Privacy Policy

In situations where 42Code.NET determines the purposes and technical means of processing personal data, 42Code.NET acts as the Data Controller (or equivalent legal capacity under applicable data protection laws).

For all privacy inquiries, data subject access requests, or regulatory communications, you may contact our dedicated privacy team at:

Email: support@42code.net

Please note that Google Play, Valve (Steam), payment service providers, advertising partners, analytics platforms, and other third-party integrations may act as independent data controllers with respect to their own services and processing activities.

Not every game, application, or software title published by 42Code.NET shares identical technical features. Consequently, not every category of data described in this Policy is collected or processed by every single product.

The specific scope of data processed by an individual game or application depends upon several technical factors:

• The core functionality and genre of the application;
• Whether the title supports or requires a registered user account;
• Whether real-time online, multiplayer, or cloud synchronization features are utilized;
• Whether monetization includes in-app advertising;
• Whether third-party performance analytics or telemetry crash-reporting tools are enabled;
• Whether the product contains optional in-app purchases (IAP);
• The specific runtime device permissions explicitly granted by the user.

For applications distributed through Google Play, current data collection and security practices are also itemized in the Google Play Data Safety section of each individual store listing. If discrepancies arise between this general Policy and specific store declarations, declarations will be synchronized promptly to reflect actual data flows.

Depending on the specific game or utility and the interactive features you choose to activate, we may process selected categories of personal information as outlined below.

3.1. Account Information

When an application or service allows or requires registering a 42Play user account, we may process:

• Chosen username;
• Public display/profile name;
• Email address;
• Internal unique user identifier (UID);
• Account registration timestamp;
• Account verification status;
• Preferred interface language;
• User settings and profile configurations;
• Account security and credential validation data.

For standalone single-player games or offline applications that do not require account registration, account-related personal data is not collected.

Whenever a product involves authenticated account access, cloud synchronization, or online services, the following technical security logs may be recorded to safeguard account integrity:

• Internet Protocol (IP) address;
• Authentication tokens and active session identifiers;
• Timestamps of login attempts and successful sessions;
• Failed authentication attempts and rate-limit triggers;
• Client device attributes and browser user-agent signatures;
• Security audit logs for intrusion prevention;
• Records of anomalous or suspicious account activity;
• Securely salted and hashed cryptographic password representations.

Passwords are never stored in plaintext and are protected using industry-standard cryptographic hashing functions. 42Code.NET personnel will never request your password via email, ticket support, or social messaging channels.

When operating our games, software tools, and web properties, certain non-identifying or pseudonymous technical telemetry may be generated:

• Device type, hardware manufacturer, and model architecture;
• Operating system name, kernel version, and build identifier;
• Installed application version and release branch;
• Browser engine and version (for web applications and launchers);
• Language and locale settings;
• Country or approximate geographic region derived from IP headers;
• Network connectivity status (Wi-Fi, cellular, ethernet);
• Screen resolution, pixel density, and graphical rendering parameters;
• Crash stack traces, exception diagnostics, and operational performance logs;
• Session or ephemeral device tokens.

This technical telemetry is processed primarily to guarantee operational runtime execution, resolve software crashes, optimize frame rates, patch security vulnerabilities, and ensure broad device compatibility.

In interactive products, usage telemetry may be processed to deliver gameplay continuity and monitor balance:

• Application launches, session start times, and active durations;
• Gameplay milestones, stage completions, and difficulty levels reached;
• High scores, achievements, trophies, and stats;
• Player configuration preferences (sound effects, music volume, control sensitivity);
• Features and game modes accessed;
• In-game interactions and event triggers;
• Technical glitch reports and crash logs during runtime.

Usage telemetry helps us balance game difficulty, diagnose bugs, and guide ongoing software maintenance.

For titles supporting cloud save functionality, remote profiles, or persistent progression across devices, the following data may be stored in our cloud infrastructure:

• Level progress and quest completion status;
• Player high scores and statistical records;
• Earned achievements and unlocked badges;
• In-game virtual inventory, items, currency counters, and cosmetic unlocks;
• Encrypted cloud save archive files.

In titles operating solely with offline local saves, game progression files remain strictly on your local device and are not uploaded to 42Code.NET servers.

Where a game incorporates competitive leaderboards, global rankings, or public community profiles, certain gameplay attributes are displayed publicly to other players:

• Public username or chosen display pseudonym;
• Avatar or profile icon selection;
• Numerical score or tournament rating;
• Global and regional leaderboard rank;
• Game achievement timestamps.

Players are under no obligation to use their real legal names as their public display handle. We actively encourage the use of creative pseudonyms.

When digital products, expansions, or in-app purchases are transacted via Google Play, Steam, or other digital distribution platforms, payment processing is executed directly by the respective platform operator.

42Code.NET does not receive, process, or store complete credit/debit card numbers, CVV/CVC security codes, or banking credentials.

To fulfill digital orders and authenticate licensing rights, we receive limited metadata from the platform store:

• Product identifier and SKU purchased;
• Anonymized order ID or platform transaction receipt;
• Purchase validation status and timestamp;
• Active subscription validity and renewal tier;
• Entitlement token or license key verification;
• Refund, chargeback, or revocation notification status.

Financial transactions are governed by the respective terms of service and privacy policies of Google Play, Valve (Steam), or other authorized platform store operators.

Selected free-to-play mobile games or applications may be supported through contextual or programmatic in-app advertising.

When advertisements are present, certified third-party ad network partners may collect and process pseudonymous identifiers and device telemetry subject to applicable privacy laws and user device consent settings:

• Mobile Advertising Identifiers (Google Advertising ID / GAID, IDFA where permitted);
• Device technical specifications and IP address;
• Coarse geolocation (country/city level derived from IP);
• Ad impression occurrences, duration, and click interactions;
• Aggregated campaign performance and fraud prevention metrics.

Products that do not feature advertising contain zero advertising SDKs and process no advertising telemetry. In jurisdictions requiring affirmative opt-in consent for behavioral profiling (such as the EU/EEA and UK), personalized ads are not served unless affirmative user consent has been granted.

To maintain software stability, optimize responsiveness, and monitor crash frequencies, select applications may integrate diagnostic analytics or crash-reporting libraries.

These utilities process minimized, pseudonymous technical diagnostics:

• Software build and version number;
• Hardware platform and operating system version;
• Crash stack trace and memory dump diagnostics at the moment of failure;
• Pseudonymous installation or ephemeral session IDs;
• Feature usage frequencies and UI navigation flow.

Diagnostic telemetry is utilized strictly for technical troubleshooting and code stabilization.

Certain advanced product features may request access to native device capabilities:

• Camera access (e.g. for augmented reality features or QR scanning);
• Microphone access (e.g. for voice chat or audio-reactive gameplay);
• Storage/Photos access (e.g. for saving custom screenshots locally);
• Push notification permission (e.g. for game event reminders);
• Network status and vibration feedback.

Permissions are never requested unless directly required for an active feature. You retain full control to grant, deny, or revoke permissions at any time through your operating system settings. Declining an optional permission only disables the specific feature relying upon it.

Precise GPS geographic coordinates are not required for the standard operation of 42Code.NET games or utility applications.

If a specialized application incorporates location-dependent functionality, both coarse and precise location data will be accessed solely with your explicit, revocable permission.

Deriving country or general metropolitan region from standard network IP headers does not constitute precise GPS location tracking.

When you submit an inquiry, bug report, or request assistance through our support channels, we process:

• Your email address;
• Your name or chosen pseudonym;
• Name and version of the affected product;
• Detailed description of the issue or feedback;
• Attached diagnostic screenshots or log files;
• Platform store transaction receipts (if resolving an entitlement inquiry);
• Support message correspondence history.

Please do not include sensitive personal documents, credit card details, or passwords in support communications.

If a game or app offers push notification updates, the following technical components are processed:

• Push notification device token (provided by Firebase Cloud Messaging, Apple APNs, or equivalent);
• Device and application installation identifiers;
• User notification preference toggles.

You can disable push notifications entirely at any time via your device operating system notification settings.

We collect and process personal data exclusively for the following defined, legitimate business purposes:

• Delivering, operating, and maintaining games, apps, and web services;
• Creating and administering user accounts and profile credentials;
• Storing and synchronizing game saves, progress, and inventory;
• Powering multiplayer matchmaking, leaderboards, and social features;
• Verifying licensing rights, in-app purchases, and subscription tiers;
• Delivering responsive technical support and bug investigations;
• Diagnosing software crashes, optimizing code, and patching errors;
• Protecting against cyber attacks, automated bot abuse, fraud, and cheating;
• Preserving user interface configurations and language choices;
• Complying with statutory accounting, consumer protection, and tax obligations;
• Establishing, exercising, or defending legal claims;
• Conducting privacy-compliant analytics or serving ads where consented.

Under applicable international data protection frameworks (including the EU/UK GDPR and Turkish KVKK), processing activities are grounded upon established lawful bases:

Performance of a Contract

Processing is necessary to provide the services requested, create user accounts, deliver game content, or fulfill contractual terms.

Compliance with Legal Obligations

Processing is required to fulfill statutory requirements under consumer protection legislation, financial reporting standards, or lawful regulatory directives.

Legitimate Interests

Processing is conducted to protect service infrastructure, detect fraudulent abuse, maintain game security, and iteratively improve software quality, balanced against user privacy expectations.

Consent

Where mandated by law—such as for non-essential cookies, personalized advertising, or specific device sensors—processing relies upon explicit user consent, which may be withdrawn at any time.

42Code.NET strictly adheres to the principle of data minimization. We only request and process personal data that is genuinely necessary to fulfill the specific functionality of the active application.

We do not collect extraneous personal information solely on the speculative assumption that it might become useful in the future.

Our games and general consumer applications do not solicit or process special categories of sensitive personal data, such as:

• Health or medical records;
• Biometric identifiers for unique personal identification;
• Religious, philosophical, or political beliefs;
• Racial or ethnic origin;
• Sexual orientation or criminal history.

Users should never share sensitive personal details in public game profiles, community boards, or customer support tickets.

To deliver robust online game experiences, 42Code.NET may engage certified third-party service providers. Depending on the product, these may include:

• Digital distribution platforms (Google Play, Steam);
• Secure cloud hosting and database infrastructure;
• Crash-reporting and telemetry services;
• Payment processing gateways (managed via app stores);
• Analytics and performance measurement suites;
• Advertising network SDKs (in ad-supported free titles);
• Push notification messaging infrastructure.

Not all third-party integrations are present in every application. Third-party vendors operate under strict data processing agreements or act as independent controllers subject to their published privacy policies.

Our Android applications are distributed via the Google Play Store. When interacting with Google Play, Google acts as an independent entity managing account credentials, in-app billing transactions, store reviews, and system-level telemetry.

42Code.NET ensures that store listing declarations in the Google Play Data Safety panel remain strictly aligned with the authentic data practices of our software.

When titles are published on Steam or other digital PC/console storefronts, Valve Corporation or the relevant platform operator independently maintains user accounts, handles payments, provisions platform cloud saves, and logs store interactions.

Use of these platforms is subject to the Steam Subscriber Agreement and Valve Privacy Policy.

Personal data is shared only to the extent strictly necessary for legitimate operational purposes with designated recipient categories:

• Cloud infrastructure and database hosting providers;
• Digital distribution storefronts and license fulfillment partners;
• Certified analytics, telemetry, and error logging vendors;
• Advertising network partners (in ad-supported products);
• Security, DDoS mitigation, and anti-fraud service providers;
• Customer service ticketing and email delivery platforms;
• Authorized regulatory, judicial, or law enforcement bodies when mandated by law;
• External professional legal, auditing, and tax advisors.

42Code.NET does not sell personal data for monetary consideration. We are not data brokers and do not maintain commercial data-selling pipelines.

Under broad statutory definitions in certain US state laws (such as California's CCPA/CPRA), sharing online identifiers with third-party ad networks for cross-context behavioral advertising may be categorized as a “sale” or “sharing”. Where applicable, we respect Global Privacy Control (GPC) signals and provide mandatory opt-out mechanisms.

The 42play.net web portal utilizes essential cookies, local storage, and session tokens to maintain security, preserve language preferences, and ensure seamless navigation.

Non-essential analytics or advertising cookies are not deployed without required user consent. For an exhaustive breakdown of cookie lifespans and management options, please consult our separate Cookie Policy.

Because our cloud hosting servers and third-party technology providers operate globally, personal data may be transferred to and processed in countries outside of your state of residence.

In all cross-border data transfers, we implement recognized statutory safeguards, including European Commission Standard Contractual Clauses (SCCs), UK International Data Transfer Addenda, adequacy decisions, and equivalent contractual protections under Turkish KVKK.

For individuals residing in Türkiye, personal data is processed in compliance with the Law on the Protection of Personal Data No. 6698 (“KVKK”).

Under Article 11 of the KVKK, you possess the right to:

• Learn whether your personal data is being processed;
• Request information regarding processing if data has been processed;
• Learn the purpose of processing and whether data is used in accordance with its purpose;
• Know the third parties to whom data is transferred domestically or abroad;
• Request rectification of incomplete or inaccurate data;
• Request erasure or destruction of data under statutory conditions;
• Request notification of rectification or erasure to third-party transferees;
• Object to adverse results generated exclusively through automated analysis;
• Claim compensation for damages incurred due to unlawful processing.

KVKK requests may be submitted directly to support@42code.net.

If you reside in the European Union, European Economic Area, or the United Kingdom, processing of your personal data complies with the EU General Data Protection Regulation (GDPR) and UK GDPR.

You have the following statutory rights:

• Right of Access: Request a copy of your personal data under Article 15;
• Right to Rectification: Request correction of inaccurate information under Article 16;
• Right to Erasure (“Right to be Forgotten”): Request deletion of data under Article 17;
• Right to Restriction: Request restriction of processing under Article 18;
• Right to Data Portability: Receive your data in a structured, machine-readable format under Article 20;
• Right to Object: Object to processing grounded on legitimate interests or direct marketing under Article 21;
• Right to Withdraw Consent: Revoke consent at any time without affecting past lawful processing;
• Right to Lodge a Complaint: File a complaint with your local Data Protection Supervisory Authority.

Residents of the United States benefit from privacy rights established under applicable federal and comprehensive state privacy statutes (including Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and others).

Subject to statutory thresholds, you may request confirmation of data processing, access your data, request corrections, request deletion, and opt out of targeted cross-context advertising.

Under the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA), California consumers possess specific rights:

• The right to know what personal information is collected, disclosed, or sold;
• The right to delete personal information collected from them;
• The right to correct inaccurate personal information;
• The right to opt out of the “sale” or “sharing” of personal information;
• The right to limit the use and disclosure of sensitive personal information;
• The right not to receive discriminatory treatment for exercising privacy rights.

42Code.NET does not sell personal information for monetary payment. To submit a California privacy request, contact support@42code.net with the subject line “California Privacy Rights”.

For users located across the Asia-Pacific region, we align data processing with applicable national standards, including Japan's Act on the Protection of Personal Information (APPI), South Korea's Personal Information Protection Act (PIPA), Singapore's Personal Data Protection Act (PDPA), China's Personal Information Protection Law (PIPL), and India's Digital Personal Data Protection Act (DPDP).

User requests from these regions are handled in full accordance with local statutory provisions.

Protecting children's privacy is paramount. 42Code.NET develops software catering to varied demographic audiences.

Where a product is explicitly designed for children or includes children within its target audience, we comply rigorously with the Children's Online Privacy Protection Act (COPPA), GDPR child consent provisions, and app store family policies.

In general-audience products, we do not knowingly solicit or collect personal information from individuals below the statutory age of digital consent (typically 13 in the US and up to 16 in select European jurisdictions) without verifiable parental consent.

If a parent or legal guardian discovers that their child has provided personal information without proper authorization, please notify us immediately at support@42code.net, and we will delete the data without delay.

We do not retain personal information longer than necessary to achieve the specific purposes for which it was originally collected.

In determining retention schedules, we assess:

• Whether the user maintains an active, ongoing account;
• The active operational lifecycle of the game or software product;
• Technical troubleshooting and security log retention needs;
• Statutory retention periods under commercial, accounting, and tax laws (typically 5 to 10 years for financial transaction records);
• Applicable statutory limitation periods for potential legal claims.

When data is no longer required and statutory retention mandates have elapsed, it is securely deleted or irreversibly anonymized.

For applications supporting user accounts, users can initiate account deletion directly within the application settings or via an external web portal provided for the product.

Alternatively, you may request full account and data deletion by sending an email to support@42code.net.

Upon account deletion, all personal data not required for statutory compliance (e.g. accounting or fraud prevention) is deleted or permanently detached from any identifying profile.

42Code.NET implements robust technical and administrative security measures tailored to the risk profile of processed data:

• Encrypted network communication (HTTPS, TLS 1.3);
• Strong cryptographic password hashing algorithms;
• Role-based access controls and principle of least privilege;
• Regular server updates, dependency patching, and vulnerability scans;
• Automated intrusion prevention and rate-limiting safeguards;
• Secure off-site encrypted data backups.

While we follow strict security standards, no electronic data transmission or cloud storage system can guarantee 100% absolute invulnerability.

We maintain proactive incident response protocols. If a confirmed security incident occurs that threatens the rights and freedoms of individuals:

• We will notify competent data protection authorities within the statutory timeframe (e.g. within 72 hours under GDPR);
• We will promptly notify affected users directly when required by law;
• We will initiate immediate containment and mitigation countermeasures.

To exercise any of your statutory privacy rights—including access, correction, deletion, restriction, or consent withdrawal—please email us at:

Email: support@42code.net

To prevent unauthorized disclosure to bad actors, we may take reasonable steps to verify your identity before processing access requests. We do not charge fees for standard privacy requests unless they are manifestly unfounded, repetitive, or excessive.

We respond to all verified privacy requests within the timelines prescribed by applicable law (typically within 30 calendar days).

If a request cannot be fulfilled due to conflicting legal retention mandates or protection of third-party rights, a clear legal explanation will be provided.

Our games, applications, and website may contain hyperlinks directing you to external websites or digital platforms operated by third parties (e.g. Discord, YouTube, Steam).

42Code.NET exercises no control over external platforms and assumes no responsibility for their privacy practices. We urge you to review the privacy notices of external services you visit.

In the event that 42Code.NET or its assets undergo a merger, corporate reorganization, acquisition, or restructuring, personal data associated with the transferred services may be transferred as part of the business assets in accordance with applicable data protection legislation.

We may update this Privacy Policy from time to time to reflect product enhancements, technological changes, or evolving regulatory standards.

The most current version will always be published on https://42play.net/privacy with the updated “Last Updated” and “Effective Date” timestamps prominently indicated at the top.

Material amendments will be accompanied by prominent notifications within our applications or website where appropriate.

As emphasized throughout this agreement, 42Play is an independent game development and publishing imprint under 42Code.NET. It is not an open marketplace for third-party sellers.

Should open marketplace infrastructure be deployed in the future, comprehensive vendor, buyer, and escrow data governance clauses will be incorporated prior to launch.

If you have any questions, comments, or formal inquiries regarding this Privacy Policy, please reach out to us:

Studio: 42Play / 42Code.NET
Website: https://42play.net
Privacy Compliance: support@42code.net
Subject Line Recommendation: Privacy Request / Data Protection Inquiry

This Policy applies strictly to the authentic digital services offered by 42Code.NET. The conditional inclusion of specific data categories in this text does not imply that every single 42Code.NET application processes that category.

If mandatory consumer protection or privacy statutes in your jurisdiction grant broader protections than those outlined herein, such statutory rights shall prevail without limitation.