ENProtocol
Last updated: 19 October 2026
ENProtocol collects only the data the game needs to work. There are no ads, no analytics tracking, and your data is never sold. This page lists what is kept, why, and for how long.
Muzaffer Akdokur (individual developer) — akdokur@gmail.com
Send any privacy request or question to this address.
| Account | Username, email address, optional phone number, display name, shareable player code, whether your email is verified. Your password is never stored in plain text; only an irreversible PBKDF2 hash is kept. Email verification and password reset codes are also stored only as hashes and only briefly. |
|---|---|
| Game progress | Diamond and isotope balance, unlocked characters, owned gear, selected squad, daily login streak and number of days played, signal score, league and season standing, experience (XP) and level, reactor (synthesis) attempts. |
| Match records | Date, opponent, move log, result and rewards of matches played — kept so the server can verify the result and show your match history. |
| Purchases | For in-app purchases: store (App Store / Google Play), product, the store's transaction ID, date and the diamonds credited. Payment is handled entirely by Apple or Google; we never receive your card or bank details. |
| Social | Friends list, sent and received friend requests, duel invitations and your last seen time — the online indicator is derived from it. |
| Teams and user content | Name, tag, description and emblem of the team you found or join; your role, join requests and weekly team points you earn. Team names and descriptions are user content visible to other players; reported content is reviewed. |
| Gifts and market | Gifts you send to and receive from teammates (from whom, to whom, what, when). Listings you create on the market and completed trades: item, price, seller and buyer, commission, date. The market works only with in-game currency (diamonds). |
| Technical logs | The IP address, time and path of requests to the server are kept in web server access logs for abuse and error investigation; they are not combined with your game account to build a profile. |
The game contains no ad networks, no analytics SDKs and no third-party trackers. We do not track you across apps or websites.
| Account, gameplay, match verification, matchmaking, leagues, friends, teams, market, crediting purchased diamonds | Performance of a contract — needed to provide the game to you (GDPR Art. 6(1)(b)). |
|---|---|
| Password reset and email verification emails | Performance of a contract (GDPR Art. 6(1)(b)). |
| Preventing cheating, fraud and abuse; processing each purchase only once; account checks for market access; reviewing reported content; server access logs | Legitimate interest — keeping the game and other players safe (GDPR Art. 6(1)(f)). |
| Lawful requests from authorities | Legal obligation (GDPR Art. 6(1)(c)). |
Data is stored in a MongoDB database on servers located in Türkiye (Istanbul). All traffic between the app and the server is encrypted with HTTPS.
If you play from the European Economic Area, the United Kingdom or Switzerland, your data is transferred to Türkiye. This transfer is necessary to provide the service you requested — the game (GDPR Art. 49(1)(b)). Purchases are processed by Apple and Google under their own privacy policies.
Account data is kept until the account is deleted. When you delete your account, your profile, gear, email and phone, friends list, reward records, XP, verification codes and team membership are permanently deleted, and your open market listings are closed. If you lead a team, leadership passes to another member; if you are the only member, the team is closed.
Records that are also part of another player's history, and purchase records, are not deleted but pseudonymised: matches (your opponent's history), team points, gifts, completed market trades and purchase records (to prevent reprocessing the same transaction and to handle refunds). Your name is replaced with "Deleted player" and only a random internal ID remains, which can no longer be linked to any person once the account is gone.
Server access logs are kept for at most 14 days (rotated daily, 14 copies).
Your data is not sold, rented or shared for marketing — and we do not "sell" or "share" personal information as those terms are used in US state privacy laws. It only reaches others in these cases: the hosting and email providers that run the game (Türkiye), Apple and Google for purchase verification, and authorities where required by law.
Visible to other players: your display name, avatar, player code, league and signal score, level, whether you are online or in a match, match history results, your team and role, and your seller name on market listings. Your email address, phone number and purchases are never shown to other players.
Under the GDPR, UK GDPR, Swiss data protection law, Turkish law (KVKK) and applicable US state laws, you have the right to:
Write to akdokur@gmail.com from the email address registered to your account; you will get a reply within 30 days. If you are not satisfied, you can lodge a complaint with the data protection authority of your country (in Türkiye, the Personal Data Protection Authority — KVKK).
The game is not directed at children under 13 and does not knowingly collect data from them. If we learn of such an account, we delete it.
If this policy changes, the date at the top is updated. If a change expands the data collected, you will also be notified in the game.