Privacy Policy
Last updated: 2026-08-31
Data controller
Your personal data is processed by Tahmen.com as data controller. For requests and enquiries: info@tahmen.com.
This policy complements the KVKK disclosure notice; see that notice for the legal basis on which each category of data is processed.
What we collect
Account data: your email address, your display name, an irreversible hash of your password (bcrypt), and the club you support.
Usage data: the predictions you enter, the points you earn and your standings history.
Technical data: the cookie that keeps you signed in. Our server access logs contain your IP address for a short period.
We never store your password in readable form and cannot see it.
What is public
Only your display name, your points and your prediction statistics appear publicly, on the leaderboard.
Your email address is never public and is never used as part of your display name. If you do not choose a display name, an anonymous one is generated for you.
Who we share it with
We do not sell personal data.
We use a hosting provider to run the service. Match and broadcast data comes from third-party providers; no data about you is sent to them.
If you use the AI chat feature (only with your explicit consent), the message you write is transferred to Anthropic's (US-based) infrastructure to generate a reply.
We may share data with competent authorities where a legal obligation requires it.
How long we keep it
Account data is kept for as long as your account exists.
Scoring audit records exist so that a change in someone's points can always be explained. When an account is deleted, these records are detached from your identity and kept in anonymised form; they do not identify you.
Server access logs are deleted after a short period.
Your rights
From your profile page you can download all of your data as JSON and permanently delete your account.
Deleting your account removes the account, your predictions and your standings entries. The anonymised audit records described above remain.
Your full rights under Turkish data protection law, and how to exercise them, are set out in the KVKK disclosure notice. Requests can be sent to info@tahmen.com.
Children
The service is not designed for anyone under 13. If we learn that we hold data about a user under 13, we delete it.
Security
The site is served over HTTPS only. Passwords are stored with bcrypt. The session cookie is set httpOnly so page scripts cannot read it.
No system is completely secure. If a breach affects your data, we will notify you as the law requires.