01Data controller
Your personal data is processed by [to be added] ([to be added]) as the data controller. When we say “we” in this notice, we mean the data controller.
You can reach us about anything related to your personal data at [to be added].
02What data do we process?
- Account data: your username, email address and an irreversible hash of your password. If you sign in with Google, the account ID, email address and name Google shares with us.
- Game and points data: the points you earn in games, your daily earning totals for the last 30 days, your last 50 point spends (which ad, how much) and the nickname you use in games.
- Ad data: the address, title, description and icon (favicon) of the site you advertise, the points you put on the ad, and its click and view counts.
- Technical data: your IP address and browser information (user agent). We do not store these permanently; we keep them briefly in memory to prevent abuse and to count clicks and views once per visitor.
- Payment data (once payments are available): your first and last name for invoicing. Your card details never reach us; they are processed directly by the payment provider.
We do not ask for or process ID numbers, phone numbers, location or special categories of personal data (health, beliefs, etc.).
03Why do we process your data, and on what legal basis?
- To create your account, let you sign in and protect your account: performance of a contract (KVKK Art. 5/2-c).
- To calculate your points, run the ad wall and its ranking, and publish your ad: performance of a contract (KVKK Art. 5/2-c).
- To prevent bots, cheating, fake accounts and spam and keep the site secure: our legitimate interest (KVKK Art. 5/2-f).
- To review ads against our content rules: our legitimate interest and legal obligations (KVKK Art. 5/2-f and 5/2-ç).
- To meet obligations under tax, commercial and internet law: legal obligation (KVKK Art. 5/2-ç).
- To send essential account messages (e.g. sign-in codes): performance of a contract (KVKK Art. 5/2-c).
We do not send you advertising or newsletter emails. If we ever want to, we will ask for your consent first.
04How do we collect your data?
We collect your data electronically: directly from you (sign-up and ad forms, games), from Google if you choose to sign in with Google, from the public page of the site you advertise if you use the “Fetch my info” button, and automatically while the site runs (cookie, server).
05Who do we share your data with?
- Our hosting provider: to run the site.
- Our email delivery provider: only your email address, to deliver your sign-in code.
- Google: only if you choose to sign in with Google, to verify your identity.
- The payment provider: once payments are available, the details needed to complete a payment.
- Competent public authorities: only when the law requires it.
Your ad (site address, title, description, icon, points, click and view counts) and your in-game nickname are publicly visible on the site. Your email address is never shown publicly.
We do not sell your data and do not share it with ad networks.
06Transfers abroad
Some of our service providers (e.g. email delivery, Google sign-in) may have servers outside Turkey. Such transfers are made with the safeguards required by Article 9 of the KVKK (e.g. standard contractual clauses).
07How long do we keep it?
- Account and points data: as long as your account is open. Daily earning summaries are kept for 30 days and spending records for the last 50 transactions. If you delete your account from the My account page it is deleted immediately; if you ask by email, within 30 days at the latest.
- Sign-in codes: 10 minutes. Codes are stored in an unreadable (hashed) form and expire after that.
- IP address and browser information: in memory for at most 1 day; never stored permanently.
- Ad data: as long as the ad is live. After it is removed, only anonymous statistics may be kept.
- Payment and invoice records: for the period required by tax law (10 years).
Data whose retention period has ended is deleted, destroyed or anonymised.
08Your rights under the KVKK
Under Article 11 of the KVKK, you have the right to:
- learn whether your personal data is processed,
- request information about it if it is,
- learn the purpose of processing and whether it is used accordingly,
- know the third parties in Turkey or abroad to whom it is transferred,
- request correction if it is incomplete or inaccurate,
- request deletion or destruction under the conditions of Article 7 of the KVKK,
- request that corrections, deletions and destructions be notified to the third parties it was transferred to,
- object to an outcome against you that results solely from automated analysis,
- claim compensation if you suffer damage due to unlawful processing.
09How to apply
Write to [to be added] from the email address registered to your account. We may ask for additional information to verify your identity. We answer free of charge within 30 days at the latest.
You can delete your account and all your data yourself, instantly, from the “Delete account” section of the My account page. You can also ask by writing to the same address.
If you are not satisfied with our answer, you can file a complaint with the Turkish Personal Data Protection Board.
10Age limit
AdWarz is not designed for children under 13. If you are between 13 and 18, get your parent's or guardian's permission before signing up. You must be over 18 to place ads or make payments.
11Security
Your password is never stored in plain text; we keep only an irreversible, salted hash (scrypt) that even we cannot read. Repeated wrong password attempts are temporarily blocked. The session cookie cannot be read by scripts in the browser (HttpOnly), the connection is encrypted (HTTPS) and points are calculated only on the server.
12Changes to this notice
We may update this notice as our service or the law changes. We announce important changes on the site. The date of the current version is shown at the top of the page.