This notice explains, in line with Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK), for which purposes and on which legal grounds your personal data is processed when you use this site, and what rights you have. Effective date: October 18, 2026.
1. Data controller
Data controller: Serkan TURNA (natural person). Address: İstanbul. Contact for data requests: [email protected].
2. Personal data we process
- Error report form: your name, e-mail address, the content of your report (type, description, optional correction and source), the page, language and date; for security, a masked IP address (last octet zeroed for IPv4, only the first 48 bits for IPv6) and a hash of your browser string (the raw browser string is not stored)
- Cookie consent records: a random anonymous consent ID, your choices, date, policy version, language, page path, masked IP and browser hash
- Admin accounts (site staff only): name, e-mail, password hash, two-step verification data, sign-in time, masked IP, browser/device summary
- Server security and error logs: request path, time, status code, IP address (for a limited time)
3. Purposes
- To review your error report, correct the content and contact you if needed
- To prevent automated or abusive submissions and keep the site secure
- To be able to demonstrate your cookie choices (accountability)
- To prevent unauthorised access to the admin panel and detect suspicious sign-ins
- To comply with legal obligations
4. Legal grounds
- Error report form: your explicit consent, given with the checkbox on the form and withdrawable at any time
- Security logs, bot protection and admin security: the controller's legitimate interest (KVKK Art. 5/2-f), applying data minimisation (masking, hashing)
- Cookie consent records: legal obligation and legitimate interest (proving your consent); analytics and advertising cookies only with your explicit consent
- Admin accounts: performance of the engagement / legitimate interest
5. Transfers
Error report data is not shared with third parties and is not used for advertising. Transfers are limited to:
- Hosting: data is hosted on servers in Turkey (domestic)
- E-mail: notification and verification e-mails are sent from our own mail server; no third-party e-mail service is used
- Cloudflare (CDN/security provider): site traffic may pass through Cloudflare, in which case technical data such as your IP address and browser information may be processed by Cloudflare on servers outside Turkey (cross-border transfer), for the purposes of site security and speed; such transfers are assessed under KVKK Art. 9
- Google AdSense and Google Analytics: run only according to your cookie consent; data sent to Google is subject to Google's own privacy policy (outside Turkey)
- Competent public authorities: where required by law
6. Retention
- Error reports: at most 365 days after the report is closed (fixed or dismissed); then name, e-mail, IP and browser hash are erased/anonymised
- Cookie consent records: for the period stated in the Privacy and Cookie Policy (default 3 years)
- Bodies of sent e-mails: at most 90 days; one-time sign-in codes are not retained
- Admin account data: while the account is active; server logs for a limited time
7. Your rights under KVKK Article 11
As a data subject you may:
- Learn whether your personal data is processed and request related information
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom data is transferred in Turkey or abroad
- Request correction of incomplete or inaccurate data and notification of that correction to recipients
- Request erasure or destruction when the reasons for processing no longer exist
- Object to a result against you arising from automated analysis
- Claim compensation for damages caused by unlawful processing
- Withdraw your consent at any time
8. How to apply
Send your request to [email protected] by e-mail or in writing to İstanbul, stating your identity details and your request clearly. Requests are answered free of charge within 30 days at the latest; a fee set by the Personal Data Protection Board may apply if the process requires additional cost. If you are not satisfied with the reply, you may complain to the Turkish Personal Data Protection Board.
9. Updates
This notice is updated when necessary; the current version is published on this page. Effective date: October 18, 2026.