This policy explains how Corevelay handles personal data on corevelay.com, in line with Türkiye's Personal Data Protection Law No. 6698 (KVKK). Each of our apps and games has its own privacy policy, linked from its page and from the App Store.
Who we are. The data controller is Corevelay, Mustafa Kemal Mah. Dumlupınar Bulvarı Tepe Prime A Blok, Çankaya, Ankara, Türkiye. Email: hello@corevelay.com.
What we collect. When you write to us through the contact form or by email: your name, your email address, your organisation if you give it, and your message. When you visit the site, its server also keeps access logs (web server, firewall and intrusion protection), Cloudflare Web Analytics counts the visits: the page, the site that linked to it, your browser, operating system, type of device and country, and how fast the page loaded. On the contact page Cloudflare Turnstile checks your IP address and your browser to keep out spam.
Why we use it. To answer your message and, if we work together, to plan and carry out the project. The access logs and the Turnstile check are used only to keep the site and its contact form secure and free of spam; the visit statistics show us which pages are read and how well they work.
How we collect it and on what basis. Electronically, through the form on this site or by email. Legal basis: KVKK Article 5(2)(c), steps towards a contract, and 5(2)(f), our legitimate interest in replying to you, in keeping the site secure and in knowing how it is used.
Who we share it with. No one, except the services that run this site and our email: Hetzner (the server and its backups), Cloudflare (DNS, proxy and CDN, the visit statistics, the routing of mail sent to hello@corevelay.com, and Turnstile on the contact form), Google Workspace (our mailbox) and CrowdSec (our intrusion protection, to which our server reports the IP addresses that attack the site, what they tried, and the address and browser of those requests, so that other servers can block them too). Hetzner keeps the site's server and its backups in Germany; Cloudflare, Google Workspace and CrowdSec also process data outside Türkiye.
How long we keep it. Messages from the contact form for 12 months, those sent by email as long as needed to answer you; for clients, as long as the law requires business records to be kept. The server's web access logs are kept for 14 days, and its firewall's security log, which records blocked requests and requests for pages that do not exist, for about 15 days. The intrusion protection keeps its alerts for 7 days, but its own log and the server's system log are limited by size rather than time and today go back several months. Backups at Hetzner keep the site's data for up to six months, so a message deleted after 12 months can remain in them for up to six more months; full copies of the server, logs included, are kept for about three weeks.
Cookies. This site sets no cookies: it only remembers your choice of light or dark mode in your browser, and on the contact page Cloudflare Turnstile stores a value in your browser for its spam check. The visit statistics use no cookies and store nothing in your browser, and they do not identify you or follow you from site to site: we see only totals.
Your rights. Under Article 11 of KVKK you can ask whether we process your data, get information about it, have it corrected or deleted, learn who it was shared with, and object to results that affect you. Write to hello@corevelay.com; we reply within 30 days, as the law requires.
Changes. If this policy changes, the date at the top changes with it.
Questions or requests: hello@corevelay.com