Privacy Policy
Last updated: 14 October 2026 · Türkçe (KVKK Aydınlatma Metni) · See also: Terms of Use, Delete account, Random reward odds
1. Who we are
Alesta Medya ("we") operates the game Alesta MT2: the website alestamt2.com.tr and the Android / iOS app "Alesta MT2" (store name "Alesta2 Mobile", package com.alestamedya.alesta2mobile; the older Android build downloaded from the website uses com.alestamedya.alestamt2).
We are the data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK). Contact: destek@alestamt2.com.tr.
In short: we collect what we need to run the game, protect your account and stop cheating. We show no ads, we do not track you across other apps or websites, and we do not sell or share your data for advertising.
2. Data we collect
| Category | Data | Purpose |
|---|---|---|
| Account | User name, e-mail, password (irreversibly hashed), character delete code, registration date, acceptance of the terms | Create the account, log in, reset password |
| Game data | Character names, level, inventory, storage, in-game currency, quests, guild/friend lists, in-game transactions and trades | Run the game, investigate lost items and fraud |
| Chat and messages | Public chat, whispers (private messages), guild/party messages; player reports and your block list | Deliver messages, moderate abuse reports |
| Device and technical | IP address, connection/login times, device model, OS version, app version, memory size; a one-way hash of a device identifier (Android: ANDROID_ID; iOS: an app-specific key) | Account security, per-account device limit, anti-cheat/anti-bot, legally required access logs |
| Crash and error reports | When the app crashes or freezes: error summary, in-game map, FPS/memory figures, last log lines of the app, short device code | Find and fix bugs (sent only to our own server) |
| Support requests | Your message, screenshots you attach, account/character name, app version | Answer and solve your request |
| Purchases | Google Play / App Store order id, product, amount, date, delivery status. We never receive your card or bank details; Google or Apple processes the payment. | Deliver purchased Dragon Coins, handle refunds/disputes, tax records |
| Notifications | If you allow notifications: push token and your notification settings | Send whisper, auto-hunt and announcement notifications |
The app does not access your location, camera, microphone, contacts or photo library (when you attach a screenshot to a support request, only the image you pick is sent).
3. Sharing and transfers
- Hosting and content delivery providers store data only on our behalf. Some servers may be located outside Türkiye; transfers follow KVKK Art. 9.
- Google (Google Play) and Apple (App Store) process in-app payments; order data is exchanged to verify purchases.
- Other players see your character name, level, guild, chat messages and shop; rankings on the website are public.
- Authorities only when legally required.
No advertising networks, data brokers or third-party analytics/tracking SDKs are used. We do not collect the advertising ID (AAID/IDFA), so iOS App Tracking Transparency permission is not requested.
4. Retention
- Account, characters and game data: while the account exists; deleted within 30 days after a deletion request.
- Chat and whisper logs: up to 6 months (longer only while a report is being investigated).
- Access and security logs (IP, login times, device hash): up to 1 year. Sanction records: up to 1 year after the sanction ends (active or permanent sanctions are kept while they apply).
- Crash reports: up to 90 days. Support requests: up to 1 year after closing.
- Purchase records: 10 years (tax and commercial law), even after account deletion.
- Backups: deleted data leaves rotating backups within 30 days.
5. Deleting your account
In the app: Menu (ESC) › Account & Privacy › Delete account (or login screen › Account › Delete account); on the web: alestamt2.com.tr/hesap-sil; or by e-mail from your registered address to destek@alestamt2.com.tr. The account is closed immediately, kept for 7 days so a mistaken request can be cancelled, and permanently deleted within 30 days at the latest. Data we must keep by law (access logs, purchase records) is deleted when the periods above end.
6. Your rights
You can ask whether your data is processed, request information, correction or deletion, learn who it was shared with, object to automated decisions and claim compensation (KVKK Art. 11). Write to destek@alestamt2.com.tr with your account name; we answer within 30 days. You may also complain to the Turkish Personal Data Protection Authority.
7. Security
Website, account operations and payment verification use HTTPS (TLS); the game connection uses the encrypted game protocol. Passwords are hashed; only a one-way hash of the device identifier is stored.
8. Children
Alesta MT2 is not directed to children under 13 and we do not knowingly collect their data. If you learn that a child under 13 created an account, tell us at destek@alestamt2.com.tr and we delete it. Users under 18 must have the consent of a parent or guardian.
9. Changes and contact
If this policy changes materially, the new version is published here and the app asks for your consent again at the next start. Questions: destek@alestamt2.com.tr · in game: Menu › Support.