Effective date: 3 August 2026
SHIMORI is a puzzle game for iPhone, made by Can Ahmet Yüzer, trading as candev (io.candev.shimori). This page explains what happens to your data when you play it.
Two things worth knowing before you read the rest: your game progress never leaves your phone. The only outside party that can receive anything about you is Google, and only through advertising.
Can Ahmet Yüzer, trading as candev, is the developer of SHIMORI and the controller, under Article 4(7) GDPR, for anything on this page that we actually process.
Can YüzerSHIMORI stores your game progress locally, using Apple's UserDefaults:
This is never transmitted anywhere. There is no account, no login, no server, no cloud sync, and no backend of any kind operated by us. We never receive it, see it, or hold a copy ourselves. If you uninstall SHIMORI, this data is gone, because it only ever existed on your phone.
SHIMORI uses Google AdMob to show full-screen adverts between levels, and optional rewarded videos you can choose to watch for an in-game reward.
When an advert is requested, Google may process:
SHIMORI's privacy manifest declares this to Apple under four categories: device ID, advertising data, product interaction, and coarse location — all linked to third party advertising, and all used for tracking. You will see the same categories on SHIMORI's App Store product page.
This is Google's processing, not ours. Google's SDK sends this data straight from your device to Google; it does not pass through us, and we do not store or see it. Google acts as an independent party here, not as our contractor — which is also why a request about what Google does with it has to go to Google, not to us.
You can remove the automatic full-screen adverts permanently with a one-off in-app purchase. After that, SHIMORI stops requesting them. Rewarded video remains available as something you can choose to start — if you do, Google is still involved, because you have actively asked for an ad.
If you are in the European Economic Area or the UK, Google's User Messaging Platform shows a consent form before any advert is requested. Your answer is stored by that SDK, not by us.
You can change your answer at any time: open SHIMORI's in-app settings and choose Privacy options.
Separately, iOS asks your permission before any app can use your advertising identifier for tracking. SHIMORI shows this system prompt after you have solved three puzzles — deliberately not at launch, so you see it with some context instead of as the first thing the app does.
If you decline, advertising still works, but it is not personalised: Google cannot use your IDFA to link ads to your activity elsewhere.
You can change this decision at any time in iOS Settings — see Managing your choices below.
All purchases in SHIMORI, including ad removal, are handled by Apple's StoreKit. Apple is the seller and processes the transaction. We never see or store your payment details. SHIMORI only receives a status: whether a purchase is valid and finished.
Apple's own policy covers how Apple handles that transaction: Apple's Privacy Policy.
GDPR requires a lawful basis before personal data is processed. Here is what applies, and to whom:
You have the right to access, correct, delete, restrict, or export your data, and to object to processing. Here is how that actually works given who holds what:
You also have the right to lodge a complaint with your local data protection supervisory authority, or the UK Information Commissioner's Office if you are in the UK — regardless of whether we hold any data about you.
We do not sell personal information. We do not receive money or anything of value from Google in exchange for data — Google's advertising service is something we integrate, not something we sell access to.
"Sharing" is a separate, broader category under CPRA. It covers making information available to a third party for cross-context behavioral advertising — Google using your advertising identifier to show interest based ads across different apps — even when no money changes hands. If you allow tracking and see personalised ads, that use can count as sharing. If you decline tracking, it does not.
The coarse, IP derived location Google may process is not "precise geolocation" under CPRA — it is not accurate enough to place you within the 1,850 foot radius the law uses to define that sensitive category.
Because there is no account and no backend, there is no separate "Do Not Sell or Share" web form pointed at us — there is nothing on our side to opt out of. The real, practical opt-outs are: decline App Tracking Transparency, limit your advertising identifier in iOS Settings, or buy the ad removal purchase, which stops the automatic ad requests that data would otherwise ride along with. See Managing your choices.
You still have the rights to know, delete, and correct what Google or Apple hold about you, and the right not to be discriminated against for exercising any of these — you will just need to exercise them directly with Google and Apple, using the links in this policy.
Google is a US company. When Google processes advertising data from SHIMORI, that processing can happen in the United States and other countries where Google operates.
Google self-certifies to the EU-U.S. Data Privacy Framework, its UK extension, and the Swiss-U.S. Data Privacy Framework — the European Commission's and UK's adequacy mechanism for transfers to certified US companies — and additionally relies on Standard Contractual Clauses for transfers not covered by an adequacy decision. Details: Google's data transfer framework certifications. This adequacy decision is currently valid but is under ongoing legal challenge in the EU courts; if that changes, we will update this section.
We do not operate any infrastructure ourselves, so there is no separate transfer arrangement of our own to disclose. Apple's handling of purchase data is subject to Apple's own policies, linked throughout this page.
Open SHIMORI, go to Settings, and choose Privacy options. This reopens Google's consent form so you can change your answer.
On iOS, go to Settings > Privacy & Security > Tracking. Turn off Allow Apps to Request to Track to block it for every app, or find SHIMORI in the list and turn tracking off just for this app.
iOS does not have a separate "reset identifier" button any more. Revoking tracking permission is the modern equivalent: apps without permission are given a string of zeros instead of your real advertising identifier. Apple's own instructions: If an app asks to track your activity.
Where a request has to go to someone other than us, here is where:
Apple
We do not run servers, so there is no transmission of your data on our side to secure. Your on-device progress data is protected by your iPhone's own security — passcode, encryption at rest, and iOS app sandboxing — none of which we control or add to.
Data that reaches Google or Apple is protected under their own security programs, not ours. See their policies above for specifics.
SHIMORI is not directed at children, and we do not knowingly collect data from children under 13. Because we hold no identifiable data on anyone, there is no practical way for us to knowingly hold data on a child either. If you believe a child has used the app in a way that concerns you, contact canyuezer@icloud.com.
If this policy changes, we will update this page and the effective date at the top. We do not maintain an account system or email list, so we cannot notify you directly — check back here from time to time, especially before a major update.
For anything about this policy or your data:
Can YüzerPrivacy Policy · Datenschutzerklärung · Terms of Use · Nutzungsbedingungen