We value the privacy and security of your personal data. This policy explains what we collect, how we use it, and your rights.
1. Data Controller
The controller of personal data collected on this platform is the "What's Missing" platform.
2. Personal Data We Collect
While using the platform, we may collect:
- Registration Data: Name, surname, email. Passwords are stored using non-reversible hashing.
- IP Address & Logs: For security and fraud prevention.
- Usage Data: Feature usage, preferred language, session info.
3. Purposes of Processing
We process your data for:
- Account creation and authentication
- Providing and improving the service
- Security, fraud and abuse prevention
- Compliance with legal obligations
4. Explicit Consent
By accepting the Membership Agreement and this Policy during registration, you give explicit consent for processing for the purposes stated here. Additional purposes (e.g., marketing) require separate consent.
5. Data Sharing and Transfer
Your personal contact information will not be shared with third parties without your explicit consent or unless required by law.
Please note that some links may direct you to Amazon.com. When you visit Amazon through these links, Amazon's own Terms and Privacy Policy apply, and their data collection practices are outside our control.
- Between Users: In gift/organization areas, only your name may be visible to other users.
- Legal Obligations: We may be required to share data with authorities upon valid legal request.
Your data is stored on servers located in Türkiye and is not transferred abroad.
6. Data Retention
We retain your data while your account is active. After deletion, data may be kept for a reasonable period to meet legal obligations, then erased or anonymized.
7. Data Security
We take necessary technical and administrative measures. Passwords are stored using the industry-standard `password_hash()`.
End-to-End Encryption (E2EE)
The "Gift Organization Board" messaging uses end-to-end encryption:
- A unique, secret key is generated for each organization.
- Messages are encrypted in your browser and decrypted in recipients’ browsers.
- Servers cannot access keys or readable content; only encrypted blobs are relayed/stored.
8. User Rights
Under applicable law, you have rights such as access, rectification, deletion and objection. Contact us via the email below.
9. Cookies
We use session cookies for essential functions such as session tracking. These are deleted when you close the browser.
10. Policy Changes
We may update this policy from time to time. Material changes will be notified via email or on-platform notices.
11. Contact
For any questions, reach us at info@neyinizeksik.com.