Privacy Policy
Last updated: 2026-08-17
This text is a draft and has not been reviewed by a lawyer.
The operator's identity details have not been filled in yet. This page must be reviewed by legal counsel and completed before the site is opened to real users.
Data controller
Your personal data is processed by TODO: ticari unvan as data controller. Address: TODO: açık adres. Email: TODO: iletisim@tahmen.com.
This policy complements the KVKK disclosure notice; see that notice for the legal basis on which each category of data is processed.
What we collect
Account data: your email address, your display name, an irreversible hash of your password (bcrypt), and the club you support.
Usage data: the predictions you enter, the points you earn and your standings history.
Technical data: the cookie that keeps you signed in. Our server access logs contain your IP address for a short period.
We never store your password in readable form and cannot see it.
What is public
Only your display name, your points and your prediction statistics appear publicly, on the leaderboard.
Your email address is never public and is never used as part of your display name. If you do not choose a display name, an anonymous one is generated for you.
Who we share it with
We do not sell personal data.
We use a hosting provider to run the service. Match and broadcast data comes from third-party providers; no data about you is sent to them.
We may share data with competent authorities where a legal obligation requires it.
How long we keep it
Account data is kept for as long as your account exists.
Scoring audit records exist so that a change in someone's points can always be explained. When an account is deleted, these records are detached from your identity and kept in anonymised form; they do not identify you.
Server access logs are deleted after a short period.
Your rights
From your profile page you can download all of your data as JSON and permanently delete your account.
Deleting your account removes the account, your predictions and your standings entries. The anonymised audit records described above remain.
Your full rights under Turkish data protection law, and how to exercise them, are set out in the KVKK disclosure notice. Requests can be sent to TODO: iletisim@tahmen.com.
Children
The service is not designed for anyone under 13. If we learn that we hold data about a user under 13, we delete it.
Security
The site is served over HTTPS only. Passwords are stored with bcrypt. The session cookie is set httpOnly so page scripts cannot read it.
No system is completely secure. If a breach affects your data, we will notify you as the law requires.