Ludon Studios website privacy notice
Current version · Effective 16 October 2026
This notice explains how personal data is handled when you visit these websites or contact us through their links. Data processed by the BLOOCK mobile game is covered separately by the BLOOCK Privacy Policy.
1. Who is responsible
A natural person based in Türkiye operates the websites under the Ludon Studios brand and is referred to in this notice as Ludon Studios. Ludon Studios is not a separate legal entity. Ludon Studios is the data controller and, under Türkiye's Law No. 6698, the veri sorumlusu.
Address: No postal address is published; the publisher can be reached by email at hello@ludonstudios.com
Email: hello@ludonstudios.com
No representative has been appointed in the European Union or the United Kingdom.
2. Information generated by a visit
Our website infrastructure processes connection information needed to deliver and protect a requested page. Depending on the service, this includes your IP address, request time, page address, referring address when provided by your browser, browser and device information, language, response status and security signals.
We use necessary connection information to deliver pages, prevent attacks, diagnose errors and maintain availability. Our legitimate interests are operating a reliable website and protecting visitors and the service, where that legal basis is available and does not override your rights. Processing required by a specific law is based on that legal obligation. We do not rely on these grounds to avoid a consent requirement for optional tracking.
3. Cookies, browser storage and third-party content
The following describes the technologies used on these websites, their purposes, duration and the choices available to you:
The websites set no cookies and use no local or session storage, analytics, advertising, embedded third-party content or fonts loaded from another service; their fonts are served from our own domain. Two technologies run on them:
| Technology | Purpose | Provider | Duration | Status |
|---|---|---|---|---|
| Our own page script (site.js) | Page animations, which follow your reduced-motion setting | Ludon Studios | While the page is open | No choice needed: it stores and reads nothing on your device |
| Network Error Logging | Asks your browser to report a failed connection to our sites to Cloudflare; a report contains the page address, the type of error and your IP address | Cloudflare | Your browser keeps this instruction for up to 7 days | Treated as necessary for network reliability; your browser's settings may block it |
Where legally required, optional analytics, advertising or embedded third-party content loads only after your choice. You can refuse an optional use or later change your choice using the website's applicable controls. Legal information, support and deletion instructions remain accessible if you decline optional technologies. Blocking strictly necessary browser functions may affect a feature that depends on them; the relevant control explains this where applicable.
A link to another website is different from embedded content. If you follow an external link, that website's own notice applies. We do not control an external website's practices.
4. Emails and requests
If you email us, we receive your email address, message headers, message and attachments. We use the information necessary to respond, provide requested support, handle a complaint or rights request, prevent abuse and maintain relevant legal records.
The legal basis depends on the request: steps taken at your request or performance of a valid agreement for service support; legal obligations for applicable rights requests; and legitimate interests in resolving other correspondence, safeguarding the service and handling legal claims where permitted. If a particular use requires consent, we obtain it separately.
Do not send passwords, authentication codes, complete card details or unnecessary identity documents. We may ask for proportionate verification before handling a sensitive request.
5. Providers and disclosures
Our hosting, content-delivery, security and email providers, their roles and relevant privacy information are listed below:
| Provider | Service and role | Personal data | Where | Retention |
|---|---|---|---|---|
| Cloudflare, Inc., United States | Hosts both websites (Cloudflare Pages), delivers and protects them (DNS, encryption, security) and receives network error reports. It also forwards email sent to hello@ludonstudios.com to the mailbox in which we read it (Cloudflare Email Routing). Processor. | IP address; request details such as the page address, time, browser and referring page; security signals and network error reports; for email, the addresses, headers and content of the message | Cloudflare's global network, including the United States | Per the provider's own terms |
| Google: Google LLC, United States, and Google Ireland Limited, Ireland (email) | Hosts the mailbox in which we read the email sent to hello@ludonstudios.com that Cloudflare forwards, and sends our replies from that address. Its role is the one Google's terms give the email service we use. | For email, the addresses, headers and content of the messages you send us and of our replies | United States and other countries where Google operates | Per the provider's own terms |
No other provider receives information about a visit.
We may also disclose necessary information to professional advisers subject to confidentiality, authorities or courts where required by law, or parties involved in a genuine legal claim. If operation of a website is transferred, personal data is handled with appropriate notice and safeguards. Disclosure is limited to what the purpose requires.
6. Processing locations and international transfers
We operate from Türkiye. The following identifies the processing locations and transfer safeguards relevant to these websites:
Cloudflare processes website data, and the email it forwards to us, on its global network, including in the United States. It does so under its own data protection terms, which include the European Commission's standard contractual clauses for transfers from the EEA and the United Kingdom.
Google, which hosts the mailbox and sends our replies, processes that email in the United States and other countries where it operates, under its own terms for the email service we use.
You may contact us for further information or a copy of an applicable safeguard, with confidential information protected where necessary. A provider's global presence is not, by itself, a legal basis for an international transfer.
7. Retention
We retain connection and security records only for the period justified by fault investigation, proportionate abuse prevention and any specific security incident; an investigation does not justify keeping unrelated logs indefinitely. Correspondence is retained while a request remains open and for the period necessary to document its resolution, meet a legal obligation or address a reasonably anticipated claim. Information provided only for verification is removed or minimised once that purpose is fulfilled unless a specific obligation requires retention.
Cookie and browser-storage lifetimes appear in section 3. Provider retention and any applicable fixed website log or backup periods are described in section 5. Records subject to a specific legal preservation requirement are restricted and kept only for that requirement. Information that is irreversibly anonymised may be kept as aggregate statistics.
8. Your rights
Depending on the law that applies, you may request access, a copy, correction, deletion, restriction or portability; object to processing based on legitimate interests or to direct marketing; withdraw consent; and contest certain decisions based solely on automated processing. Withdrawing consent does not affect earlier lawful processing.
Under KVKK Article 11, rights also include learning the purpose of processing and whether data is used accordingly, learning domestic or overseas recipients, requesting notification of required correction or deletion to recipients, objecting to an adverse result arising exclusively from automated analysis, and seeking compensation for unlawful processing.
Email hello@ludonstudios.com. We respond within the applicable legal period: normally one month under the GDPR, subject to a permitted extension notified in time, and within 30 days under the applicable KVKK procedure. Requests are normally free, subject only to exceptions permitted by law. We may need proportionate information to verify your identity or authority.
You may complain to the competent supervisory authority, including the Kişisel Verileri Koruma Kurumu in Türkiye or the relevant EEA or UK authority where applicable. Local procedural requirements and judicial remedies remain available.
9. Young visitors
The websites provide information about Ludon Studios and BLOOCK; they do not remove the Game's age requirements or grant permission to use restricted features. A young person or parent may access support, privacy and deletion information. If you believe a child's information has been collected unlawfully, contact us so we can assess and address it. We do not ask visitors to reveal their age merely to read a legal page.
10. Security and changes
We apply technical and organisational measures appropriate to the information and risks involved. No website or email system is completely secure. Report a suspected vulnerability to hello@ludonstudios.com without accessing other people's data or disrupting a service. We assess incidents and make any legally required notifications.
We publish the current version and effective date of this notice. Material changes receive appropriate notice, and new consent is requested where required before the affected optional use begins.