Privacy Policy

1. Data Controller

The data controller within the scope of this privacy policy is the Veri Sızıntısı platform. For inquiries, please contact legal@verisizintisi.com.

2. Data Collected

The following data may be processed during your use of the platform:

• Queried email address: Processed when you submit a query; search history is not stored in the database.
• IP address and timestamp: Temporarily retained for rate limiting and abuse prevention.
• Browser and device info: Anonymous technical statistics (User-Agent, screen size) may be collected for performance improvements.
• KVKK/Data request form: Email address, request type and message content — stored only to process your request.
• Theme and language preference: Stored as browser session data, not sent to the server.

3. Purposes of Data Use

Collected data is used only for the following purposes:

• Providing the query service (email breach check)
• Preventing abuse and automated attacks
• Processing KVKK/GDPR data request applications
• Monitoring the platform's technical performance

4. Data Retention

IP addresses and query logs are retained for a maximum of 90 days. KVKK request records are kept for 3 years as required by law. Session data (theme, language) is deleted when the browser is closed.

5. Sharing Data with Third Parties

We do not sell, rent, or commercially share your personal data with third parties. Data may be shared with trusted service providers operating the platform's technical infrastructure (hosting, CDN) under limited and confidentiality agreements, or as required by law (court order, competent authority request).

6. Cookies

The platform uses only essential technical cookies: theme preference (dark/light) and language selection session cookie. No tracking or advertising cookies are used. If analytics are used, privacy-focused tools compliant with KVKK are preferred (e.g., Plausible Analytics).

7. Your Rights under KVKK & GDPR

Under the KVKK Law No. 6698 and EU GDPR, you have the following rights:

• Right to be informed: The right to learn what data is being processed about you
• Right of access: The right to request a copy of your processed data
• Right to rectification: The right to request correction of inaccurate or incomplete data
• Right to erasure ("Right to be Forgotten"): The right to request deletion of your data
• Right to object: The right to object to data processing activities

8. Data Security

We implement industry-standard technical and administrative measures to protect your data against unauthorized access, modification, disclosure, or destruction. All data transfers are encrypted with TLS/SSL.

9. Policy Changes

We may update this policy from time to time. Significant changes will be announced on the platform and the "Last updated" date on this page will be revised.

10. Contact

For questions about our privacy policy, please use our contact form or write to legal@verisizintisi.com.