Privacy Policy

In short

• There are no accounts. You can use the site without registering or giving an email address.
• If you post in the fan chat, your IP address is stored only as an irreversible salted SHA-256 hash, never in its raw form.
• Chat messages are deleted automatically after 7 days.
• We set no advertising cookies ourselves; analytics run through Google Tag Manager, which may set cookies.
• Your data is never sold or handed to third parties for marketing.

Data controller

This site is operated by Nuvo Code. For any request regarding your personal data, write to [email protected].

Fan chat

The fan chat on the home page is anonymous and is not moderated before publication. When you send a message, the following is processed:

• The message text and the time it was sent — this is the chat itself, and it is public.
• An automatically generated username — assigned by us, not linked to your real identity.
• A salted SHA-256 hash of your IP address — used to limit spam and abuse. The raw address is never written to the database.
• Your browser user agent — used only to separate automated traffic from real visitors.

Why the IP hash is kept

Because the chat has no accounts and no moderation queue, there is no other way to rate-limit a single source. Your IP address is therefore combined with a secret salt, hashed with SHA-256, and only that hash is stored.

Reversing the hash is not practical: the salt is held server-side as an application secret. Even so, GDPR and the Turkish KVKK treat such hashes as pseudonymised personal data rather than anonymous data — which is why this page states it plainly.

IP hashes are deleted together with the message they belong to, after 7 days.

Stored in your browser

A few values are kept in your browser localStorage so the chat can work. They are not sent as cookies and are never used for advertising:

• A randomly generated identity key — keeps your username yours and lets you delete your own messages.
• The username assigned to you.
• A record that you accepted the chat notice, and when.
• A short-lived ticket proving you passed the bot check.

Deleting your messages

You can delete any message you posted. The right to delete is tied to the identity key in your browser, not to the username. If you clear your browser data that key is lost and you will no longer be able to delete older messages from the interface — write to the address above if that happens.

Every message is deleted automatically after 7 days whether or not you remove it yourself.

Inappropriate content and reports

An automated profanity and link filter runs on the chat, but it is not perfect and no human reviews content before it appears. Use the report button next to any message to flag it; a message that collects enough reports is removed automatically.

For takedown requests, write to [email protected]. Removed content is retained in a non-public record to meet legal retention obligations.

Feature suggestions

If you use the suggestion form, the text of your suggestion, the category you picked and — optionally — the email address you provide are stored. The email address is not required and is used only to reply about your suggestion. A hash of your IP address is kept here too, for the same anti-abuse reason.

Analytics

Visitor counts are measured with Google Tag Manager, which loads measurement tags such as Google Analytics. Those tags may write cookies to your browser and send your IP address and browser details to Google servers. The data collected is governed by Google’s privacy policy.

Third-party services

The site uses the services below. Requests to them technically expose your IP address; that is how the internet works and is outside our control:

• Cloudflare — hosting, delivery and bot protection (Turnstile).
• Supabase — database and the realtime chat connection.
• Google Fonts — typefaces.
• Google Tag Manager / Google Analytics — visitor measurement.
• Adsterra — advertising slots. Ad networks may set their own cookies and tracking technologies, governed by their own privacy policies.

Your rights

You have the right to know whether your personal data is being processed, to request information about it, to learn the purpose of processing, to have inaccurate or incomplete data corrected, to request erasure, and to object if you believe the processing is unlawful.

To exercise these rights, write to [email protected]. For chat messages, telling us the date and time the message was sent helps us locate the record.

Changes

This policy may be updated as the site changes. The date at the top of the page shows when it was last revised.