Privacy Policy

This text is the privacy notice for personal data processed on the adinaction.com.tr website under the Turkish Personal Data Protection Law No. 6698 (KVKK). The data controller is Adinaction.

For requests and questions: info@adinaction.com.tr

This text covers the website only. Apps and projects under the Adinaction name have their own privacy policies (see the section below).

Every app and project under the Adinaction name has its own privacy policy. You can reach an app's privacy policy through the links below or directly from that app's or project's own page.

You do not need an account to use the site; data is collected only as needed when you use the features below. Your IP address is not stored in plain form in the application database. To prevent abuse and to avoid counting the same action twice, we use an irreversible digest (a pseudonym) generated from your IP address and browser information with a secret key.

1. Data categories

2. Purposes and legal grounds

• Explicit consent (KVKK Art. 5(1)): the contact form (through the consent box on the form) and comment reply notifications (with the email address you verify).
• Establishing or performing a contract (Art. 5(2)(c)): taking part in a giveaway and delivering the prize, and operating a PESConnect account.
• Legitimate interest (Art. 5(2)(f)): security, preventing abuse and repeated actions, fixing errors, and visit statistics that measure how the site is used.
• Legal obligation (Art. 5(2)(ç)): lawful requests from competent authorities.

Your data is not used for marketing, is not sold, and is not shared with third parties for that purpose. No automated decision-making or profiling takes place.

3. Contact form

You are asked to accept this text in order to send the form. When your message arrives, a short acknowledgement is sent to your email address; it does not include the text you wrote. Replies are sent by email from the site's address (adinaction.com.tr) and stored together with your message.

When you write a comment on a project or content page, we collect your name (optional; if left blank you are given an anonymous nickname), your email address (required) and your comment text. Comments are published after approval by the administrator.

What is your email address used for?

• It is never published anywhere; other visitors cannot see it.
• The administrator may contact you about your comment if needed (for example about abuse or a correction).
• If you tick "Email me when my comment gets a reply" while writing a comment, you receive an email when an approved reply is posted to your comment.

Commenting with Discord

If you use the "Sign in with Discord" button on the comment form, you do not need to fill in the name and email fields. Only your user ID, display name, avatar and, if verified on Discord, your email address are taken from Discord. Your Discord name, avatar and a small Discord icon appear on your comment; your email address is still not published and is used for the purposes above. If you have no verified email on Discord, the reply notification option is not shown. Your sign-in ends after a period of inactivity or when you use the "Sign out" button. You can ask for your Discord connection and this information to be deleted at info@adinaction.com.tr.

Double opt-in and turning off notifications

When you ask for notifications, a verification link is sent first to make sure the address is yours. If you do not verify your address, no notifications are sent. Every notification email has two links: one turns off notifications for that comment, the other asks that no comment emails are ever sent to this address. These links take effect with one click on the adinaction.com.tr/yorum-bildirim page; your email program's "unsubscribe" button does the same. Your email address is not included in the links.

Retention

Your comment and email address are kept for as long as the comment stays published and are deleted together with it. Rejected comments are deleted automatically after 30 days. A short record of the address and date is kept to remember your verification or blocking preference; addresses that are never verified are deleted after 30 days.

The site uses no advertising, marketing or analytics cookies. Visit statistics are kept without cookies. The cookies in use are necessary for the site to work.

You can delete cookies and the cache from your browser settings at any time; your earlier reactions may then be counted as new ones.

Your personal data is transferred only to the service providers below, only to the extent stated:

• Hostinger: website hosting, the database and sending email (contact replies, comment notifications, password operations).
• Discord: only alerts without personal information, such as "there is a new contact message", and the winner's name after a giveaway are sent to the admin channel. If you sign in with Discord, authentication is carried out by Discord. PESConnect accounts are managed through the bot on our Discord server.
• Google and Apple: app store badges on project pages are loaded from these companies' servers; your browser passes your IP address to the company concerned when this happens.
• Twitch, Kick, YouTube: live stream status is queried by our server; no data about you is sent to these services.
• Competent authorities: only where there is a legal obligation.

Discord, Google and Apple are services located abroad; the hosting service's servers may also be abroad. These transfers are limited to the data and purposes stated above.

Records are deleted automatically when their period ends:

• Visit statistics: 13 months
• Detailed visit records (pages read, duration, location, browser, clicks): 90 days
• Contact messages and replies: 365 days
• Comments: as long as they stay published; rejected comments 30 days
• Unverified comment notification addresses: 30 days
• Giveaway entries: 365 days from the end of the giveaway; winners' contact details 365 days from the giveaway. The winner's name and platform remain on the giveaway page; the badge given to winners is kept, matched to the email address, until the badge is removed
• Records of emails sent: 30 days
• Error reports: 90 days
• Excessive-request protection records: 1 day
• App download records: 90 days
• Administration activity log: 1 year
• Database backups: 7 days
• Reaction, rating and file download digests: as long as the content concerned stays published (these digests do not directly identify a person)
• PESConnect account and match records: until the account is deleted
• PESConnect live goal feed: 7 days (permanent statistics come from the end-of-match record)

If you would like a record deleted before its period ends, you can write to the address below.

Your rights as a data subject

Making a request

So that we can verify your identity, it is enough to write from the email address you used for the record concerned. State your request clearly when it concerns your personal data.