Privacy Policy

Mobile App Wiki ("we", "us") runs mobileapp.wiki, a free knowledge base and community for mobile app developers. We are the data controller for the personal data described here. Contact: androidtesticom@gmail.com.

Residents of Turkey can also read our Data Protection Notice under Law No. 6698. Cookies are covered in detail in our Cookie Policy.

• Account data: name, e-mail address, username, sign-up date and acceptance of these terms. Passwords are stored only as a one-way scrypt hash. If you sign in with Google we receive your Google account ID, name, e-mail and profile picture URL.
• Profile data you add: profile photo, bio and website.
• Content you publish: posts, replies, images attached to posts, votes, follows, reports you file and App Discover listings (name, description, store links, icon and screenshots).
• Security and device data: IP address, browser and device type for each signed-in session (shown to you under Active devices), timestamps, and signals from the Cloudflare Turnstile bot check on sign-in and sign-up.
• Analytics (only with your consent): Google Analytics 4 collects pseudonymous usage data such as pages viewed, approximate country and device type. It is off unless you allow it.
• Preferences on your device: theme and cookie choices are kept in your browser's local storage.

We do not collect special categories of personal data and we do not sell personal data.

• Running the service you signed up for (performance of a contract): your account, profile, posts, listings, follows and notifications.
• Security and abuse prevention (legitimate interest): sign-in sessions, bot checks, rate limits, spam and duplicate-post prevention, moderation and reports.
• Service e-mails (contract): password resets. We do not send marketing e-mails.
• Improving the site (consent): anonymous statistics from Google Analytics, only after you accept analytics cookies.
• Legal obligations: responding to lawful requests from authorities.

Your name, username, profile photo, bio, website, posts, replies, attached images, follower counts and published App Discover listings are visible to everyone. Your e-mail address, IP addresses and sessions are never shown publicly. New App Discover listings are reviewed before they appear.

We use these providers to run the service. They process data on our behalf and only for this purpose:

• Vercel: website hosting and delivery.
• Railway: application server and database.
• Cloudflare: storage and delivery of uploaded images (R2) and the Turnstile bot check.
• Google: Google sign-in and, with your consent, Google Analytics.
• Resend: delivery of password-reset e-mails.

Some of these providers process data outside your country, including in the United States and the European Union. Transfers rely on the safeguards these providers offer, such as standard contractual clauses, and on Article 9 of Law No. 6698 for transfers from Turkey.

• Account and content: for as long as your account exists.
• Deleted accounts: when you delete your account it is hidden and signed out at once. You can undo this by signing in within 7 days. After that the account, its content and uploaded images are deleted permanently, and remaining copies in backups and logs are erased within 30 days.
• Deleted posts and images: removed from the site and from image storage immediately.
• Session records: kept while the session is active and removed with the account.
• Analytics: Google Analytics keeps event data for up to 14 months.

Depending on where you live (for example under KVKK or the GDPR) you can:

• Access and export your data: Settings → Your data & account → Download data.
• Correct your data: edit your profile in Settings.
• Delete your account: Settings → Delete account.
• Withdraw consent to analytics at any time via the "Cookie preferences" link in the footer.
• Object, restrict processing or ask questions by writing to androidtesticom@gmail.com.
• Complain to a data protection authority, such as the Turkish Personal Data Protection Authority (KVKK) or your local EU supervisory authority.

We answer requests within 30 days.

We use HTTPS everywhere, hashed passwords, httpOnly session cookies that can be revoked per device, bot checks on sign-in and sign-up, rate limits, re-encoding of every uploaded image, and two-factor authentication for administrator access. No system is perfectly secure; tell us at androidtesticom@gmail.com if you find a problem.

The site is not directed to children. You must be at least 16 to create an account. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy. The date at the top shows the latest version; for significant changes we will show a notice on the site.