Privacy statement
Last updated: 18 October 2026
One privacy statement for the Naya Games website, email support and the game versions expressly identified below.
1. Who is responsible?
Yalcin Narin presents and publishes games under the name Naya Games. For privacy questions or support, email naya_games@hotmail.com.
This statement covers naya-games.com, email support, Lumenflow for Windows 1.0.0-rc1 and Lumenflow for Android 1.0.6 (build 16), as described below. Other versions and future online features are covered only when expressly added.
2. Visiting the website
This website presents games and links to external stores. It has no customer accounts, checkout, payment processing or purchase library.
The current host is OpenAI ChatGPT Sites, with Cloudflare Workers and a Cloudflare D1 database. Delivering and protecting the website involves technical requests. The hosting infrastructure may process IP addresses, requested pages, timestamps, browser information and errors.
We use necessary technical processing to operate, secure and troubleshoot the website. Where the GDPR applies, our basis is our legitimate interest in a secure, functioning website.
You can browse this website without signing in. Administration is restricted to the owner: the server compares the authenticated Site identity with the stored owner ID. The application keeps that Site-specific ID, without automatic expiry, for access control. It does not store a ChatGPT password. The public contact email is not an administrator login credential.
Platform logs, backups and authentication storage are governed by the hosting service’s policies. No site-specific deletion period has been confirmed; the application’s 90-day statistics rule does not apply to those records.
3. Visitor statistics and store clicks
Our own statistics function runs within the existing Sites hosting and central D1 database. It starts only after you choose to allow statistics. Refusing does not prevent browsing or watching the hosted trailer. The purpose is to improve the website and game presentation; the basis is consent.
The database records a random event ID and page-view ID, timestamp, page path, game, event type, store for a valid outgoing click, website language, broad device category, referring domain if available, an allowlisted campaign code and a test-traffic flag. It recognises a browser through a hash of a random visitor code from a signed cookie.
These linked events are pseudonymous, not anonymous. Estimated unique visitors are browsers, not identified people. The dashboard displays grouped totals; grouping alone does not guarantee anonymity, especially with small numbers. The analytics table does not store IP addresses, raw browser signatures, full referring URLs, names, email addresses or payment details.
Events become eligible for deletion after 90 days and are removed at the next measurement or dashboard request. This is not a scheduled deletion at exactly day 90. The visitor cookie expires after 30 days. Test traffic and visits recognised as belonging to the signed-in owner are separated from other measured visits.
A store click is not a sale. Disabled Coming soon buttons produce no store-click event. Click-through rate is measured game page views with at least one valid store click divided by all measured game page views, multiplied by 100. Repeated clicks do not increase that numerator. No percentage is shown without measured game page views.
Use Privacy settings in the footer to change your choice, or Withdraw statistics consent below. Withdrawal stops new measurement and removes the visitor cookie. It does not automatically erase earlier events or change the lawfulness of earlier processing; you can contact us about deletion.
4. Cookies, preferences and videos
The table covers storage used by this website and its host. Browser preferences have no automatic expiry; you can change them or clear site data in your browser.
The trailer and images are served directly from the same Sites website. The HTML video player uses no external embed, no advertising or player analytics and no autoplay. Video preload is disabled; playing requests the file from our host. This ordinary playback is not permission for statistics, which remains a separate choice.
Clearing browser storage can reset your language, theme and consent choice. The owner’s administration sign-in uses the hosting service’s authentication flow and associated storage, governed by that service’s policies; visitors do not need to use it to read the website.
| Storage | Purpose and provider | Duration |
|---|---|---|
| naya.theme · localStorage | Naya Games: remembers light/dark theme. | Until changed or browser site data is cleared. |
| naya.lang · localStorage | Naya Games: remembers website language. | Until changed or browser site data is cleared. |
| naya.analytics · localStorage | Naya Games: remembers allow/refuse statistics. | Until changed or browser site data is cleared. |
| naya_visit · cookie | Naya Games: signed random browser identifier for consented statistics; HttpOnly, Secure, SameSite=Lax. | 30 days after issue, or earlier withdrawal/removal. |
| __cf_bm · cookie | Cloudflare: necessary bot protection. | 30 minutes of inactivity. |
5. Email support
When you email naya_games@hotmail.com, we receive your email address, any name, your message and attachments. We use them to answer your question and resolve problems. There is no website contact form or automatic upload of support files from this website.
The mailbox is provided by Microsoft Outlook.com/Hotmail. Do not send passwords, bank card details or unnecessary sensitive information. Check screenshots and log files for personal information before sending them.
Where support is necessary for our contract with you, that is the legal basis. For other questions, our basis is our legitimate interest in replying and providing help.
We have chosen a support retention period of 12 months after the case is resolved. Only information needed for a legal obligation or dispute may be kept longer for that purpose. This is a mailbox management policy: the website cannot automatically delete email. Microsoft may retain deleted items during its own recovery periods as described in its privacy statement.
6. Lumenflow for Windows
This section covers Lumenflow Windows 1.0.0-rc1, as documented in the Windows data inventory and release validation dated 17 October 2026. It applies to that reviewed build, not automatically to later builds or Android.
The game stores campaign progress, the current puzzle, moves, unlocked abilities, tutorial progress, language and audio/visual preferences locally. Saves and local backup copies are normally kept in %USERPROFILE%\AppData\LocalLow\Lumenflow Observatory\Lumenflow. They let you resume play without an online account. Saves remain until removed; deleting the game folder may leave them behind. Windows/Unity also stores local display preferences.
Local diagnostic logs can contain operating-system, graphics/audio-device, error and local-path information. The reviewed build has no player account, cloud-save, advertising, in-game-payment or automatic support-upload implementation. Analytics and cloud diagnostic reporting are disabled. The documented startup/resume checks did not detect the earlier telemetry requests; these limited observations are not a guarantee that every possible network or native-crash condition was tested. If you email logs yourself, the email-support section applies.
7. Lumenflow for Android
This section covers Android version 1.0.6, version code 16, package com.lumenflow.mobile. It is based on the technical report dated 18 October 2026, which reviewed the project, final APK and targeted OnePlus checks. It does not automatically apply to later builds.
The game saves chapter and level progress, puzzle and board state, moves, language, sound, motion, timer and graphics preferences on your device so you can resume play. A random local round identifier is used to resume the current level; it is not an online account ID.
On the checked device, saves are in /storage/emulated/0/Android/data/com.lumenflow.mobile/files. The exact location can vary with device and storage configuration. The game uses readable JSON files, temporary files and local backup copies, without its own encryption or automatic deletion period. Unity/Android may also keep preferences, caches and diagnostic logs containing device information, errors and local paths. The complete internal log inventory and retention periods were not established.
There is no complete in-game data-erasure function; restarting a level does not erase all campaign data. Android App info → Storage → Clear data or uninstalling normally removes local app data. A system backup may restore it after reinstallation. Erasure and restoration were not tested in this review; the game does not delete cloud backups.
Android system backup is allowed in this build. Depending on Android version, manufacturer, account, settings and quotas, progress, language, preferences and backup files may be included in Google/Android cloud backup or device transfer. This is operating-system functionality, not a Naya Games cloud-save service, and can operate without the game having internet permission. No backup transfer or restoration was measured; use your device or backup provider’s settings to manage these copies.
The reviewed APK requests no Android permissions, including INTERNET, contacts, location, camera, microphone, notifications or advertising ID. App-specific file storage does not require shared-storage permission. No player accounts, in-app purchases, advertising integration, multiplayer, own cloud saves, third-party analytics/crash service or automatic support uploads were found in the reviewed game integration. Game and language assets are packaged locally.
Unity analytics, diagnostics, advertising and purchasing services are disabled in the configuration. Engine components and some startup flags remain present; their presence alone does not prove an active service. No complete network capture or crash-upload test was performed. The missing INTERNET permission limits the app’s direct network access; it does not rule out browser or operating-system traffic. We therefore do not claim that no data can ever leave the device.
The privacy button opens https://naya-games.com/en/privacy in your external browser, without adding a player ID, progress or language parameter. This browser transition was checked on OnePlus. The website and browser may process normal technical and cookie data; the website sections above apply. If you choose to email logs or screenshots to us, the email-support section applies.
8. Purchases through itch.io
Purchases, downloads, re-downloads and refund requests are handled by your chosen store under its terms and privacy statement. Lumenflow for Windows and Android is available on itch.io. This website has no payment form, receives no full card details through a checkout, and currently imports no store orders.
itch.io may make purchase information available to publishers under its payment and account settings. This website does not import those records. The itch.io privacy statement explains the information collected when you use its store. No claim is made here about a particular payment mode or the contents and retention of publisher-account records.
9. Service providers and international processing
The confirmed services are OpenAI ChatGPT Sites for hosting and access, Cloudflare Workers/D1 for the underlying application and statistics storage, and Microsoft Outlook.com/Hotmail for email. External stores process data when you use their services. No Render service or external analytics service has been added to this website.
The services process information needed for their functions. Their linked privacy notices explain retention criteria and international processing; they do not establish a site-specific storage country or a fixed platform-log deletion period. Contact naya_games@hotmail.com for privacy questions. Information may also be disclosed when legally required.
Official provider information
10. Your rights
Depending on applicable privacy law, you may request access, correction, deletion, restriction or portability of personal data, and object to certain processing. If processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
Email naya_games@hotmail.com. If there is reasonable doubt about your identity, we may ask only for additional information necessary to verify it. Where the GDPR applies, we normally respond within one month and inform you within that period about any permitted extension and its reason.
You may complain to a competent data protection authority, for example in the EU country where you usually live or work.
11. Changes
We update this statement when the website, games or data processing change. The date above is the latest update. We communicate important changes appropriately. Other game or platform sections will be added when their actual processing has been checked.