Privacy Policy

This policy covers the Hopora mobile game and the hopora.download website. It describes what the game and the site actually do. Since version 1.2 the game has a shared leaderboard: it gives every player a profile with a player name, keeps a backup of your progress on our server, and, on iPhone, uses your Game Center identity to find your profile again. Separately, the game sends a small set of anonymous gameplay statistics, which you can switch off.

Updated 8 October 2026 (version 1.2): a shared leaderboard for iPhone and Android with a player name of the form Name#1234, a server backup of your progress, a recovery code, Game Center sign-in on iPhone, and the leaderboard on this website. The game now holds a profile about you on our server; the sections "Leaderboard and your profile" and "Your rights" explain what it contains, how long it is kept and how to delete it.

Who we are

Hopora is developed and operated by Berkay Kaynar, an independent developer based in Türkiye, who is the data controller for the processing described here. Contact: through the contact form.

What the game stores on your device

Your score, banked sparks, unlocked couriers and outfits, sound, haptics and statistics settings, chosen language and the state of your purchases are stored in local storage on your device. Since 1.2 the device also keeps a secret key for your leaderboard profile: on iPhone in the Keychain and in your iCloud key-value storage, on Android in the app's storage, which Android's own backup may copy. The game starts no third-party analytics SDK. Uninstalling the game removes the local data; the profile and backup on our server stay until you delete them (see below).

Leaderboard and your profile

To show one leaderboard on iPhone and Android and to bring your progress back after a reinstall or on a new phone, the game creates a profile on our own server at hopora.download the first time it can reach it. The profile contains:

• a random profile ID and a hash of the secret key on each of your devices;
• your player name and number (for example Berkay#4821), chosen at random or taken from your Game Center name, which you can change at any time;
• the courier and outfit you show on the leaderboard, and the platform (iOS or Android);
• your best score on the all-time board and on each day's route, with the run's duration and the courier and outfit you wore, and whether the score is awaiting review;
• on iPhone, if you are signed in to Game Center: your Game Center player ID for this game (teamPlayerID), checked against Apple's signature so nobody else can claim it; your Game Center name is used only to suggest your first player name;
• a backup of your game progress (sparks, unlocks, themes, power-ups, streak, missions), signed by the game, at most 16 KB;
• a hash of your recovery code; the code itself is shown only on your device.

Your player name, number, courier, outfit and scores are public: they appear on the leaderboard in the game and on this website. Your profile ID, Game Center ID, backup and keys are never shown to anyone.

Game Center players who have not opened 1.2 yet. When an iPhone with version 1.2 opens the leaderboard, it reads the top 100 of Hopora's public Game Center leaderboards and sends those entries (Game Center player ID for this game, Game Center name and score) to our server, so that players who have not updated yet still appear, marked "Game Center". When such a player opens 1.2, the row becomes part of their own profile. If you would rather not appear, write to us and we will remove your row.

Reports and moderation. If you report a player name, we store which profile reported which name and when, and send ourselves an email about it. Names that break the rules can be replaced with "Kurye#" and a number, and scores that look impossible are held for review before they appear.

Retention. Daily leaderboards are deleted after 30 days and resolved reports after 90 days. Your profile, all-time score and backup are kept until you delete them. Game Center rows of players who never open 1.2 stay while the board shows them, daily ones for 30 days.

The legal basis is the performance of the game you asked for: the leaderboard, your name and the backup are features of it. For the Game Center rows of players who have not updated, it is our legitimate interest in showing one complete leaderboard, built only from entries Game Center already shows publicly. None of this is used for advertising or tracking, shared with anyone, or linked to the anonymous statistics below.

Anonymous gameplay statistics

To see where the game gets too hard, which couriers people play and whether players come back, the game sends a small set of gameplay events to our own server at hopora.download: that the game was installed or opened today, how a run ended (distance, deliveries, sparks banked and lost, revives and pulses used, the courier and outfit worn), which items were unlocked, and whether a reward was collected or a rewarded offer accepted. Each event also carries the game version, the platform and the number of days since the game was first opened on the device.

These events carry no identifier: not your advertising identifier, not a device or install identifier, not your profile, player name or Game Center ID, and no location. They are kept apart from the leaderboard, are not linked to you or to each other, are not shared with anyone and are not used for advertising or tracking. Your IP address necessarily reaches the server with each request, for the statistics and the leaderboard alike; it is used only to limit request rates, held in memory for at most an hour and never written to disk, and these requests are left out of the web server's access logs. The events themselves are kept for at most 400 days. The legal basis is our legitimate interest in keeping the game working and improving it; you can object at any time with the "Anonymous stats" switch in the pause menu, which stops the sending and deletes anything still waiting on the device.

What this website collects

The site sets no cookies, embeds no trackers and runs no analytics. (The only cookie on the domain belongs to our own moderation page, which only we sign in to.) Our web server keeps standard access logs (IP address, time, requested page, user agent) to operate the site securely; these logs are kept for at most 30 days and are not used to profile visitors. Pages are served from our own server — no third-party fonts, scripts or CDNs are loaded. The leaderboard pages show the same public names and scores as the game, and a name you search for is used only to answer that search.

If you use the contact form, we receive your name, your email address, the topic you pick and your message. They are not stored on the website: our server passes them straight on as an email to our inbox through our email provider so we can answer you, and they are kept there only as long as the conversation needs. To prevent abuse, the form also checks how often requests arrive from your IP address, in memory only. The legal basis is your request to contact us.

Advertising

The game uses the Unity LevelPlay advertising SDK (ironSource), with Unity Ads and Liftoff Monetize in the mediation chain. Ads appear in two places only: two optional rewarded ads on the result screen (revive and double reward), and an occasional interstitial between runs — at the earliest on every third restart, with at least 90 seconds between them.

While the ad SDK is running, the ad networks may process data such as your IP address, device and app information and your advertising identifier in order to select ads, cap their frequency and prevent fraud. That processing is governed by those networks' own policies: ironSource, Unity, Liftoff. Your profile, player name and Game Center ID are never passed to the ad networks.

Players in the European Economic Area, the United Kingdom and Switzerland are asked on first launch whether ads may be personalised; without consent no personalised ads are requested. The legal basis for personalised advertising is your consent, which you can change at any time through "Privacy options" in the pause menu. On iOS, tracking permission is requested through the App Tracking Transparency dialog; declining leaves the whole game available.

After the one-time "Remove ads" purchase the ad SDK is never started, and the revive and double-reward features are granted without any ad.

Purchases

Two one-time, non-consumable products are sold through the App Store or Google Play: "Remove ads", which also unlocks the Solar outfit, and the "Collector Pack", which unlocks three couriers (Dragon, Mini Bot, Raccoon) and two outfits (Candy, Legend) that can otherwise be earned with sparks. No currency is for sale. Payment is handled by the store; the game never sees or stores card or billing data. Entitlements are read from the store receipt and flagged locally, and "Restore purchase" re-enables them on a new device. A purchase stays with the store it was made in: restoring a backup on the other platform does not carry it over.

Permissions

The game does not access the camera, microphone, location or contacts. Internet permission is used for ad and store requests, the leaderboard and backup, Game Center and the anonymous statistics. On supported devices it uses haptic feedback, which can be turned off in the pause menu. The behaviour of the operating system's own backup service is governed by its settings.

Children

The game is suitable for general audiences and is not directed at children under 13. We do not knowingly collect personal data from children. Player names are filtered for offensive words in five languages and can be reported. Where ad consent applies, the ad SDK is configured to request non-personalised ads unless consent is given.

Your rights

You can delete your leaderboard profile yourself, at any time, in the game under Settings > Account > "Delete my leaderboard record". This deletes your profile, your scores, your progress backup and the keys of all your devices from our server at once. Your Game Center ID is then kept only on a do-not-import list, so it is never added back to the leaderboard from Game Center or linked to a new profile automatically. The progress on your device stays, and the game starts again with a new random name.

Under the GDPR, the UK GDPR and the Turkish KVKK you also have the rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Your name can be changed in the game; for anything else, including a Game Center row of yours shown before you updated, write to us through the contact form and say which player name and number it concerns. The same applies to our server access logs and to the ad identifiers processed by the ad networks. You also have the right to lodge a complaint with your local supervisory authority — in Türkiye, the Personal Data Protection Authority (KVKK).

Requests concerning data held by ironSource or Unity are best addressed to them directly through the policies linked above; we will help you if a request reaches us instead.

Changes

We may update this policy. The date below always shows the current version; material changes will be summarised at the top of this page.

Last updated: 08 October 2026