Privacy Policy

Plokki (Android and iOS) · Effective date: 7 November 2026

This English version is the authoritative text. A Turkish version (Türkçe) is also available.

1. Who we are

This policy covers the mobile game Plokki (package / bundle ID com.mrraftgames.blokpatlat; earlier versions were named "Blok Patlat") and this website. The game is developed and published by mr.raft games ("we", "us"). We are the data controller for the processing described here. For any privacy question, write to mr.raftgames@gmail.com.

2. Data stored on your device

Plokki saves your game locally, in the app's private storage on your phone or tablet. This data is not sent to us. It includes:

• settings: sound, music, vibration, language, block theme, effect level;
• game progress: high scores, level stars, the game you left unfinished, daily challenge results and streaks, missions, achievements, Expedition records, power-ups you own;
• the player name you type yourself (optional, up to 12 characters), used for challenge codes and live rooms;
• the names of friends whose challenge codes you played, and your win/loss record against each of them (for your score history);
• small counters for ads (for example how many rewarded ads you watched today) and the items you own (for example "Remove forced ads").

The rank screen shows rivals that are simulated on your device. They are not real players, and no scores are uploaded to any leaderboard.

Your device may include app data in a backup that you set up yourself (for example a Google or iCloud device backup). That backup is controlled by you and your platform provider, not by us.

3. Ads (Google AdMob)

Plokki is free to play and shows ads: optional rewarded ads that you choose to watch (for example for an extra power-up), and in Adventure mode an ad between levels after the first levels. Ads are provided by Google AdMob (Google LLC / Google Ireland Limited), using the Google Mobile Ads SDK inside the app.

When the app loads or shows an ad, the SDK collects and sends to Google, over an encrypted connection:

• your IP address, which can be used to estimate your general (approximate) location;
• device identifiers: on Android, the advertising ID and the app set ID; on iOS, the IDFA only if you allow tracking, plus identifiers that are limited to the app or the developer (IDFV);
• device and app information, such as device model, operating system, language, app version;
• ad interactions, such as ad views, taps and video views, and app launches;
• diagnostics about the performance of the app and the SDK.

Google uses this data to show ads, measure them, create statistics and prevent fraud. Depending on where you are and on your choices (below), ads can be personalized or non-personalized. If your device region or time zone indicates Türkiye, the app requests only non-personalized ads. We do not receive your advertising ID or IP address from Google; we only see aggregated ad reports. Google's use of this data is described in How Google uses information from sites or apps that use its services and in the Google Privacy Policy.

Your ad choices

• Türkiye: if your device region (for example Türkiye) or time zone (Istanbul) indicates Türkiye, the app requests only non-personalized ads. These ads are not chosen from your interests or past behavior; they are chosen from the current context (for example the type of app, the language and your approximate location). This is why no GDPR-style ad consent form is shown in Türkiye; on iOS the system may still ask about tracking (see iOS below). Google may still process device identifiers and your IP address for non-personalized ads: to limit how often the same ad is shown, to measure ads in aggregate, and to prevent fraud and abuse. This decision is made on your device, from these two settings only; nothing is sent to us. If both settings point to another country, the app does not treat you as being in Türkiye.
• EEA, UK, Switzerland and US states where the law requires it: in the EEA, the UK and Switzerland, the app shows Google's consent form (Google User Messaging Platform) on first start, and you can accept or decline personalized ads. In US states whose privacy laws require it, Google's opt-out message lets you opt out of the use of your data for targeted ads. In these regions you can change your choice at any time in the game's Settings → Privacy options.
• iOS: iOS may ask whether Plokki can track you (App Tracking Transparency). The IDFA is shared only if you choose "Allow". If you choose "Ask App Not to Track", or if you are never asked, the IDFA is not shared. You can change this in iOS Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID, or opt out of personalized ads, in your device settings (Settings → Google → Ads, or Settings → Privacy → Ads, depending on the device).
• When in-app purchases are available, buying "Remove forced ads" turns off the ads between levels. Rewarded ads stay available, but they only play if you choose to watch them.

4. In-app purchases

Plokki may offer in-app purchases (for example "Remove forced ads" or a power-up pack). If you buy an item, the payment is handled entirely by Google Play or the Apple App Store under their own terms and privacy policies. We never see your card number, bank details or billing address. The store tells the app that the purchase succeeded, and the app keeps the item on your device.

5. Live rooms

Live rooms let you play in real time with a friend. You create a room, share the room code with your friend, and the two of you play together. There is no random matchmaking: only people who have your code can join. Live rooms need an internet connection and are used only when you open a room.

While you are in a room, the app talks to our room server over an encrypted connection (secure WebSocket). The server runs on Cloudflare (Cloudflare Workers and Durable Objects, Cloudflare, Inc.). The following data passes through it:

• the 5-character room code and the room type (Race or Shared Board);
• the player name you typed (up to 12 characters; it can be any nickname, it does not need to be your real name);
• your score, number of moves, your moves on the shared board, and requests like "rematch" or "leave";
• a random session token, so that you can reconnect if your connection drops.

The other player in the room sees your name, your score and (on the Shared Board) your moves. The server keeps the room's state only while the room exists and deletes it automatically when the room closes (see Retention). We do not use live room data for ads, profiles or anything else, and we do not share it with anyone except the other player in your room.

Our server code does not store your IP address or any device identifier. To deliver the connection and protect the service against abuse, Cloudflare processes connection data such as IP addresses as our service provider; see the Cloudflare Privacy Policy.

6. Friend challenge codes and sharing

You can challenge a friend with a code (it starts with BP-). The code is created on your device. It contains the game seed (so your friend gets the same pieces), your score, the game mode, your player name if you set one, and your score progress (the "ghost score"). We do not receive this code. You send it yourself, for example by WhatsApp, SMS or by copying it. The app you use to send it handles the message under its own privacy policy.

When you open the challenge screen or the live room screen, the app looks at your device's clipboard for a Plokki code, so you do not have to paste it. This check happens only on your device; the clipboard text is not stored or sent anywhere. Your device may show a notice that the app read the clipboard.

7. What we do not collect

• No account, no sign-in, no email or phone number.
• No analytics or crash-reporting service of our own (data collected by the AdMob SDK is described in section 3).
• No contacts, photos, microphone, camera or precise location.
• No chat: players cannot send each other messages in the app.

8. Children

Plokki is not directed at children under 13; on Google Play its target audience is 13 and older. We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has given us personal information (for example through a live room), contact us and we will delete it if we hold any.

9. Retention and deletion

• Data on your device stays until you delete it. Uninstalling the app, or clearing the app's data in your device settings, deletes all of it. There is no copy on our side.
• Live room data is deleted automatically when the room closes: a room that nobody joins closes after 10 minutes, a match lasts at most 20 minutes, and a finished room stays open 5 minutes for a rematch. If both players leave, the room closes at once.
• Ad data is kept by Google according to Google's own retention rules. You can reset your advertising ID at any time (see section 3).

Because we have no accounts and do not keep data linked to you, there is usually nothing on our side to delete. You can still write to us with a deletion request, and we will answer it.

10. Security

Data sent by the app (ads and live rooms) travels over encrypted connections (HTTPS / TLS, secure WebSocket). Game data on your device is kept in the app's private storage, which other apps cannot read. The room server accepts only small, checked messages, limits the message rate, and keeps nothing after a room closes. No method of storage or transmission is completely secure, but we keep the data we handle to the minimum needed for the game.

11. Your rights and choices

Depending on where you live (for example in the EU/EEA, the UK, Türkiye under Law No. 6698 (KVKK), or some US states), you may have the right to access, correct or delete your personal data, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. Since we hold almost no personal data, most of these rights are exercised directly on your device (delete the app or its data) or with Google's controls for ads. For anything else, contact us.

Legal bases (EU/UK): personalized ads are shown only with your consent; non-personalized ads, ad measurement and fraud prevention are based on our legitimate interest in funding a free game; live room data is processed because you ask to play with a friend.

We do not sell your personal information for money. Ads through AdMob may count as "sharing" for targeted advertising under some US state laws; you can limit this in the game's Settings → Privacy options where it is shown, or by turning off ad personalization in your device settings. Google and Cloudflare may process data on servers outside your country, including in the United States, under their own safeguards.

Türkiye: information notice under KVKK

This part is the information notice under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK).

• Data controller: mr.raft games. Contact: mr.raftgames@gmail.com.
• How data is collected: automatically, by electronic means, through the app and the room server.
• Purposes and legal bases (Art. 5): live room data is processed to give you the live room you ask for (Art. 5(2)(c), performance of a contract). If your device region or time zone indicates Türkiye, the app requests only non-personalized (contextual) ads, so no explicit consent is asked for ads. Showing non-personalized ads, and Google's processing of data such as device identifiers and IP address for frequency capping, ad measurement and fraud prevention while doing so, are based on legitimate interest (Art. 5(2)(f)): offering the game for free and protecting the ad system against abuse. Google also processes this data under its own privacy policy (see section 3).
• Recipients and transfer abroad: Google (ads) and Cloudflare (room server and website hosting). Both may process the data outside Türkiye, including in the United States. These transfers abroad fall under Art. 9. Google's and Cloudflare's data processing terms are published on their websites. Contact us for information on the basis of the transfer.
• Your rights (Art. 11): to learn whether your personal data is processed and to ask for information about it; to learn the purpose of the processing and whether the data is used for that purpose; to know the third parties in Türkiye or abroad that receive it; to ask for incomplete or wrong data to be corrected, and for data to be deleted or destroyed under the law; to ask that these corrections and deletions are passed on to those third parties; to object to a result against you that comes only from automated analysis; and to claim compensation if unlawful processing causes you damage.
• How to apply (Art. 13): send your request by email to mr.raftgames@gmail.com. We answer free of charge within 30 days at the latest. If you are not satisfied with the answer, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

12. This website

This website has no cookies, no analytics and no tracking scripts. It is hosted on Cloudflare Pages; Cloudflare processes your IP address to deliver the pages and protect the site. The fonts are served from this website too; the pages load nothing from other websites.

13. Changes to this policy

We will update this policy when the app changes the way it handles data. The effective date at the top shows the latest version. If a change is important, we will also mention it in the app or in the store listing.

14. Contact

mr.raft games
Email: mr.raftgames@gmail.com

Help with the game: see the Support page.