Bu sayfanın Türkçesi de var. Türkçe'ye geç

Privacy Policy

Merrycade is built so that your gift stays yours. This policy explains, in plain language, what the app and this website do with information.

Last updated: 28 October 2026

Summary

In short: Merrycade has no accounts, no servers, no analytics, no advertising and no tracking. Everything you create is stored on your device until you decide to share an invitation file with someone, using an app you choose. We, the developer, never receive your photos, words or voice.

Who we are

Merrycade is published by Çağlar Sert, an independent developer based in Istanbul, Türkiye (“we”, “us”). For any privacy question or request, contact caglar.sert1@gmail.com.

This policy covers the Merrycade apps for iOS, iPadOS and Android and this website.

Information the app processes

All of the following is processed on your device. None of it is sent to us.

DataHow it is processedWhere it is storedDoes it leave your device?
Photos you pick (faces, gift-box photos, final photo)Chosen with the system photo picker. Faces are detected and cut out on the device with the platform's on-device image APIs; cropping and colour adjustment happen locally.The app's private storageOnly inside an invitation you choose to share. The original photo used for a face is not included — only the cropped face.
Names, nicknames, dialogue, notes, letters, datesTyped by youThe app's private storageOnly inside an invitation you share
Optional voice messages (up to 45 s each)Recorded and compressed on the deviceThe app's private storageOnly inside an invitation you share
Game progress and settingsSaved locallyThe app's private storageNever
Creator purchaseHandled by the Apple App Store or Google Play; the app keeps a sealed local record that the purchase existsYour store account; a local flag on the deviceProcessed by Apple or Google under their own privacy policies

What we do not do

  • No developer servers, databases or cloud storage.
  • No user accounts or sign-in.
  • No analytics, advertising, attribution or crash-reporting SDKs.
  • No tracking across apps or websites, and no access to the advertising identifier (IDFA/AAID).
  • No location, contacts or camera access.
  • No sale or sharing of personal data with anyone.

The app makes no network requests of its own. The only network activity is performed by the platform's purchase system (StoreKit on Apple devices, Google Play Billing on Android).

Sharing invitations

When you tap Invite, the app asks for your confirmation and then creates a .ccgift file with the adventure's cropped faces, gift-box photos and notes, dialogue, letter and voice clips. You send it with the app you choose (Messages, WhatsApp, AirDrop, e-mail, Files…), which transmits it under its own terms.

Anyone who has the file can open it in Merrycade. The file is not encrypted, so share it only with the person it is meant for. Please include other people's photos or voices only if you have their permission.

Permissions

  • Photos: the system photo picker is used, so Merrycade does not need access to your whole library — it only receives the photos you pick.
  • Microphone: requested only when you tap Record, used only for optional voice messages.
  • Camera, location, contacts, tracking: not used.

Storage, retention and deletion

Your adventures stay on your device until you delete them. Delete one from My Adventures, or everything with Settings → Delete all my data. Uninstalling the app removes all of its data. Invitations you already shared remain wherever you sent them, and the recipient's copy is under their control.

Children

Merrycade is designed for teenagers and adults who create a gift for someone they know. It is not directed at children under 13, contains no ads, chat or online interaction, and collects no personal data. If you are a parent and have a question, contact us.

Your rights (GDPR, KVKK and similar laws)

Depending on where you live — for example under the EU/UK GDPR or Türkiye's Personal Data Protection Law No. 6698 (KVKK) — you have rights to access, correct, delete and port your personal data and to object to processing. Because we do not collect or store personal data, there is normally nothing for us to hand over or delete: your data is on your device and you control it directly with the deletion options above.

You can still contact us at caglar.sert1@gmail.com with any request and we will reply within 30 days. You also have the right to complain to your local data protection authority.

Security

Data is kept in the app's private storage, protected by your device's operating system. Invitation files are checked when opened (format, size limits and checksums) so that damaged or tampered files are rejected.

This website

This website is static and hosted on GitHub Pages. It uses no cookies, no analytics and no third-party fonts or scripts; fonts and images are served from this site. Your browser may store one small local setting so that a language suggestion is not shown again. GitHub, as the host, may process technical data such as IP addresses in server logs for security; see GitHub's privacy statement.

Changes to this policy

If this policy changes, the new version will be published on this page with a new “last updated” date. Significant changes will also be mentioned in the app's release notes.

Contact

Çağlar Sert, Istanbul, Türkiye — caglar.sert1@gmail.com