EdgeOut
Privacy Policy
Last updated: 7 November 2026
In short
You sign in to EdgeOut with your Google account. Your account, player name, rating and match records live on our server at Convex, and your name and stats are visible to other players. The mobile app shows Google AdMob banner ads. To delete your account you need to write to neuvikon@gmail.com; there is no delete button in the app.
Who is responsible
EdgeOut is published by Neuvikon. Neuvikon is the data controller under the GDPR and Turkey's Law No. 6698 (KVKK).
- Data controller
- Neuvikon
- neuvikon@gmail.com
Privacy contact: neuvikon@gmail.com
What this covers
This policy covers EdgeOut, an online strategy game published by Neuvikon for Android and iOS, and the game's server on Convex.
What we process and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name, email address, email verification status, profile photo link and Google account ID from your Google account | Creating your account and recognising you | GDPR Art. 6(1)(b): performance of a contract | Until your account is deleted |
| Google sign-in tokens | Completing Google sign-in | GDPR Art. 6(1)(b): performance of a contract | Until your account is deleted |
| Session record: session token, IP address, browser/app details, expiry time | Keeping you signed in and protecting your account from others | GDPR Art. 6(1)(f): legitimate interest in protecting accounts | Deleted when you sign out; an expired record may remain until your account is deleted at the latest |
| Player name (up to 20 characters) and profile: MMR, rank, level, wins, losses, draws, streak | Showing you to opponents and on the leaderboard | GDPR Art. 6(1)(b): performance of a contract | Until your account is deleted |
| Game progress: XP, daily quests and streak, tutorial status, days played | Saving your progress and working out quests and rewards | GDPR Art. 6(1)(b): performance of a contract | Until your account is deleted |
| The time you accepted the terms of use | Being able to show the terms were accepted | GDPR Art. 6(1)(f): legitimate interest in establishing and defending legal claims | Until your account is deleted |
| Match record: both players' numbers, mode, board state, last move, clock, emotes, result, rating change | Running the match on the server and working out results and rankings | GDPR Art. 6(1)(b): performance of a contract | Not deleted automatically. Once your account is deleted, the number in it can no longer be linked to you |
| Matchmaking queue entry (MMR, mode, join time) and friend invite code | Finding you an opponent and starting a match with a friend | GDPR Art. 6(1)(b): performance of a contract | Deleted when you are matched or leave the queue; an invite code lasts up to 10 minutes |
| Server logs: player number, MMR, match start and end, queue events | Finding errors and stuck matches | GDPR Art. 6(1)(f): legitimate interest in keeping the game running | As long as Convex's log retention period |
| Advertising ID (Android advertising ID, or IDFA on iOS if you allow it), IP address, device details, ad impressions and clicks | Showing and measuring Google AdMob banner ads and preventing fraud | GDPR Art. 6(1)(f): legitimate interest in funding the free game with ads | As long as Google's own policy sets |
| Your email address and message when you write to us | Answering support and deletion requests | GDPR Art. 6(1)(f): legitimate interest in answering players' questions | Up to 1 year after the matter closes |
How data is collected
Your Google details come from Google when you sign in. You type your player name at first sign-in. Game, session and log records are created automatically as you play. AdMob collects ad data directly and automatically from your device. Email data arrives when you write to us.
Do you have to provide it
To play you need to sign in with Google and pick a player name; without them no account can be created. The box comes pre-filled with your Google name, but you do not have to use your real name. Writing to us is optional.
What we do not collect
- Location, contacts, photos, camera or microphone data. The app does not ask for these permissions.
- Free-text chat. The game only has six preset emotes.
- Passwords. Google handles sign-in and we never see your password.
- Usage analytics. The app has no analytics tool.
- Payment details. There are no in-app purchases.
- Your name, email and game stats are not sent to AdMob.
What other players see
Your opponent sees your player name, rank, level, wins and streak, and the emotes you send. If you are in the top 20, your name, MMR, rank, level and win count appear to everyone on the leaderboard. The player name box is pre-filled with your Google name at first sign-in, and that name is what others see unless you change it. You cannot change it later in the app. Your email address is not shown.
Ads
The Android and iOS apps show a Google AdMob banner at the bottom. We do not send a setting that turns personalisation off, so ads may be personalised according to Google's settings and your device preferences.
On iOS the app asks for Apple's tracking permission (ATT) before starting ads; if you refuse, the IDFA is not shared. Apart from that, the app has no separate ad consent screen.
Your ad preferences: https://myadcenter.google.com/ . Google's advertising cookies: https://policies.google.com/technologies/ads . How Google uses this data: https://policies.google.com/technologies/partner-sites
Android permissions
The app uses the internet, network state and advertising ID permissions. If Android backup is on, app data may be backed up to your own Google account.
This page
neuvikon.com's hosting provider may keep standard access logs such as IP address, browser details and a timestamp when you open this page. The site's general privacy policy has the details.
Who receives data
| Party | Role | Location |
|---|---|---|
| Convex | Hosts the game's server, database, sign-in and logs. Processes the account, session and game data in this policy. | EU (Ireland, eu-west-1) |
| Google (sign-in) | Runs Google sign-in and passes your account details to our server. | Global |
| Google AdMob | Shows and measures banner ads. Receives the advertising ID, IP address and device details directly from your device and processes them under its own policy. | Global |
| Google Play and Apple App Store | Distribute the app. Your store account and download data fall under their own policies. | Global |
| Google (Gmail) | Email service where support messages are stored. | Global |
We use Convex to run the game. Google AdMob, Google and the app stores process what they receive under their own policies, partly for their own purposes too. We do not sell your data. We may disclose information where a lawful request from an authority requires it.
International transfers
Account and game data are hosted in Convex's Ireland region, which is outside Turkey. Ad data, Google sign-in and support email are also processed on Google's infrastructure, which may be outside your country.
Security
Traffic between the app and the server is encrypted. Your identity comes from a session verified on the server, your moves are checked on the server, and request rates are limited. Your sign-in session is kept in the app's local storage on your device.
Deleting your data
There is no delete button in the app. To delete your account, write to neuvikon@gmail.com from your Google account's email address. We delete your account, Google details, sessions and player profile, and you leave the leaderboard. Past match records stay as part of your opponents' history, but the number in them can no longer be linked to you. The sign-out button on the profile screen only ends your session. You can reset your advertising ID in your device settings.
Children
EdgeOut is a competitive strategy game played with Abalone rules, for players aged 13 and over. The terms of use do not allow anyone under 13 to play and the game requires a Google account, but it does not ask your age. We do not knowingly collect personal data from children and delete an account if we learn it belongs to someone under 13.
Your rights
You may ask for access to your data, correction, erasure, restriction and portability, and you may object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time, without affecting earlier processing. Turkish users have the rights in KVKK Art. 11, listed on our data protection notice page.
Write to the address above with your name and request. It is free, and we answer within one month at the latest (30 days under KVKK). KVKK applications are made in Turkish.
Complaints
You can complain to us first. You may also complain to your local data protection authority (in the UK, the ICO) or, in Turkey, to the Personal Data Protection Board (KVKK).
Changes
When this text changes, the date at the top changes too. Significant changes are also announced in the product or its release notes. We do not respond to browser Do Not Track signals.