Data controller
Your personal data is processed by Buğra Kerem Özcan (KOZ Studios) (sole proprietorship, tax/registry no. 6690903729, Yeni Bağlıca Mah. Bağlıca Blv. No: 70, Etimesgut/Ankara) via greenredflagger.com under Law No. 6698 on the Protection of Personal Data (KVKK). For questions and requests, contact [email protected].
What type of data we collect
E-mail address (registration + notifications), username (optional, for a public profile), voting and suggestion history (for service provision), IP address (security + abuse prevention), browser information (analytics). If you sign in with OAuth, Google or GitHub profile information (name, e-mail, avatar). If a Premium membership is purchased, payment and invoice information is processed; payment is received through a licensed payment institution, and your card information is not stored on our site.
With whom we share data
Our service providers: Vercel (hosting), Neon (database), Resend (e-mail), Cloudflare (CDN/security), Sentry (error monitoring). For Premium membership payments, payment information is processed with a licensed payment institution; your card information is not stored on our site. Since these providers may have servers abroad, data may be transferred abroad under KVKK Article 9. We do not share data with marketing or third-party advertising partners.
Cookies
Session cookie (authentication), preference cookie (language, theme), security cookie (CSRF). We do not use advertising cookies. Vercel Analytics (anonymous) is used for analytics. For details, see the Cookie Policy.
Data security
Passwords are stored only in an irreversible (strong hash) form; passwordless sign-in via email magic link and OAuth is also supported. The database is encrypted at rest on Neon. All traffic comes through HTTPS via the Cloudflare proxy.
How long we retain data
Your data is retained for as long as your account remains active. When you delete your account, your personal data is deleted within a reasonable period (generally within 24-72 hours) pursuant to KVKK Article 7. Security and abuse prevention records (IP) are retained for at most one week. If a Premium membership has been purchased, invoice and payment records are retained for the statutory retention period required by the relevant financial legislation. Anonymized statistics may be retained indefinitely.
Child protection
The site is closed to users under the age of 18. Date of birth is requested during registration, and accounts are not opened for persons under 18.
Your rights (KVKK Art. 11)
You have the rights to access your data, request correction of incomplete or inaccurate data, request deletion, object to processing, and data portability. You may delete your data from your profile page, export it from your settings page, and also apply to [email protected]. Requests are answered within 30 days at the latest under KVKK. For the full list of rights, see the KVKK Privacy Notice page.
Policy changes
When this policy changes, users are informed by e-mail.
For detailed data processing information, see the KVKK Privacy Notice; for all legal texts, see Legal pages. For your questions, you may use the Contact page.