Privacy
Last updated: 15 November 2026
This text also exists in Turkish. Both versions have the same content; if they ever differ, the meaning that is more favourable to you applies.
Hoodut is run by Ahmet Ziya Gökalp, who is also the data controller under Türkiye's Personal Data Protection Law No. 6698 (KVKK). When this text says “we”, it means the operator. It explains what information is processed while you play, for what purpose and where. For questions and requests: [email protected]
In short
- You don't create an account; we don't ask for your name, email address or phone number.
- We set no cookies. We use no advertising, no analytics service and no tool that recognises you or tracks you across sites; the game shows no ads.
- The place you pick, your records and your settings stay on your own device.
- The place and street names you type are searched on your device; they are not sent anywhere unless you ask.
- To see how the game is used and to fix errors, the game sends anonymous counts; our server keeps only daily totals of them. You can turn these counts off.
- We don't sell your personal information or share it for targeted advertising.
- If you email us, your message is kept so that we can reply, and it is deleted no later than 6 months after the matter is closed.
Stored on your device
The game writes the following to the local storage your browser keeps for this site:
- the last place you picked and the last eight places you picked on the map (each one's coordinates, area size, name, the building or land you chose to protect and the game mode), plus the play area built for the last place,
- the highest wave you reached in each place (your record) and the wave you reached at the place of the day on each day,
- the day you accepted the terms of use and the version of the text you accepted,
- whether you closed the guide and the welcome window, turned the sound on or off, the game language you chose with the language buttons, the skin you picked, whether you turned off the anonymous counts and whether the Full Version is unlocked on this device.
None of this is sent to our server. You can delete all of it with the “Delete the records on this device” button in the Settings section of the “Choose a place” window; clearing this site's data in your browser does the same.
So that the game can open without a connection, it keeps its page, scripts, fonts and featured places in the cache your browser keeps for this site. These are the game's own files and contain nothing about you. The “Delete the records on this device” button clears this cache too.
If you press “Share this place”, the game creates a link that opens the place you are playing and an image (the result card) showing that place and your record. The image is drawn on this device. For a place you picked on the map, the “Hide my exact location” option is on by default: the map on the card is blurred and only the neighbourhood or city name is shown, and the link opens a different point 500–800 metres away. If you turn this option off, the link carries the place's coordinates and area size and the image shows its map; the game reminds you of this before you share. The link also carries your record at that place (the number of waves), which the person who opens it sees as a target; it is not added when “Hide my exact location” is on or for the place of the day. You decide who to send the link and the image to; the game never sends them anywhere by itself.
Cookies
The game sets no cookies. We keep your settings and progress only in this browser's local storage; they are not sent to us. Cloudflare, which hosts the site, may set a strictly necessary security cookie if it sees unusual traffic, to filter out attacks. That cookie is not used to recognise or track you, only to tell whether a request comes from a person or from an automated tool.
Kept on our server
Our server only keeps daily totals:
- how many requests for map data arrived that day and how many reads were made from our storage,
- how many times the game was opened, how many levels were built, how many times the place of the day was opened, how many times the Full Version introduction was seen, how many results were shared and how many errors of each kind occurred,
- at the place of the day, which wave each device reached in its first game of that day (one total per day and wave).
The first group is the map data server's own counter; it is kept to stop the site from being overloaded and its paid limits from being exceeded.
For the second group, the game only reports the name of the event to our server (for example “game opened” or “no road found at the chosen place”). The place you picked, the text you typed and information about your device are not sent; no identifier is stored on your device for this count.
For the place of the day result, the game only reports the day and the number of waves you cleared. It tells whether this is your first game of the day from your record for that day, which is already stored on your device, so nothing new is stored. At the end of the game these totals show what share of that day's players you beat; your name or any other information about you is never shown to anyone.
These totals cannot be linked to anyone: no identifier or device information is added to the counts, your IP address is not recorded with them, and which place was requested or who sent the request is not kept. We don't use the counts for any other purpose (such as advertising or personalised content).
You can turn off the second and third groups with the “Anonymous counts” switch in the Settings section of the “Choose a place” window. While it is off, the game sends none of these counts. Your rank at the place of the day is still shown: the game reads that day's totals and works out your rank on your device.
Hosting
The site is hosted on the infrastructure of Cloudflare, Inc., a company based in the United States. On our behalf, Cloudflare delivers the pages and data to you, limits requests to protect the site from overload, passes the counts on to our server and forwards the emails sent to the support address. While doing so it technically processes your IP address and browser information; this may also happen on its servers outside Türkiye.
When you write to us
Messages you send to [email protected] reach the Google Gmail mailbox of Hoodut's operator through Cloudflare's email routing service and are stored there, on servers outside Türkiye. We use your message and email address only to reply to you and to handle your request. Messages are deleted no later than 6 months after the matter is closed.
If you are under 18, tell a parent or another adult before you write to us; you don't need to include your name, address or photo in your message.
What information, on what legal basis
- Delivering the pages, game files and map data to you, and passing the counts on to our server: your IP address and browser information are processed automatically through your browser's requests. Legal basis: necessity for performing the contract formed by the terms of use (KVKK Art. 5(2)(c)) and our legitimate interest in running the game and keeping it secure (KVKK Art. 5(2)(f)).
- Protecting the site from overload and abuse: your IP address is processed automatically to limit the number of requests. Legal basis: legitimate interest (KVKK Art. 5(2)(f)).
- Support messages: your email address and the content of your message are collected by email, when you send them. Legal basis: necessity for handling your request (KVKK Art. 5(2)(c)) and our legitimate interest in replying to you (KVKK Art. 5(2)(f)).
Your location, the search text you type, your records and your settings stay on your device; since they don't reach us, we don't process them.
Transfers abroad
Cloudflare, Inc. and Google LLC are companies based in the United States that also process data on servers outside Türkiye. Türkiye's Personal Data Protection Board has not yet issued an adequacy decision for any country. Your IP address and browser information are therefore transferred abroad when pages are delivered to you, and so are your message and email address when you write to us. This transfer is necessary to provide the game and to reply to your message.
Location
If you press “Use my location”, your browser asks for your permission. Your location is used only on your device, to move the map to where you are or to pick that place; it is not saved on our server. You can withdraw the permission at any time in your browser's site settings.
Other servers your browser connects to
For the game to work, your browser connects directly to the following servers. As with any web request, they see your IP address and the file requested. They don't work on our behalf; they follow their own operators' rules:
- OpenFreeMap (or VersaTiles if it does not respond): the look of the map for picking a place; map data for places outside Türkiye; map data for places in Türkiye when our own storage does not respond. The files for the area you look at or pick are requested.
- Amazon Web Services' open data server: the elevation of the place you pick. The file for an area of about two kilometres is requested.
- The Overture Maps Foundation's open data server on Amazon Web Services: only if you pick a place outside Türkiye; footprints of buildings missing from the map, extracted from satellite imagery. The files for the area around the place you pick and, if needed, the list of data versions are requested.
- Photon (komoot): only if you press “Search the address service”. The text you typed and the approximate position of the map are sent. You don't have to type your home address; you can also pick the place on the map.
- Wikipedia (Wikimedia Foundation): only if you press a building's “About this place” button. The building's name and position are sent; this is a point near the place you picked. If the game is in Turkish, Turkish Wikipedia is asked; if it is in English, English Wikipedia; if the building's article is known in another language, that language's Wikipedia is asked too.
Map data, place names and street names for places in Türkiye, and the software libraries and fonts the game uses, come from our own site.
Some of these servers are outside Türkiye.
Children
Hoodut is a game for a general audience; it is not designed for children under 13. The game asks no one for personal information, whatever their age. IP addresses and browser information are processed only to run the game and keep it secure; they are not used for advertising, profiling or personalised content. If we learn that a message came from a child, we delete it as soon as possible after replying.
Your rights
Under Article 11 of the KVKK, you have the right:
- to learn whether your personal data is processed and, if so, to request information about it,
- to learn the purpose of the processing and whether the data is used for that purpose,
- to know the third parties, in Türkiye or abroad, to whom it is transferred,
- to ask for it to be corrected if it is incomplete or wrong,
- to ask for it to be deleted or destroyed under the conditions of Article 7 of the KVKK,
- to ask for corrections and deletions to be passed on to the third parties to whom it was transferred,
- to object to a result against you that arises solely from automated analysis,
- to claim compensation if you suffered damage because it was processed unlawfully.
You can send your request to [email protected]. We reply free of charge within 30 days at the latest. If you find the reply insufficient or get no reply in time, you can complain to Türkiye's Personal Data Protection Board.
Since our server keeps no record that can be linked to you, only you can delete the records on your device: that is what the “Delete the records on this device” button is for.
Changes
If this text changes, the date at the top is updated. After an important change, the game shows a link to the new text when you open it.