Privacy Policy
Last updated: 29 July 2026
In short: There are no user accounts, no advertising and no tracking. However, an internet connection is needed so your answers can be judged fairly: answers the app does not recognise on its own are sent to our server and from there to a language model provider for checking.
1. Data controller
The party responsible for data processing under the General Data Protection Regulation (GDPR) is:
Kerem Karayağız
Email: support@keremkarayagiz.com.tr
2. What is processed
While playing you type terms for a given letter into categories such as city, country, river, animal or profession. To decide whether a term is valid, the app proceeds in three stages:
- Most terms are recognised directly on your device using a bundled word list. Nothing leaves your device in this case.
- If a term is not included there, it is sent to our server and looked up in a cache.
- Only if that also yields no result is the term, together with the category, transmitted to a language model provider that performs the check.
Only the entered term and its category are transmitted, for example “Quito” and “city”. No device identifiers, names or contact details are sent along. Your score, player names and statistics do not leave your device.
3. Legal basis
Checking answers is the core function of the app. The legal basis is therefore performance of the user contract under Art. 6(1)(b) GDPR. Building the cache additionally relies on the legitimate interest in fast, cost-efficient and progressively better judging under Art. 6(1)(f) GDPR.
4. Recipients and transfers to third countries
We use the following processor for checking unknown terms: OpenAI, L.L.C., USA. A data processing agreement is in place with the provider. Since processing may take place outside the European Union, transfers are based on the European Commission’s Standard Contractual Clauses or an applicable adequacy decision. The transmitted terms are not used by the provider to train its models.
No data is passed on to any other third parties. There are no advertising networks and no analytics providers.
5. Retention
Checked terms are stored permanently in our cache together with the result, so the same question does not have to be asked again. Only the term, the category and the result are stored – with no link whatsoever to the person who entered the term. We are unable to attribute them to you.
Technical server log files created during operation, typically containing IP address, date and time, are deleted after seven days at the latest.
6. What you should not enter
The input fields are free text fields. Please enter only game terms there and no personal data such as real names, addresses or phone numbers. Such entries would be processed and stored like any other term.
7. Data stored locally
The following remain on your device: rounds played, scores, statistics, selected categories and your settings. This data is not synchronised and not transmitted. Deleting the app removes it as well.
8. Purchases in the App Store
The full version is unlocked through a one-time in-app purchase. The purchase is handled entirely by Apple; Apple is your contractual partner and processes the payment data. We receive only aggregated, anonymised sales reports from Apple.
9. No tracking, no advertising
The app shows no advertising, uses no advertising identifiers and embeds no tracking or analytics libraries. No cross-app tracking takes place, so no App Tracking Transparency prompt appears. No proprietary crash tool is included; we receive crash reports only in aggregated form via Apple, provided you have allowed this in your iOS settings.
10. Children
Stadt Land Fluss is often played by children. The app collects no contact details and creates no profiles. Because the input fields accept free text and unknown terms are transmitted to a processor, we recommend that parents explain to younger children that only game terms and no personal details should be entered there.
11. This website
These pages set no cookies and load no external fonts, scripts or other third-party content. Your hosting provider may keep technical server log files; the legal basis is the legitimate interest in secure operation under Art. 6(1)(f) GDPR.
12. Your rights
Under the GDPR you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Please note: since the stored terms contain no link to your person, we cannot attribute them to you and therefore cannot exercise these rights in that respect. You can contact us at any time at the address below.
You also have the right to lodge a complaint with a data protection supervisory authority.
13. Changes
This policy will be updated if the app, the processors used or the legal situation change. The current version is always available at this address.