Privacy Policy

The Derleniyo app and this website are operated by nextGodot. Address: Kocaeli, Turkey. Contact: nextgodot@gmail.com.

This text is written to meet the disclosure obligation under Turkish Law No. 6698 on the Protection of Personal Data (KVKK).

Only the data the service needs in order to work is processed:

• Account details: email address, display name and — if you signed in with Google or GitHub — the account identifier returned by that provider.
• Progress data: lessons completed, per-topic progress, XP, streak length, badges earned and recent activity records.
• Account status: beta access status, plus the time the account was opened and last seen.
• Technical records: standard access logs kept on the server, such as IP address, browser information and request time.

Your password never reaches us. When you register with an email address, the password is taken and stored directly by Google Firebase Authentication; our systems never see or record it at any point.

• Creating your account and keeping your session secure.
• Recording your progress and showing it on your dashboard.
• Determining your beta access and the features available to you.
• Security: detecting abuse, automated attacks and unauthorised access.
• Meeting legal obligations.

You may share your email address with us when creating an account or contacting us. It is not disclosed to independent third parties; it may only be processed by technical infrastructure providers such as Google Firebase as necessary to provide the service.

Your data is not profiled for marketing, not sold, and not shared with advertising networks.

The service runs on Google Firebase infrastructure. Authentication is handled by Firebase Authentication, storage by Cloud Firestore, and hosting by Firebase App Hosting.

The application server and the database are located inside the European Union, in the Netherlands (europe-west4). Because the authentication service runs on Google's global infrastructure, a transfer of data abroad may occur in that respect.

When you sign in with Google, Google's own privacy policy also applies; when you sign in with GitHub, GitHub's does.

No advertising or analytics cookies are used on this site. Only the cookies the service strictly needs are set:

• __session — carries your session. It can only be read by the server (httpOnly), is sent over an encrypted connection and is valid for at most 14 days. It is deleted when you log out.
• NEXT_LOCALE — remembers which language the site should be shown in. It contains no personal data, is kept for a year, and you can delete it from your browser.

Your browser also holds local storage entries that Firebase Authentication uses to remember the session; these are not sent to the server.

Account and progress data is kept for as long as your account is open. If you have your account deleted, your progress records are deleted with it.

Because the service uses Firebase infrastructure, server logs are retained in accordance with Google's current retention policies.

Under Article 11 of the KVKK you have the right to learn whether your personal data is being processed, to request information about it, to learn the purpose of processing, to ask for it to be corrected if it is incomplete or inaccurate, to ask for it to be erased or destroyed, to ask that such actions be notified to third parties, to object to a result reached against you solely through automated analysis, and to claim compensation for damage suffered.

You can send your requests to nextgodot@gmail.com. Applications are concluded within thirty days at the latest.

This text may be updated as the service changes. The update date appears at the top of the page; for material changes you will be informed via the email address linked to your account.