Privacy notice. Draft.
Under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK), this notice explains why and on what legal ground personal data is processed on this website and in the Postlip Metrics service, and what your rights are.
Draft · awaiting legal review
This text has not been through legal review and is not binding. The fields in square brackets will be filled in during the review.
This is a translation for convenience; the Turkish text will be the binding one once it is approved.
Draft of 7 November 2026
1. Data controller
For this website and for the user accounts of the Postlip Metrics panel, the data controller is [YGMR company name], [address], [MERSIS number].
An organization using Postlip Metrics is the data controller of the measurement data it collects from the users of its own product; Postlip Metrics is the data processor that handles that data on the organization’s behalf and on its instructions. This relationship is governed by a [data processing agreement].
2. What data we process
This website uses no cookies, does not measure its visitors and runs no third-party scripts.
- When you write to us by e-mail: your name, your e-mail address and the content of your message.
- Panel users: name, e-mail address, a hash of the password, the two-step verification secret (encrypted), keyed hashes of the e-mail verification codes and recovery codes, language preference, sessions (browser details and a hash of the IP address) and audit records.
- Measurement data from organizations’ products: events, pseudonymous ids and the properties the organization defined in its event schema. No IP address is stored; personal data in undefined fields is refused.
3. Purposes and legal grounds
We process data for these purposes, under KVKK Article 5(2):
- Providing the service and managing accounts: the formation and performance of a contract (Art. 5(2)(c)).
- Security of the service, preventing abuse and keeping an audit log: legitimate interest (Art. 5(2)(f)).
- Meeting legal obligations: legal obligation (Art. 5(2)(ç)).
- [Further purposes to be added during the review.]
4. Who receives it
Data is shared with the suppliers whose hosting and e-mail delivery services we use to provide the service, for that purpose only and as limited by contract: [supplier categories and transfer locations to be written during the review].
If an organization turns on sending conversions back to ad platforms, the related events are passed to those platforms only for people who gave marketing consent, and on the organization’s instructions.
Data is passed to competent authorities where the law requires it.
5. How long it is kept
Account data is kept while the account is open and for [period] after. Each organization chooses the retention of measurement data per app; data past it is deleted.
Audit records are kept for [period].
6. Your rights
Under KVKK Article 11 you have the right to:
- learn whether your personal data is processed and, if so, ask for information about it;
- learn the purpose of the processing and whether the data is used for that purpose;
- know the third parties in Turkey or abroad to whom it is transferred;
- ask for it to be corrected if incomplete or wrong, erased or destroyed under the conditions of KVKK Article 7, and for this to be notified to the third parties it was transferred to;
- object to a result against you that comes solely from automated analysis;
- claim compensation if you suffer damage from unlawful processing.
7. Making a request
Send your requests to [application address] or to the e-mail address behind “Contact us”. Requests about measurement data go to the organization that owns the measured product; we carry them out on its instructions.