Effective date: 25 October 2026
Data controller: Naklorya (“we”)
1. Information we collect
| Data | Purpose |
|---|---|
| E-mail address, Google or Apple account ID, password hash and session data | Account creation, sign-in, security and account recovery |
| E-mail verification code (hash only, valid for 15 minutes) | Confirming your e-mail address and changing it |
| Hash of an install key generated on your device for guest accounts | Continuing a game started without signing up on the same device |
| Company/user name and starting city | Creating your game profile and providing online features |
| Level, money, vehicles, garages, staff, quests and operation history | Saving progress, running the game economy and preventing cheating |
| Chat messages, friendships, clans, blocks and report records | Social features, safety, moderation and handling reports |
| Push notification device token, platform, notification and language preferences | Sending social (messages, replies, tags, clan), reward and announcement notifications |
| Store purchase ID and verification proof (stored encrypted) | Verifying Google Play and App Store purchases, delivering items, handling refunds and subscription status |
| Technical device, advertising and usage information | Serving ads through AdMob, security and performance |
Naklorya does not ask for your device’s real GPS location. Locations on the map are virtual in-game operation locations.
2. Third-party services
To run the service we may use Google Sign-In, Sign in with Apple, Firebase Cloud Messaging, Google AdMob, Mapbox, Google Play Billing, App Store purchases and our e-mail delivery provider. These providers may process limited technical data under their own privacy policies. With Sign in with Apple you can hide your real e-mail address; the account ID and sign-in authorization are used to verify your account. When your account is deleted, the Apple sign-in authorization is revoked as well. Required advertising consents are collected before ads load; if the choice form applies to you, you can reopen it in the game under Menu → Settings → Support and privacy → Ad privacy choices.
Ads and iOS tracking permission
We show ads through Google AdMob to keep the game free. To personalise and measure ads, AdMob may use your device’s advertising identifier (IDFA on iOS), approximate location (from your IP address) and ad interactions; under Apple’s definition this is “tracking”. On iPhone and iPad, Apple’s App Tracking Transparency permission is requested before this data is accessed, and no ad request is sent until you have answered it. If you decline, your advertising identifier is not shared, ads are shown without personalisation and the game works the same. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.
Website analytics
We use Google Analytics on our website. Page visits and interactions such as clicks on guide or feedback links are measured to understand which content helps visitors. Google Analytics may process technical browser and device information and may use cookies. We do not add messages you type into the feedback form or account passwords to custom Analytics events.
3. Purposes and legal bases
We process data to provide the game under our contract with you, to keep accounts and the community safe, to meet legal obligations, and in our legitimate interest to improve the service. Where required, we ask for your consent.
4. Sharing
We do not sell personal data. Data is shared only with infrastructure, authentication, map, advertising, payment and notification providers to the extent the service requires, or with authorities when legally required.
5. Retention and security
Account data is kept while your account is open. Moderation records may be kept as long as needed for community safety. When an account is deleted, related game and social data are removed from active systems; removal from rotating security backups can take up to 30 days. We use HTTPS in transit and access-controlled systems.
6. Your rights
You may have the right to access, correct, delete, restrict processing of and, where applicable, object to the processing of your data. You can permanently delete your account in the game under Menu → Settings → Session → Delete account permanently. See the account deletion page for details.
7. Children’s privacy
The service is not directed at children and our audience is 13 and over. If we learn that data of a person under 13 has been processed, we will delete the account and related data.
8. Changes and contact
We update the effective date when this policy changes. For privacy requests, contact us at [email protected].