Privacy Policy
KVKK aydınlatma özeti
Veri sorumlusu, Saliba Studios markasını işleten Halil Öz’dür. İletişim formundan ad, e-posta, hizmet seçimi, mesaj ve isteğe bağlı bütçe ve oyun tasarım belgesi bilgisi; internet sitesi güvenliği için teknik bağlantı bilgileri alınır. Talebinize yanıt vermek ve gerekli sözleşme hazırlıklarını yürütmek için KVKK 5/2-c, gerekli güvenlik işlemleri için temel haklarınıza zarar vermemek kaydıyla 5/2-f, hukuki hakların korunması gerektiğinde 5/2-e kapsamında işleme yapılır. Form gönderimi pazarlama aboneliği değildir.
Supabase kayıt ve yönetici oturumlarını, Resend e-posta iletimini, Cloudflare Turnstile bot kontrolünü, Upstash hız sınırlamasını, HepHosting barındırmayı sağlar. Google Drive ve GitHub Actions yedekleme süreçlerinde kullanılır. Bu hizmetlerde Türkiye dışında işleme olabilir; aktarım ülkeleri ve uygulanabilir güvenceler hakkında bilgi isteyebilirsiniz. Sözleşmeye dönüşmeden kapanan talepler kapanıştan altı ay sonra silme takvimine alınır. Aktif veya hukuki nedenle tutulan kayıtlar ayrı değerlendirilir; e-posta ve yedek kopyaları kendi saklama süreçlerine tabidir. Yeni işletim arşivindeki ayrıntılar en fazla 14 gün, kişisel tanımlayıcı içermeyen günlük özetler en fazla 90 gün tutulur. Tarayıcı hata bildirimleri yalnızca sabit hata türü ve sayfa grubunu gönderir; mesaj, tam URL, form içeriği veya ziyaretçi tanımlayıcısı göndermez, çerez ya da depolama oluşturmaz.
KVKK 11 kapsamında bilgi alma, düzeltme, koşulları varsa silme veya yok etme, alıcılara bildirim, otomatik analiz sonucu aleyhinize çıkan sonuca itiraz ve zararın giderilmesini talep etme haklarınız vardır. Başvurularınız ve ayrıntılı alıcı/saklama bilgisi için hello@salibastudios.com adresine yazabilirsiniz. Bu metin bilgilendirmedir; açık rıza veya yurt dışı aktarım onayı değildir. Aşağıdaki bölümler veri kategorileri, saklama ve başvuru usulünü ayrıca açıklar.
Last updated:
How we handle your information when you visit Saliba Studios or enquire about a project.
Who is responsible
Halil Öz is the data controller for this website, operating under the Saliba Studios brand in Istanbul, Türkiye. Saliba Studios is currently a brand operated by an individual, not an incorporated company. For privacy questions and requests, contact hello@salibastudios.com.
Information we collect
When you contact us, we receive your name, email address, selected service and message. Budget range and whether you have a game design document are optional; you can send an enquiry without answering those questions. We receive this information through the contact form or email. Please do not include passwords, payment details, sensitive personal information or other people's personal data in your message. Technical information, including IP addresses, request times and security verification data, is also processed to serve the website and prevent abuse.
Why we use your information
We use enquiry information to reply, understand project requirements and prepare or carry out an agreement you request. Where necessary for establishing or performing a contract, the basis is Article 5(2)(c) of Türkiye's Law No. 6698 (KVKK). Necessary security and abuse-prevention processing is based on our legitimate interest in protecting the website under Article 5(2)(f), subject to your fundamental rights and freedoms. Information may also be retained where necessary to establish, exercise or protect a legal right under Article 5(2)(e). Sending a contact request does not subscribe you to marketing.
Service providers and access
Contact requests are stored using Supabase and accessed by authorised studio administrators to handle your enquiry. Resend processes email delivery, including enquiry notifications and acknowledgements. Cloudflare Turnstile processes browser and security signals for bot prevention, and Upstash processes IP-based rate-limit data. HepHosting provides website hosting. Encrypted recovery backups are stored in Google Drive and may be retained as encrypted GitHub Actions artifacts. These providers may process information outside Türkiye. Contact us for information about the destinations and safeguards applicable to your enquiry. We do not sell your enquiry information. External social links are governed by the destination service's own privacy policy.
Cookies and browser storage
The website does not currently include advertising trackers or visitor analytics scripts. Security services may process browser signals and use necessary storage. The private administrator area uses authentication cookies to maintain authorised sessions. These administrative cookies are not a visitor marketing feature.
Technical diagnostics
We keep operational records of response codes, timings, fixed page and database operation categories, security decisions and delivery attempts to maintain the website. Browser reports contain only a fixed failure category and page group; they do not include error messages, stacks, full URLs, form contents or a visitor identifier. This reporting creates no cookies or browser storage and does not send authentication cookies. Detailed records in our private operational archive are kept for up to 14 days, and daily summaries without personal identifiers for up to 90 days. Storage limits may shorten detailed retention. Security providers and existing restricted runtime and security logs have their own processing and rotation rules.
Retention and security
Enquiries that end without a contract are marked closed and scheduled for deletion from the contact system six months after closure. Their associated email jobs are deleted with them; outstanding deliveries must finish or be resolved first. Active projects and records needed for a contract, legal obligation or legal claim are retained only while that reason applies and reviewed regularly. You can request a review or deletion using the contact below. Copies in email accounts and provider systems are reviewed separately. Deleted information can remain in restricted recovery backups until their rotation expires; database backups currently include 30 days of daily copies and up to 12 previous monthly copies, with deleted Drive files remaining in its trash until removed. Restored backups must be reconciled with deletion records before normal use. We use access controls, HTTPS and encrypted recovery backups, but no system can guarantee absolute security.
Your rights and requests
Under Article 11 of KVKK, you may ask whether your personal data is processed, request information about processing and its purpose, learn about recipients in Türkiye or abroad, request correction of inaccurate or incomplete data, and request deletion or destruction where the statutory conditions are met. You may request notification of corrections or deletion to recipients, object to an adverse result based exclusively on automated analysis, and seek compensation for unlawful processing. Email hello@salibastudios.com with your request and enough information to identify the relevant enquiry. We may need proportionate identity verification before disclosing or changing records. Requests are handled in accordance with applicable law; additional formal application requirements may apply.
Updates
We will update this notice when our data practices change. The date below identifies the latest revision. This notice covers this website; project-specific agreements may describe additional processing separately.
Privacy contact: hello@salibastudios.com