Privacy Notice

What data we process

• Account data: your username, e-mail address and an irreversible hash of your password (the password itself is never stored).
• Profile and community data: the team you support (if you choose one), your clan name and the badges you have earned.
• Session and security records: your IP address, browser and device information, sign-in and session times.
• Forum content: the topics you start, the posts you write and your forum profile.

Why we process it

• To create and manage your account and let you use the same account on the website, the forum and, later, in the game.
• To protect your account and our services: preventing unauthorised access and abuse, and limiting failed sign-in attempts.
• To meet our legal obligations (e.g. traffic records under Turkish Law No. 5651).
• We do not send you advertising or marketing e-mails, and we never sell your data.

Legal grounds

• Account and service data: necessary to enter into and perform a contract (KVKK Art. 5/2-c).
• Traffic records: necessary to comply with our legal obligation (KVKK Art. 5/2-ç).
• Security records: our legitimate interest, provided it does not harm your fundamental rights and freedoms (KVKK Art. 5/2-f).
• We do not rely on your explicit consent for any processing. If we ever do (e.g. a newsletter), we will ask for it separately first.

How we collect it

From what you enter in the registration and profile forms, what you share on the forum and, later, the account data sent by the game client; and automatically through server logs and strictly necessary cookies.

Who receives your data

• Your data is stored on servers in Turkey (Istanbul) and is not transferred abroad.
• Our server hosting provider can access the data only to provide its service, as a data processor.
• Information is given to authorised public bodies and judicial authorities only where the law requires it.

How long we keep it

• Account and profile data is kept while your account is open. When you close your account it is deleted or anonymised.
• Session records are deleted when the session ends. Traffic records are kept for the period required by law.
• Because forum posts are linked to other members' replies, they may be anonymised rather than deleted when an account is closed.

How we protect it

Passwords are hashed with Argon2id, connections are encrypted with SSL, only hashes of session keys are stored and failed sign-in attempts are limited. Only authorised administrators can access the data.

Your rights (KVKK Art. 11)

• To learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of processing and whether it is used accordingly; to know the third parties in Turkey or abroad to whom it is transferred.
• To ask for incomplete or inaccurate data to be corrected, for data to be deleted or destroyed when the conditions of KVKK Art. 7 are met, and for these actions to be notified to the recipients.
• To object to a result against you arising solely from automated analysis, and to claim compensation if you suffer damage from unlawful processing.
• Send your requests to the contact address below; we answer free of charge within 30 days at the latest.