Privacy notice

This is a courtesy translation. The Turkish version is the legally binding one.

This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) to inform you about the personal data processed when you use the nicfollow.com service. The processing described here is governed by Turkish law.

Data controller

GNR Tech Yazılım ve Dijital Hizmetleri
Kentplus Sitesi Eğitim Mahallesi, Murat Paşa Caddesi No 17/199 Kadıköy/İSTANBUL
Email: [email protected]

Personal data we process

• Identity and contact: your full name and email address.
• Account security: an irreversible hash of your password, two-factor authentication and passkey data.
• If you sign in with Google: your Google account ID, name, email address and profile photo link.
• If you connect Telegram: your Telegram chat ID and username.
• Service data: the domains you track, your tags, notes and notification preferences.
• Transaction security: IP address, browser details, session and sign-in records.
• Contact form: your name, email address and message.

The information about tracked domains that we fetch from registries (RDAP and WHOIS) is public registration data. If these records contain information about a person, it is shown only to you.

Purposes and legal grounds

• To open and manage your account and to provide domain tracking and notifications. Legal ground: entering into and performing a contract (KVKK Art. 5(2)(c)).
• To keep accounts and systems secure and to prevent abuse. Legal ground: legitimate interest (KVKK Art. 5(2)(f)).
• To keep visit statistics so we can understand how the site is used and improve it. Legal ground: legitimate interest (KVKK Art. 5(2)(f)).
• To answer messages sent through the contact form. Legal ground: legitimate interest (KVKK Art. 5(2)(f)).
• To meet legal obligations, for example keeping the records required by Law No. 5651. Legal ground: KVKK Art. 5(2)(ç).

We do not send marketing messages. If we ever do, it will be only with your separate explicit consent.

Transfers

Your personal data is not sold. Your account and domain data is processed and stored on servers in Türkiye and is not shared with advertising partners. Only the data needed to run the service is transferred to the following parties:

• The email delivery provider, to deliver notification emails: nicfollow.com's service provider (Türkiye).
• The server and hosting provider: nicfollow.com's service provider (Türkiye).
• The backup provider: Hetzner Online GmbH, Finland (European Union). Backups are encrypted with our own key; the provider cannot read their contents.
• Cloudflare, for the security and speed of the site; traffic to the site passes through the Cloudflare network.
• Telegram, only if you have turned on Telegram notifications, to deliver messages to you.
• Google, only if you sign in with Google, to verify your identity; Google's infrastructure is also used to handle the emails you send to [email protected].
• Public authorities legally entitled to request it, upon request.

Transfers to service providers abroad are made in line with the conditions of Article 9 of the KVKK.

Retention

Your account data is kept for as long as your account is open. When you delete your account from the Settings page, your account and domain data is removed from the live system immediately. It is cleared from local backups within 30 days at the latest and from encrypted off-site backups within 6 months at the latest. Contact form messages are deleted within 1 year at the latest after they are answered. Transaction records that must be kept by law are kept for the period set by the relevant legislation.

Your rights

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is processed and, if so, request information about it.
• Learn the purpose of the processing and whether the data is used for that purpose.
• Know the third parties in Türkiye or abroad to whom the data is transferred.
• Ask for the data to be corrected if it is incomplete or inaccurate, and deleted where the legal conditions are met.
• Object to an outcome against you that results from analysis by automated systems.
• Claim compensation if you suffer damage because of unlawful processing.

You can send your request to [email protected] from your registered email address or through the contact form. Requests are concluded free of charge within 30 days at the latest.

Cookies

Only essential cookies are used: to keep you signed in, to keep the site secure and to remember your appearance preference. No advertising or tracking cookies are used.

Visit statistics

To see which pages are read, we count visits on our own server without cookies. We record the page viewed, the name of the site you came from, your device and browser type, and your country. Your IP address is not recorded; it is only turned into a one-way hash that changes every day, used to tell repeat visits on the same day apart, and this hash cannot recognize you from one day to the next. This information is not shared with third parties and is deleted after 13 months.