Legal

Privacy Policy

Last updated: 26.10.2026

This Privacy Policy explains how roka.mk ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website at roka.mk, use our mobile applications published on the Google Play Store and Apple App Store, or engage us for client services. By using the Site or our applications, you agree to the practices described in this Policy.

Some of our applications have their own section at the end of this Policy (see 13. World Master). Where an app-specific section differs from the general text, the app-specific section applies to that app.

1. Information We Collect

1.1 Information You Provide Directly

Contact form submissions - name, email address, and any message content you send us through the Site.
Client engagement information - business name, contact details, project requirements, and any documents or materials shared during the course of a project agreement.
Account registration - if any of our applications require account creation, we collect the account details that application needs (for example a username, and in some applications an email address and a password stored in hashed form). The exact data for each app is listed in its app-specific section.

1.2 Information Collected Automatically

When you visit the Site or use our applications, we may automatically collect:

Device information - device type, operating system, unique device identifiers, and mobile network information.
Usage data - pages or screens visited, features used, time spent, crash reports, and other diagnostic data.
IP address and approximate location - used for security, to understand the general geographic distribution of users, and to comply with legal requirements.
Referral source - how you arrived at our Site (e.g., search engine, direct link).

1.3 Information Collected by Third-Party Services

Our applications and Site may integrate with third-party services that collect data independently under their own privacy policies:

Advertising networks (e.g., Google AdMob) - may collect device identifiers, including the advertising identifier, and usage data to serve and measure advertisements in ad-supported applications.
Analytics and messaging tools (e.g., Google Analytics, Google Firebase) - collect usage and performance data to help us improve our products, and deliver push notifications.
App stores (Google Play, Apple App Store) - collect purchase and download data governed by their own privacy policies.

2. How We Use Your Information

We use the information we collect to:

Respond to your inquiries and communicate with you about potential or ongoing engagements.
Deliver, maintain, and improve our website and mobile applications.
Process payments and manage purchases made through app stores.
Serve advertisements in our free, ad-supported applications.
Send push notifications you have allowed.
Analyze usage trends to improve user experience and application performance.
Detect, investigate, and prevent fraudulent or unauthorized activity.
Comply with applicable legal obligations.
Send you important service-related notices (e.g., updates to these policies or application changes).

We do not sell your personal information to third parties.

If you are located in the European Union or European Economic Area, we process your personal data on the following legal bases:

Contractual necessity - to fulfill a service engagement, respond to your inquiry, or provide an app's features and purchases to you.
Legitimate interests - to improve our products, prevent fraud, and ensure security.
Consent - where you have given explicit consent (e.g., personalized advertising, push notifications, subscribing to communications, accepting non-essential cookies).
Legal obligation - where processing is required by applicable law.

You may withdraw consent at any time, for example through your device settings or by emailing hi@roka.mk.

We may share your information in the following limited circumstances:

Service providers - third-party vendors who assist us with hosting, analytics, crash reporting, push notifications, or advertising, and who are contractually bound to protect your data.
App store platforms - Google and Apple receive data related to app distribution and purchases.
Advertising partners - ad networks may receive device and usage data in ad-supported apps to deliver and measure advertisements.
Legal requirements - if required to do so by law, court order, or governmental authority.
Business transfers - in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

We do not share personally identifiable information with third-party advertisers directly; this is handled by advertising SDK integrations governed by those networks' own policies.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law:

Contact form inquiries - retained for up to 2 years unless a business relationship is established.
Client project data - retained for the duration of the project and for up to 5 years afterward for legal and business record-keeping purposes.
Application usage and analytics data - retained in anonymized or aggregated form for up to 2 years.
Account data - retained until you delete your account, after which it is removed within 30 days (World Master accounts are removed immediately, see section 13).

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access - request a copy of the personal data we hold about you.
Correction - request that we correct inaccurate or incomplete data.
Deletion - request that we delete your personal data ("right to be forgotten"), subject to legal retention obligations.
Portability - request your data in a structured, machine-readable format.
Objection - object to processing based on legitimate interests or for direct marketing.
Restriction - request that we restrict processing of your data in certain circumstances.
Withdraw consent - where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email hi@roka.mk or use the contact form on roka.mk. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Children's Privacy

Our services are not directed at children under the age of 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information without parental consent, please contact us and we will promptly delete it.

If any of our applications are specifically designed for children, they will not include behavioral advertising and will comply with applicable children's privacy laws (e.g., COPPA, GDPR-K).

8. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include encrypted data transmission (HTTPS), restricted access to personal data, and regular security reviews.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

9. International Data Transfers

Our services are operated from the Republic of North Macedonia. If you are accessing our Site or applications from outside North Macedonia, including from the EU, your data may be transferred to and processed in North Macedonia. Some of our service providers (such as Google Firebase and Google AdMob) may also process data outside North Macedonia and the European Economic Area. Where data is transferred internationally, we rely on the safeguards required by applicable law, such as the European Commission's Standard Contractual Clauses used by these providers, so that your data receives an adequate level of protection wherever it is processed.

10. Third-Party Privacy Policies

Our applications and Site may contain links to or integrations with third-party services. This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you use, including:

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will make reasonable efforts to notify users (e.g., through in-app notices or prominent Site notices) and, where the law requires it, ask for your consent again.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, email hi@roka.mk or use the contact form on roka.mk. We respond within 30 days.

RokaStudio, St. Teodosij Gologanov no. 96, Taftalidze, 1000 Skopje, North Macedonia.

13. World Master

This section applies to the World Master mobile game for iOS and Android (iOS bundle ID com.roka.worldMaster).

13.1 What World Master Collects

World Master does not ask for your name, email address, phone number or password. We store:

Username you choose, shown publicly on leaderboards and to duel opponents.
An app-generated device identifier, used to recognize your game account on your device. It is not the advertising identifier.
Gameplay data - points, coins, game progress, achievements, daily login streaks and duel history (opponents, answers and results).
Settings - sound, vibration, notification and unit preferences.
Purchase records - which in-app item was bought, its price and the store transaction ID. Payment is handled entirely by Apple or Google; we never receive your card or payment details.
Push notification token (Google Firebase Cloud Messaging), if you allow notifications.
Technical data sent with every request, such as your IP address, which our server uses for security and rate limiting.

13.2 How We Use It

To run the game: save your progress, match duels, show leaderboards and deliver purchased items (coins, ad removal).
To send push notifications about duels, leaderboard changes and occasional reminders.
To show ads to players who have not purchased Remove Ads (see 13.3).
To prevent fraud and abuse.

We do not sell your personal information.

13.3 Advertising and Tracking

World Master shows ads through Google AdMob. AdMob may collect your device's advertising identifier (IDFA on iOS, Advertising ID on Android), approximate location derived from your IP address, and information about ad interactions, in order to deliver, measure and personalize ads.

On iOS, the app asks for your permission through Apple's App Tracking Transparency prompt before the IDFA is used for personalized advertising. If you decline, AdMob shows non-personalized ads and the IDFA is not shared. You can change your choice at any time in Settings → Privacy & Security → Tracking.

On Android, you can reset or delete your Advertising ID in Settings → Google → Ads.

Buying Remove Ads in the app turns off ads for your account.

13.4 Push Notifications

If you allow notifications, the app registers a push token with Google Firebase Cloud Messaging and sends it to our server so we can notify you about duels, leaderboard changes and reminders. You can turn notifications off in the app's settings or in your device settings. Tokens that stop working are deleted from our server automatically.

13.5 Deleting Your Account and Data

You can delete your World Master account at any time from inside the app: Settings → Delete account. This permanently removes your username, device identifier, progress, coins, duel history, purchase records and push token from our servers, immediately and irreversibly.

Coins and items bought in the app are lost when the account is deleted and cannot be restored or refunded by us. Refund requests for store purchases are handled by Apple or Google.
Deleting the app from your device does not delete your account.
Duels you played against other players are removed from their history as well.

If you no longer have the app installed, you can request deletion by emailing hi@roka.mk with your username. We will complete the request within 30 days.

This Privacy Policy is intended to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable, and the Law on Personal Data Protection of the Republic of North Macedonia.