Page loading
Preparing content. Please wait.
Preparing content. Please wait.
Learn what data is processed, why it is used and how to exercise your personal data rights.
This notice explains data processing on emiraydin.me, operated by Emir Aydın describes personal data processing on emiraydin.me, operated by Emir Aydın. The site offers game development content, user accounts, project sharing and contact features.
The data controller is Emir Aydın. For questions and requests about your personal data, in the requests and contact section use the email channel.
This page provides information. Visiting the site or creating an account does not mean you give blanket explicit consent to all processing. Separate processing that requires explicit consent needs its own explanation and appropriate choice.
Data is collected electronically through forms you complete, account actions, your chosen sign-in provider and technical requests sent to the site. Browsing as a visitor and creating an account do not involve the same scope of data.
| Category | Data scope | Purpose of use |
|---|---|---|
| Account and sign-in | Email, username, full name, account ID, verification and sign-in method details. Password operations are handled through Supabase Auth. | Account creation, session maintenance and account recovery. |
| Profile and preferences | Bio, profile photo, profile visibility and your saved account preferences. | Provides your profile and account settings. |
| Projects and interactions | Project text, images, links, tags, draft/published status, likes, and notification read or hidden status. | Content sharing and site features associated with your account. |
| Contact | Your name, email address, subject and message submitted through the contact form or by email. Form messages are stored in the Supabase database and can only be viewed by administrators; an email notification is also sent through EmailJS. | Responding to your request and following up related correspondence. |
| Technical and security | IP address, browser/device information, operation time and error or security records sent with requests. | Providing the site, preventing abuse and investigating problems. |
| Visits and performance | Viewed page, referring source, approximate country, browser/device type and page performance measurements. | Aggregate visit statistics and performance evaluation. |
Fields such as your profile photo and bio are optional. Avoid sharing sensitive information or other people's personal data that is unnecessary for your request or post in contact forms and project fields.
The purpose of processing depends on the feature used. The grounds below apply only to data necessary for that operation and subject to the conditions required by law.
| Purpose | Legal basis |
|---|---|
| Creating accounts, signing in and providing requested project/interaction features | Processing necessary to establish or perform a service contract — KVKK Article 5/2(c). |
| Responding to contact requests, troubleshooting and preventing abuse | Necessary and proportionate legitimate interests, without harming fundamental rights and freedoms — KVKK Article 5/2(f). |
| Handling valid personal data applications or requests from authorised bodies | Compliance with a legal obligation — KVKK Article 5/2(ç). |
| Records necessary to assert, exercise or protect a right in a dispute | Establishment, exercise or protection of a right — KVKK Article 5/2(e). |
Sign-in, verification and recovery emails support account operations. Sending a contact request does not give permission to send advertising or marketing messages. Any explicit consent required is assessed separately from this notice.
The services below help run this site. The data transferred depends on the features you use. Follow each service's name to read its privacy information.
Authentication, database and image storage.
Account/profile information, projects, interactions, contact form messages, images and technical records needed to provide the service.
Hosting, content delivery, security and visit/performance measurement.
HTTP requests and technical records; visit and performance data through Analytics and Speed Insights.
Sending transactional emails such as account verification and password recovery.
Recipient email address, email content and sending/delivery records.
Forwarding contact form messages by email.
Name, email, subject and message submitted through the form, and technical delivery information.
Optional Google sign-in; receiving contact emails through Gmail.
Basic account/profile information shared by Google during sign-in; email correspondence content and sender information.
These services may process data outside Türkiye. The Supabase project's data region is eu-central-1 region. Other data may also be processed abroad depending on the location of the service and its subprocessors.
Transfers abroad must be separately assessed under Article 9 of the KVKK. This text is not a transfer agreement or a declaration of explicit consent for international transfers.
Necessary data may also be shared in response to lawful requests from authorised bodies or legal obligations. When you follow external links to YouTube, GitHub, Discord or other services, their own privacy practices apply.
Cookies are used for sessions and security. Your browser's local or session storage is used to remember preferences and support some site features. These are not all used for advertising tracking.
Remembers your Turkish or English preference; also saved to your account when signed in.
Retention: For one year in this browser, or until the preference changes or site data is cleared.
Maintains your session and sign-in verification.
Retention: Depends on the provider's session and cookie periods. The current client may create and refresh cookies for up to 400 days; this does not mean the access token remains valid for that period.
Validates requests such as image uploads.
Retention: 1 hour; refreshed when needed.
Remembers your light, dark or system theme preference.
Retention: Until the preference changes or browser site data is cleared.
Makes it easier to reopen selected searches.
Retention: Until you clear search history or browser site data.
Shows a cooldown for failed sign-ins in this browser; may include email addresses and attempt times.
Retention: Attempts within 15 minutes are considered. Records are updated during sign-in and can also be cleared with browser site data.
Limits repeated view counting in the same tab.
Retention: For the lifetime of the tab session.
Provides a general connection screen when a network error occurs.
Retention: May be replaced by a new version or cleared through browser site data. Account and project content are not stored in this backup.
Measurement services: According to its provider, Vercel Web Analytics provides aggregate visit measurements without cookies. Speed Insights measures page performance. These services are separate from session and security cookies. Authentication pages such as sign-in and account recovery are excluded from measurement.
Manage recent searches in the search dialog and your theme in the site menu. You can also delete cookies and other records through your browser's site data settings; this may sign you out and reset preferences. Blocking essential cookies may affect sign-in and uploads.
There is no single automatic deletion period for every type of data. Retention needs are assessed according to the purpose, service used, account or content status and any legal obligations.
Hiding a profile or moving a project to drafts does not delete the data. On the account deletion screen after reauthentication and final confirmation, your profile, published and draft projects, uploaded account files, likes and associated notification records are permanently removed. Once deletion starts, your profile and projects are unpublished and new content is blocked. If a technical interruption occurs, the remaining cleanup can be retried.
A minimal record of completed account deletion is retained for at least three years. It contains a random operation number, request and completion times, and counts of deleted projects/files. It does not contain names, email addresses, user IDs, content, file paths, passwords or verification codes. Provider records, any backups and other legal retention requirements are considered separately; immediate and unconditional deletion of every copy is not promised.
Technical measures include encrypted connections, authentication, authorisation checks, request validation and abuse limits. Absolute security of internet transmission and electronic storage cannot be guaranteed.
Visitors can see your public profile and published projects. Hiding your profile does not automatically unpublish your projects.
Profile and project images are stored in public file storage. Anyone with a file URL can access these images; changing profile visibility does not make existing image URLs private.
Your profile visibility and saved information in account settings to manage this. Change a project's draft or published status on its editing page.
Under Article 11 of the Turkish Personal Data Protection Law (KVKK), you can exercise the following rights by contacting the data controller:
Account settings offer a JSON download of your profile information and projects. This is not a complete export of every technical record held by service providers. You can submit other data requests using the contact channel below.
You can permanently delete your account and associated content using the account deletion screen in account settings. Submit other personal data requests through the contact channel below.
For questions and requests about your personal data, contact the data controller Emir Aydınusing the email link below. Use the subject “Privacy and personal data request” to help identify your request.
Requests are assessed under the Communiqué on the Procedures and Principles for Applications to Data Controllers. The official KVKK application guidance is available (opens in a new tab) for more information. Requests with the necessary information and conditions are handled as soon as possible, depending on their nature, and no later than within 30 days to be completed. Requests are generally free; where additional costs arise, the statutory tariff may apply.
The outcome and any reasons for refusal will be provided in writing or electronically. If the response is insufficient, your request is rejected or no response is received on time, you may complain to the Personal Data Protection Board within the statutory time limits.
Send a privacy request by emailThis notice may be updated when the site's data processing changes. The date at the top indicates the latest revision. Publishing an updated notice does not itself constitute consent for processing that requires explicit consent.
Back to home