Privacy notice

Last updated: 30 October 2026

In short: If you play as a guest, no personal data reaches us. If you create an account, your email, your game progress and your leaderboard nickname and scores are stored on Google Firebase; your nickname and scores are public. No ads, no analytics, no tracking. You can delete your account at any time inside the game. In the app, the App Store or Google Play takes the payment for purchases and RevenueCat checks them.

1. Who is responsible

The individual developer who makes and publishes Slime Fusion under the name Dumusoft. For any question or request about your personal data: muti138@gmail.com

2. What data we process

If you play as a guest, no personal data is sent to us. Your progress and settings stay only on your own device (in your browser's or the app's storage).

If you create an account, we process:

• Account details: your email address; your Google account name if you sign in with Google; the player name you choose if you sign up by email; your user ID (UID). Your password is stored encrypted by Google Firebase; the developer can't see it.
• Cloud save: your game progress (gold, jelly, unlocks, achievements, scores, settings) and when it was saved. While you are offline, your progress is saved on your device first and sent to the cloud automatically when a connection comes back.
• Leaderboards (weekly, all-time and Daily Dish): your nickname on the board, your score, run time, map and difficulty, the number of runs counted in the weekly total and when the entry was saved. This is public. Your real name is never shown: the default name is a random nickname (e.g. "Slime#4821") and you can change it at any time. Nicknames are unique and filtered for offensive words.
• Technical data: Google's servers may process connection data (such as your IP address) to run the service and prevent abuse.

We use no advertising, analytics or tracking cookies; all of the game's files, fonts included, come from our own server or from inside the app. Firebase keeps a sign-in session on your device so you stay logged in.

Purchases (mobile app): the App Store or Google Play takes the payment for gold packs, the starter pack and the Slime Pass; your card and payment details never reach us. To check purchases, deliver each one once and let you restore them, our service provider RevenueCat processes: a random ID created by the app (your user ID, UID, if you have an account), which product you bought and when, the store's transaction ID, your country and currency, and technical data about the device and app (such as the OS version and IP address). This applies even if you play as a guest, but RevenueCat is contacted only when you open the shop or when the starter pack offer is shown once after your first win; before that, nothing is sent. The web version has no purchases.

3. Why, and on what legal basis

• Creating your account, keeping your progress across devices and showing the leaderboards: providing the game service you asked for (performance of a contract; KVKK art. 5/2-c, GDPR art. 6(1)(b)).
• Keeping the service secure and preventing cheating and abuse: legitimate interest (KVKK art. 5/2-f, GDPR art. 6(1)(f)).
• Delivering what you buy, granting each purchase once and restoring purchases: performance of a contract (KVKK art. 5/2-c, GDPR art. 6(1)(b)).

We don't use your data for anything else, and never for advertising or profiling.

4. Transfers abroad

Account data is stored with our service provider Google in its Firebase services (Firebase Authentication and Cloud Firestore). These servers are outside Türkiye (for example in the United States or the European Union). Google acts as a data processor under its own data processing terms and security measures: Firebase privacy and security.

The transfer abroad is based on the explicit consent you give when you create an account (KVKK art. 9/6-a). The possible risks we want you to know about before you consent:

• The country where the data is kept may not offer the same level of protection as Türkiye.
• Authorities in that country may request data from Google under their own law.
• It may be harder to exercise your rights there.

To reduce these risks we transfer only the minimum data the game needs, and the data is encrypted in transit and at rest. If you play as a guest, no account data is transferred. You can withdraw your consent at any time by deleting your account. Your data is never shared with anyone other than Google and (for purchases) RevenueCat, and never sold.

Purchases: for purchases in the app, our service provider RevenueCat, Inc. (USA) acts as a data processor: revenuecat.com/privacy. This transfer is necessary to show the store's prices and deliver what you buy (KVKK art. 9/6-b, GDPR art. 49(1)(b)). Apple or Google take the payment in their own name and handle it under their own policies.

5. How long, and deleting

Your data is kept until you delete your account. In the game, go to Settings → Delete account to do it yourself. This immediately deletes your cloud save, your entries on every leaderboard, your nickname and your sign-in account; remaining backup copies leave Google's systems within its own deletion periods. For the progress on your device, use "Reset progress" in Settings, clear your browser data or uninstall the app. If you can't open the app, you can also ask for deletion on this page: dumusoft.com/slimefusion/delete-account. Your purchase records are kept at RevenueCat so you can restore your purchases; you can ask for them to be deleted at muti138@gmail.com and we delete them within 30 days. Apple or Google keep store receipts under their own rules.

6. Your rights

Under KVKK art. 11 you can ask whether your data is processed, request information about it, learn why it is processed and who it is transferred to, ask for incomplete or wrong data to be corrected or deleted, object to the processing and claim compensation for damage. If you are in the European Union you also have the GDPR rights of access, rectification, erasure, restriction, portability and objection. Send requests to muti138@gmail.com; we answer within 30 days at the latest. You may also complain to the Turkish Personal Data Protection Authority (in the EU, to your country's data protection authority).

7. Children

Children under 13 should not create an account; they can play as a guest, without sending any data. If the age is higher in your country (for example 16 in some EU countries), that age applies; below it, don't create an account without a parent's permission.

8. Security

Connections are encrypted (HTTPS). The database is protected by security rules: each player can only see and change their own cloud save and only write their own leaderboard entry, and the server checks that submitted scores are possible. If a data breach ever happens, we notify the Personal Data Protection Authority and the people affected within the time the law sets (at most 72 hours).

9. Other platforms

If you play on a platform such as CrazyGames or itch.io, that platform's own privacy policy applies too. The CrazyGames version has no account system of ours. If you downloaded the game from the App Store or Google Play, Apple's or Google's own policies apply as well.

10. Changes

If this notice changes, the date above is updated. Versions in other languages are translations of the Turkish text; if they differ, the Turkish version prevails.