Privacy Policy

Account Information

When you create an account, we collect your username, email address, and encrypted password. If you sign in with Google, we receive your name, email, and Google account ID.

Payment Information

Payment transactions are processed by third-party providers (e.g., Cryptomus). We store transaction records (plan, amount, status, timestamps, the coin and amount paid and the blockchain transaction ID) but not your payment credentials or private keys. If you ask for a refund, we also store the wallet address you give us for that refund.

Purchase and Consent Records

When you buy a plan, we record the confirmations you give before paying (for example your request to start the service immediately and that you have read the Refund Policy), the version of the texts shown to you, the time, and the IP address and browser details of the request. We use these records to prove what was agreed and to handle refunds, withdrawals and disputes.

Usage Data

We automatically collect information about how you interact with our Platform, including pages visited, search queries, services viewed, and features used. This data helps us improve the user experience.

Technical Data

We collect IP addresses, browser type, device information, and referring URLs for security purposes (fraud prevention, rate limiting) and analytics.

To provide, maintain, and improve the Platform and its features.

To process transactions and manage your account and subscriptions.

To send transactional emails (welcome, payment confirmations, ticket replies, subscription reminders).

To process refunds and withdrawal requests and to keep proof of the information and confirmations given before purchase.

To detect and prevent fraud, abuse, and security threats.

To analyze usage patterns and improve our services.

To respond to your support requests and communicate with you.

Third-Party Services

We share data with payment processors to complete transactions, and usage data is processed by our analytics and advertising-measurement providers (Google Analytics, Google Ads, Ahrefs Web Analytics) as described in the Cookies section. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or to protect our rights, property, or safety.

Passwords are hashed using bcrypt with a cost factor of 12.

All connections are encrypted via HTTPS/TLS.

API keys and sensitive credentials are stored securely and never exposed to the client.

Webhook signatures are verified using timing-safe comparison to prevent signature forgery.

Rate limiting and bot detection are implemented to prevent abuse.

While we implement industry-standard security measures, no system is 100% secure. We cannot guarantee absolute security of your data.

Authentication

We use an HTTP-only, secure cookie to maintain your login session. This cookie expires after 7 days.

Preferences

We may use local storage to remember your display preferences (e.g., theme, filters). This data never leaves your browser.

Analytics (Google Analytics, Ahrefs Web Analytics)

We use Google Analytics (measurement ID G-KRZKBMH3M3) and Ahrefs Web Analytics to understand how visitors use the site (pages viewed, referrers, approximate location, device and browser). Google Analytics sets first-party cookies (such as _ga) for this purpose. You can opt out of Google Analytics with Google's browser add-on: https://tools.google.com/dlpage/gaoptout

Advertising measurement (Google Ads)

We use the Google Ads conversion tag (AW-3879663939) to measure whether our own Google ads lead to sign-ups. Google may set or read advertising cookies for this purpose. You can control ad personalization at https://adssettings.google.com (Google Ads Settings). We do not show third-party ads served by ad networks on this site; sponsored placements sold directly to panels are labelled "Sponsored".

Blocking cookies

You can also block or delete cookies in your browser settings or use a content blocker. The site keeps working without analytics and advertising cookies; only the login cookie is required to stay signed in.

Account data is retained for as long as your account is active.

Transaction, purchase, consent and refund records are retained for 10 years, as required by Turkish e-commerce and commercial record-keeping rules.

The IP address and browser details attached to a purchase confirmation are kept for 3 years (the evidence period under Turkish distance-contract rules) and then deleted; the rest of the record is kept for the 10-year period above.

Support conversations about payments and refunds are retained for 5 years.

You may request account deletion by contacting support. Upon deletion, your personal data will be removed within 30 days, except where retention is required by law.

Access: You can view your personal data through your account settings.

Correction: You can update your account information at any time.

Deletion: You can request account deletion by contacting support.

Export: You can request a copy of your data in a portable format.

Objection: You can opt out of non-essential communications.

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.

Your data may be processed in countries other than your own. By using the Platform, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or Platform notification. Continued use of the Platform after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us through the support ticket system on the Platform or email us at [email protected].