Privacy Policy

lobby · CornerLabs · Last updated: 17 August 2026

This policy explains how lobby, a mobile application developed by CornerLabs, handles personal data. By using the app you accept the practices described here.

1. In short

The app requires no device permissions: it does not access your location, camera, microphone, contacts or photos.
It shows no advertising and collects no advertising identifier.
We do not sell your data.
You can delete your account yourself, from inside the app.

2. What we process

Data	Why	Where it lives
Account identifier and email address	So you can play, and so your account survives a new device	Google Firebase Authentication
Display name (max 12 characters) and chosen avatar	So other players in the room can recognise you	Google Firebase Realtime Database
Game data: the room you are in, game state, your in-game choices	To run the game	Google Firebase Realtime Database
Usage events (room created, game started, …) and a device identifier	To understand which features are used and improve the app	Google Firebase Analytics
Subscription and purchase records	To verify your lobby+ membership	RevenueCat, Apple App Store, Google Play

When you sign in with Google or Apple we receive only your account identifier and email address from those providers. If you use Apple’s “Hide My Email”, we only ever see the relay address Apple generates — never your real one.

We never see your payment details. Card and billing data are handled solely by Apple and Google; all we receive is whether a subscription is active.

3. Legal basis

Performance of a contract: account, game data and subscription status — the service cannot work without them.
Legitimate interests: usage measurement and preventing abuse.

4. Who we share with

We do not sell your data or pass it to third parties for marketing. We use the following providers to operate the service; they process data on our behalf:

Google (Firebase) — authentication, database, analytics
RevenueCat — subscription validation
Apple App Store / Google Play — payment processing

These providers may process data on servers outside your country. Our game data is hosted in the European Union (europe-west1).

5. Retention

Game rooms: abandoned rooms are deleted automatically; room data lives at most a few days.
Account and profile: until you delete it.
Purchase records: retained by the store providers for as long as the law requires.

6. Your rights

Under Turkish Personal Data Protection Law No. 6698 (KVKK) Article 11 and, if you are in the European Union, under the GDPR, you have the right to access your personal data and to request its correction, deletion or restriction, and to object to processing.

Deleting your account

You can delete your account and profile data yourself in the app, under Profilim → Hesabımı sil (My Profile → Delete my account). This cannot be undone. Write to us at the address below if you need help.

7. Children

lobby is not directed at children under 13 and we do not knowingly collect personal data from them. If we learn that we have, we delete it.

8. Changes

We may update this policy from time to time. If a change is significant we will say so in the app. The date at the top shows the last update.

9. Contact

CornerLabs — info@cornerlabs.com.tr