Privacy Policy and KVKK Disclosure Notice

This platform (“Hezarfen Technologies”, “we”) is the data controller under Turkish Personal Data Protection Law no. 6698 (“KVKK”).

Contact: hezarfentechnologies@gmail.com

The data controller can be reached at the address above. Should a legal entity be established, its trade name, registered address and Mersis number will be added here.

• Identity and contact data: the name, email address and profile picture provided by the provider when you sign in with Google, Apple or email.
• Username: the nickname you choose yourself, shown on the platform.
• Device and game data: a salted (hashed) device identifier, used to detect cheating and multiple accounts — the raw device identifier is never stored.
• Region data: a country code, used for contest eligibility and prize region compatibility.
• Usage data: session and access records. Your in-game progress (gold collected, level, moment of completion) is not kept on this site; that data stays in the infrastructure of the game you play and is subject to that game's own privacy policy.

Passwords are not stored — with Google and Apple sign-in your password never reaches us at all; with email sign-in the password is held by Supabase in encrypted (hashed) form, and nobody, including us, can read it in plain text.

• To create your account and manage your session
• To reach you and send your prize if you win
• To publish your username if you are announced as a winner
• To meet our legal obligations

Some of your data is shared with the following service providers (as data processors):

• Supabase — database and authentication infrastructure. The data is stored on Supabase's servers in the European Union region (AWS eu-west-3, Paris/France). This means the data is held outside Turkey; a transfer abroad within the meaning of KVKK art. 9 takes place, and by signing up you consent to that transfer.
• Google / Apple — solely as sign-in providers; the data we pass to them is limited (an authentication token).

The data is not sold to third parties or shared for marketing purposes, except where legally required.

Your data is kept for as long as your account is active. When you delete your account, your personal data is erased immediately and permanently; no archive copy is kept.

• Account and profile details (name, email, username, prize email): until the account is deleted. They go at the moment of deletion.
• The moment you accepted the terms: until the account is deleted. As proof of acceptance it is kept for as long as the account lives.
• Session and access records: kept briefly in the infrastructure provider's own technical logs, not stored separately by us.

Correspondence about prize delivery remains in our email account. In case the contest results are disputed, it is kept for a reasonable period from the close of that season and deleted afterwards.

Because your in-game progress is not held on this site, there is no game data to delete here either; that data lives in the game's own infrastructure and its deletion is subject to that game's privacy policy.

Under the KVKK you have the following rights:

• To learn whether your personal data is being processed
• To request information about it if it has been processed
• To learn the purpose of processing and whether the data is used in line with that purpose
• To request correction if it has been processed incompletely or incorrectly
• To request erasure or destruction (which you can also do directly with “Delete account” in your profile)
• To object where the processing is carried out solely by automated systems
• To claim compensation if you suffer damage

Requests can be submitted in writing to hezarfentechnologies@gmail.com.

Your data is protected by technical and administrative measures (Row Level Security, encrypted transport, access restrictions). The client (browser, game) can never reach sensitive data or prize codes directly — that access goes only through authenticated, authorised server-side functions.

For questions about this policy: hezarfentechnologies@gmail.com