Last updated and effective: 5 September 2026 · Policy version: 1.4 — an iOS version now exists, so this policy covers it: Game Center replaces Play Games Services there (section 2), the App Tracking Transparency prompt is never shown and no IDFA is read (section 3.1), and the ad SDK’s crash and performance reporting is now stated plainly (section 3.5). The description of the browser leaderboard no longer says “daily planet”: the game has one kind of planet and every round is a new one, while the board itself is still a separate file per day. Version 1.3 added the browser leaderboard; version 1.2 removed the banner, the between-round interstitial and the “Remove ads” purchase.
This policy applies to Four Leaf Clover (the “Game”) as published on the App Store (iOS and iPadOS, bundle com.meptasarim.fourleaf), on Google Play (Android, package com.meptasarim.fourleaf), and as playable in a browser at meptasarim.com/four-leaf/. Where something applies to only one of the three, the text says so.
1. Controller and contact
- Publisher: MEP TASARIM
- Address: Turgut Ă–zal Mah. Akkent Twins Trade A/23, Yenimahalle/Ankara, TĂĽrkiye
- Email: info@meptasarim.com
- Web: https://www.meptasarim.com/
2. Account and game progress
The Game creates no account of its own, does not sign you in with email or social media, and keeps no cloud save of its own. Your best times, your streak of days with a find, and your settings are stored only in your device’s local app storage (in the browser version, in that browser’s localStorage). They are never sent to our servers, cannot be transferred to another device, and cannot be restored by us.
Android only: the Game offers an optional Google Play Games Services sign-in. If you sign in, your achievements and your best find time are sent to Google Play Games Services and associated with your Google account. Nothing is sent unless you sign in, and signing in is never required to play. You can manage that data from your Google Play Games Services account.
iOS only: the same two features are provided by Apple’s Game Center instead. If you are signed in to Game Center on your device, your achievements and your best find time are sent to Apple and held under your Game Center identity. We never see your Apple Account, your email address or your real name — only Apple does — and we cannot read anything back except through the Game Center screens Apple draws. The Game never raises the Game Center sign-in sheet by itself on a first run: it appears only if you tap Trophies or Best times. If you are not signed in, nothing is sent and the rest of the game is unchanged. You can manage or delete this data in Settings → Game Center.
Uninstalling the app, clearing its data, or clearing your browser’s site data permanently deletes this local record.
2a. The browser leaderboard (browser version only)
The browser version at meptasarim.com/four-leaf/ offers an optional daily leaderboard. It is not present in the iOS app or the Android app — those two do not contact this board at all, and the code that would post to it refuses to run in a packaged app.
It is never automatic. After you find the clover, the result screen offers a “Join the board” button. Nothing is sent unless you press it.
You are never asked for a name. The game generates a nickname for you from a fixed list of ordinary words plus two digits, for example “Swift Clover 08”. You may roll a different one. The game has no free-text field anywhere, so nothing you type can ever reach the board, and the nickname is not derived from anything about you or your device.
When you press the button, three things are sent to MEP TASARIM’s own server at meptasarim.com: the generated nickname, your time in seconds, and the date you played. The board keeps only the best time for each nickname, and each day’s board is a separate file.
To stop one person filling the board, the server stores a one-way hash of your IP address combined with that day’s date. It is a counter, not a record: the raw address is never written to the file, the hash cannot be reversed, and it is meaningless on any other day. Board files are deleted on the schedule in section 9.
The nickname and time are public — that is the point of a leaderboard. If you want an entry removed, write to info@meptasarim.com with the nickname and the date.
3. Data processed
3.1. Advertising (Google AdMob) — iOS and Android apps only
The apps show one kind of ad, and no others — and it only ever appears because you asked for it. There is no banner, no ad between rounds, and nothing to buy.
| Format | When it appears |
|---|---|
| Rewarded video | Only when you tap the Hint button yourself. It is never shown unprompted, it is the only ad in the Game, and a round that used one is not ranked. Watching it marks one patch of the planet as containing the clover. |
When an ad is requested, Google may process your IP address, device and app information, ad interactions, consent state and a device identifier. Approximate location (city/country level) may be derived from the IP address. Ads are not personalised — see 3.3.
Which identifier, and this differs by platform. On Android it is the Advertising ID. On iOS it is not the IDFA. Reading the IDFA requires the App Tracking Transparency prompt, and this app never shows that prompt — the code to request it does not exist in the app at all — so the advertising identifier is unavailable to the ad SDK and it falls back to an identifier scoped to this app or this developer. That is also why the App Store privacy label for this app answers no to “Data Used to Track You”.
What the ad SDK reports back to Google. Besides the ad request itself, the Google Mobile Ads SDK collects a device identifier, coarse (IP-derived) location, which ads you have seen, basic product-interaction data such as app launches, and crash and performance diagnostics from within the SDK. This is the ad network’s collection, not ours: none of it reaches MEP TASARIM, and the Game sends nothing of its own. It is listed here, and on the App Store privacy label, because a publisher is responsible for declaring what the components it embeds collect.
The browser version shows no ads and loads no ad code at all.
3.2. Ad consent (Google UMP) — iOS and Android apps only
Players in the European Economic Area, the United Kingdom and Switzerland are shown Google’s consent form before ads load. Your choice is stored on the device and passed with ad requests. You can change it at any time from the same screen.
3.3. Ads are never personalised
Every ad request is sent to Google flagged non-personalised. The ads you see are not chosen from your behaviour in other apps and websites; they are selected from context and approximate location only. The Game does not track you across apps. This costs advertising revenue and is a deliberate choice.
3.4. No purchases
The Game has no in-app purchases of any kind. There is nothing to buy, no subscription, no virtual currency and no loot boxes, and the Game never asks for or handles payment details. An earlier version offered a one-off “Remove ads” product that removed the banner; the banner has since been removed from the Game entirely, so the product was retired with it and Google Play Billing is no longer part of the app at all.
3.5. What we do not use
The Game uses no analytics SDK of its own (such as Firebase Analytics or Google Analytics), no separate crash-reporting SDK (such as Crashlytics or Sentry), no third-party trackers beyond the ad network, and no location, camera, microphone, contacts or file access. The Game never asks you for free text, a name, an email address or a phone number, and never attaches such information to ad requests. The browser version sets no cookies.
One clarification, because an earlier version of this page was too absolute: the ad SDK described in 3.1 does report its own crash and performance diagnostics to Google. We do not receive them and we have no dashboard for them, but they are collected, so saying “no crash reporting at all” would have been wrong. There is still no analytics or crash SDK that MEP TASARIM operates or reads.
3.6. Support correspondence
If you email us, your address, your message and any attachments are processed solely to answer your request. Please do not send passwords, verification codes, payment card details or secret keys.
4. App permissions (Android)
| Permission | Why it is needed |
|---|---|
INTERNET | Only to load ads, the consent form and — if you sign in — Play Games Services. The game itself runs offline. |
VIBRATE | Haptic feedback when a clover is picked and when the four-leaf is found. Can be switched off. |
com.google.android.gms.permission.AD_ID | Access to the advertising identifier, used by Google for ad delivery and fraud prevention. |
The Game requests no location, camera, microphone, contacts, calendar, phone, SMS or storage permission.
4a. What iOS asks, and what it does not
The iOS app requests no runtime permission at boot and shows no permission prompt of any kind while you play. Two things can ask, and only when you act:
| Prompt | When it appears |
|---|---|
| Add to Photos | Only if you share your result card and then choose Save Image in the system share sheet. The card is written to the app’s own cache and handed to iOS; we never receive it. |
| Game Center sign-in | Only if you tap Trophies or Best times while signed out. It is never raised on a first launch. |
The App Tracking Transparency prompt is never shown, because the app never asks to track you — see 3.1.
5. Purchases and real money
There are no in-app purchases, no subscriptions, no virtual currency and no loot boxes. Nothing in the Game costs money and the Game never handles payment details. The rewarded video behind the Hint button is always optional and costs nothing but your time; see 3.1.
6. Children
The Game is not directed at children under 13 and we do not knowingly collect personal data from them. It contains no chat, no user-generated content and no way for players to contact each other. If you believe a child has provided personal data to us, write to info@meptasarim.com and we will delete it.
7. Purposes and legal bases
Data is processed to run the Game, to serve and measure advertising, to prevent fraud, to apply your consent preferences and to answer support requests. Depending on the case, the legal basis is performance of a contract, legitimate interest, a legal obligation, or your consent.
8. Service providers and transfers
Google LLC and its affiliates provide Google AdMob (advertising), the Google User Messaging Platform (consent management), Google Play distribution and Google Play Games Services. These providers may process data outside TĂĽrkiye under their own terms and privacy policies. See policies.google.com/technologies/partner-sites.
Apple Inc. provides App Store distribution, TestFlight and Game Center for the iOS version. Game Center data is held by Apple under your Game Center identity and under Apple’s own privacy policy; we never receive your Apple Account details. See apple.com/legal/privacy.
The browser version is served from MEP TASARIM’s own hosting. Standard web server logs (IP address, user agent, requested path, timestamp) are produced by the hosting provider for security and troubleshooting. The browser leaderboard in section 2a runs on that same hosting — no third party is involved in it, and nothing about it leaves MEP TASARIM’s server.
9. Retention
Leaderboard entries (nickname, time, date, and the daily IP hash described in section 2a) are kept for the day they belong to and are deleted within 30 days. Local game data stays on your device until you delete it, clear the app’s data, clear your browser’s site data, or uninstall the app. Advertising and consent records are retained under the publisher settings in Google’s services and that provider’s applicable retention rules. Support correspondence is kept for as long as needed to resolve the request and to meet legal obligations.
10. Your choices and deletion
- Where the consent form is offered, you can change your advertising consent at any time from the same screen.
- On Android you can reset or delete your advertising ID under Settings → Privacy → Ads.
- On iOS there is nothing to reset, because the app never reads the advertising identifier — see 3.1. Settings → Privacy & Security → Tracking will show that this app has not asked.
- You can erase local game data by uninstalling the app, from Android’s app storage settings, or — in the browser version — by clearing that site’s data.
- If you signed in to Play Games Services, you can remove that data from your Google Play Games Services account settings.
- On iOS you can review or delete your Game Center data under Settings → Game Center.
- For access, correction or deletion requests, write to info@meptasarim.com.
11. Changes to this policy
If this policy changes materially, the version number and the date at the top of this page are updated, and — where the change affects what is collected — the change is announced in the app’s store listing notes before it takes effect.
© 2026 MEP TASARIM. Four Leaf Clover is built with three.js, used under the MIT License.