply with law, regulation, legal process, or governmental request;
- enforce our Terms and policies;
- detect, prevent, or address fraud, security, or technical issues;
- protect the rights, property, or safety of Mobiza, our users, or the public.
9.4 Business Transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred subject to this Policy or a successor policy with notice as required by law.
9.5 With Your Direction
We may share information when you direct us to do so or when necessary to complete a transaction you request.
10. International Data Transfers
Mobiza Teknoloji (Mobiza Games) is based in Türkiye. Our service providers may process data in Türkiye, the European Union, the United States, and other countries where they operate.
When we transfer personal information internationally, we implement appropriate safeguards as required by applicable law, such as:
- Standard Contractual Clauses approved by the European Commission or UK authorities;
- adequacy decisions where applicable;
- contractual and technical security measures;
- data processing agreements with vendors.
You may contact us for more information about applicable transfer safeguards.
11. Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.
Typical retention periods:
| Data category | Retention approach |
|---|---|
| Active player profile and gameplay data | While your account/profile is active and for a reasonable period afterward |
| Team chat and moderation records | As needed for team functionality, safety, dispute resolution, and legal compliance |
| Purchase/transaction records | As required for accounting, tax, fraud prevention, and consumer protection (often several years) |
| Analytics logs | For a limited period according to provider settings and our internal policies |
| Support tickets | As long as needed to resolve the issue and maintain support history |
| Push tokens | Until you disable notifications, uninstall the app, or we invalidate the token |
When information is no longer needed, we delete or anonymize it in accordance with our retention schedule and legal obligations.
12. Security
We implement administrative, technical, and organizational measures designed to protect personal information, including access controls, authentication mechanisms, encryption in transit where supported, logging/monitoring, and vendor security reviews.
No method of transmission or storage is completely secure. You use the Game at your own risk. Please protect your device and linked social accounts.
13. Your Privacy Rights
Depending on your location, you may have some or all of the following rights:
- Access – request confirmation and a copy of personal information we hold about you;
- Rectification – request correction of inaccurate information;
- Erasure – request deletion of personal information, subject to legal exceptions;
- Restriction – request limited processing in certain circumstances;
- Portability – receive personal information in a structured, commonly used format where applicable;
- Objection – object to processing based on legitimate interests, including direct marketing where applicable;
- Withdraw consent – where processing is based on consent;
- Opt out of sale/sharing/targeted advertising – for U.S. residents where applicable;
- Non-discrimination – we will not discriminate against you for exercising privacy rights;
- Lodge a complaint – with a supervisory authority or regulator.
13.1 How to Exercise Your Rights
Email support@bistrobounce.com with:
- your request type;
- the Game name (Bistro Bounce);
- your player/account identifier if available (shown in Settings);
- sufficient information to verify your request.
We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.
13.2 Account and Data Deletion
You may request deletion of your game account and associated personal data by emailing support@bistrobounce.com from the email linked to your social account (if any) or by providing your player code/account ID. See our account deletion page for step-by-step instructions.
Upon verified request, we will delete or anonymize personal information unless retention is required for legal, security, fraud-prevention, or accounting purposes. Some information may remain in backups for a limited period or in aggregated/anonymized form.
Uninstalling the app does not automatically delete server-side account data.
13.3 EEA/UK Representative
Mobiza Teknoloji is established in Türkiye. If and when required under Article 27 GDPR/UK GDPR, we will appoint an EU/UK representative and publish their contact details here.
13.4 Türkiye (KVKK)
Under KVKK, you may apply to Mobiza Teknoloji regarding your personal data. Requests may be submitted to support@bistrobounce.com or +90 850 307 90 23. We will handle applications under KVKK within statutory periods.
Data Controller (Veri Sorumlusu): Mobiza Teknoloji (Mobiza Games)
Address: Osmangazi, Bursa, Türkiye
Website: https://bistrobounce.com
Email: support@bistrobounce.com
Phone: +90 850 307 90 23
Tax ID (VKN): 1280527561
Tax Office: Uludağ Vergi Dairesi
DUNS: 751143161
If we are registered with the Turkish Data Protection Authority (VERBİS), our registration details will be published at https://bistrobounce.com and updated in this Policy.
13.5 United States (CCPA/CPRA and State Laws)
California and certain other U.S. state residents may have additional rights regarding access, deletion, correction, and opt-out of sale/sharing of personal information and targeted advertising.
Categories collected in the last 12 months may include identifiers, customer records, commercial information, internet/electronic activity, geolocation (non-precise, derived from locale), and inferences used for analytics/ads.
We do not sell personal information for money. We may share identifiers and activity data with ad/analytics partners for cross-context behavioral advertising where permitted; you may opt out by contacting support@bistrobounce.com and using device/ad platform controls.
We do not knowingly sell or share personal information of consumers under 16 without authorization.
13.6 Republic of Korea (PIPA)
For users in Korea, Mobiza Teknoloji (Mobiza Games) processes personal information to provide the Game and related services. You may request access, correction, deletion, suspension of processing, and withdrawal of consent by contacting support@bistrobounce.com.
If Mobiza is required under PIPA to designate a domestic representative in Korea based on thresholds or regulatory requirements, we will publish the representative's name, address, telephone number, and email in this Policy.
Until such representative is appointed (if required), Korean users may submit privacy inquiries to support@bistrobounce.com.
13.7 Japan (APPI)
For users in Japan, Mobiza Teknoloji (Mobiza Games) handles personal information in accordance with APPI. You may request disclosure, correction, suspension of use, deletion, and suspension of third-party provision by contacting support@bistrobounce.com.
If we receive a complaint from a Japanese data subject, we will respond in good faith within a reasonable period.
14. Third-Party Links and Services
The Game may contain links to third-party websites or services (for example, app stores or social networks). We are not responsible for their privacy practices. Review their policies before providing personal information.
15. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will provide notice through the Game, our website, or other appropriate means as required by law. The "Last updated" date at the top indicates the latest revision.
Continued use of the Game after the effective date of an updated Policy constitutes acceptance where permitted by law.
16. Contact Us
Mobiza Teknoloji (Mobiza Games)
Osmangazi, Bursa, Türkiye
Website: https://bistrobounce.com
Email: support@bistrobounce.com
Phone: +90 850 307 90 23
Tax ID (VKN): 1280527561
Tax Office: Uludağ Vergi Dairesi
DUNS: 751143161
For privacy-related requests, include "Privacy Request" in the subject line and provide your country of residence and player/account identifier if available.
17. Supplemental Disclosures
17.1 App Store Privacy Labels
Apple and Google require us to disclose categories of data collected and whether data is linked to you or used for tracking. Those disclosures are also reflected in the app store privacy nutrition labels/notes for Bistro Bounce and should be read together with this Policy.
17.2 List of Key Third-Party Processors / Partners
| Provider | Purpose | Privacy information |
|---|---|---|
| Google Firebase | Analytics, push messaging | https://policies.google.com/privacy |
| Google AdMob | Advertising | https://policies.google.com/privacy |
| Yandex Mobile Ads | Rewarded advertising | https://yandex.com/legal/confidential |
| Google Sign-In | Authentication | https://policies.google.com/privacy |
| Facebook / Meta | Authentication, social features | https://www.facebook.com/privacy/policy |
| Apple Sign In / Game Center | Authentication | https://www.apple.com/legal/privacy |
| Apple App Store / Google Play | Purchases and distribution | Respective platform policies |
This list is illustrative and may change as our services evolve.
This Privacy Policy is provided in English. If translated, the English version controls to the extent permitted by applicable law.