# privacy policy

## 1. Data Controller

The data controller for this Platform is KOQEP.

Contact: ussasa155@gmail.com

## 2. What Data We Collect

2.1 During registration

• Email address
• Username
• Password (stored in irreversibly hashed form, never kept as plain text)

2.2 During use

• Messages you send
• Rooms you create and their descriptions
• If you set up optional two-factor authentication (2FA), its secret key (stored encrypted)

2.3 Connection/traffic information

Under the legal obligation Turkish Law No. 5651 imposes on hosting providers, the following information about connections made to the Platform is retained for 18 months:

• Your IP address
• Connection/request time
• Type of service accessed
• Amount of data transferred

From the moment they are recorded, these logs are protected with an integrity check (cryptographic hash) and are automatically deleted after 18 months. These logs are kept solely to fulfill our legal obligation; they are not used for marketing, profiling, or shared with third parties.

## 3. Who We Share Your Data With

Data may be shared with the technical infrastructure providers required for the Platform to operate (hosting, email delivery, error tracking, and similar), only to the extent necessary to provide the service and with your explicit consent. These providers may be located domestically or abroad. This consent is obtained through the checkbox by which you accept this policy and the Terms of Use during registration — once registration is complete, consent is considered given, no separate action is required.

Your messages are visible to other users in the rooms you join. Beyond that, we do not share, sell, or use any of your content for advertising purposes.

## 4. Your Rights

4.1 Downloading your data

From your account settings, you can download your own profile, messages, invite records, and reputation history in JSON format.

4.2 Deleting your account

When you delete your account:

• Your account information is permanently deleted
• The author link on your messages is removed (messages remain in the room so as not to disrupt the conversation's context, but can no longer be traced back to you)
• Optionally, you may also choose to have your message content removed (this option is checked by default)
• Regardless of which option you choose, our system automatically removes any personal information it detects in your messages, such as an email address or phone number

This approach is based on a "reasonable effort" standard: no automated system can detect every kind of personal disclosure (for example, an indirect, contextual clue) with 100% reliability. If, after deleting your account, you notice your personal information remaining in an old message, you can contact us at ussasa155@gmail.com to request its removal — such requests are handled manually, within a reasonable time.

4.3 Your other rights

Under Article 11 of the KVKK, you have the right to learn whether your data is being processed, to request information about it if so, to learn the purpose of processing, to know the third parties to whom it is transferred domestically or abroad, and to request correction if it has been processed incompletely or incorrectly. You can reach us for these requests at ussasa155@gmail.com.

## 5. Cookies and Local Storage

The Platform does not use cookies for tracking. To keep you signed in, your browser's local storage and a secure, HTTP-only session cookie are used — this is not for third-party tracking, it only keeps your session active.

## 6. Age Limit

You must be at least 18 years old to use the Platform.

## 7. Changes to This Policy

When we make a significant change to this policy, we will announce the change through the Platform.

## 8. Bilingual Text

This policy is designed as a consistent, common, general text across its Turkish and English versions — drafted without excessive detail specific to any one jurisdiction, so that it can be adapted to different contexts of use.

Which version is binding in the event of a conflict between the versions has not yet been settled — this point will be clarified once the common text is submitted for legal approval.