Data Protection Notice

Data controller

LibraryCSS processes your personal data as the data controller within the scope explained below. Send questions about this notice to iletisim@librarycss.com.

Personal data we process

• Identity and contact: name and email address
• Account: email-verification status, password hash (never the password itself), and user role
• Social sign-in: name, email address, and profile image shared by Google or GitHub
• Transaction security: IP address, browser information, session records, and sign-in times
• Usage: effects saved to your library and page-view, copy, and search events
• Consent records: the accepted text version, consent date, and IP and browser information at consent time

The visitor identifier used for measurement is not a cookie. It is an irreversibly derived value based on IP and browser information that rotates daily and cannot be used to identify a person.

Purposes of processing

• Creating memberships and managing accounts
• Authentication, session security, and preventing unauthorized access
• Providing the service, resolving errors, and measuring performance
• Sending commercial electronic communications where you have given explicit consent
• Meeting legal obligations and demonstrating compliance in disputes

Legal grounds

Your data is processed under Article 5 of KVKK for establishing and performing a contract, legal obligations, legitimate interests such as transaction security and abuse prevention, and explicit consent solely for commercial electronic communications. Marketing consent is never a condition for using the service.

Transfers

Data may be shared with suppliers only to the extent required for hosting, email delivery, authentication, analytics, and advertising services. Some suppliers operate servers outside Turkey, so transfers may occur under Article 9 of KVKK. We do not sell or assign your data to third parties for marketing.

Retention

Account data is retained while your membership continues. When you delete an account, account data is deleted; consent records may be retained for the applicable limitation period, and measurement events are retained for at most 24 months.

Your rights

You may request information about processing, correction, deletion, notification of correction or deletion, information about recipients, objection to solely automated decisions, and compensation for unlawful processing. Send requests to iletisim@librarycss.com; we respond within 30 days, subject to identity verification where appropriate.

Withdrawing marketing consent

You may withdraw consent to promotional email at any time with the unsubscribe link in each email or by disabling consent in your account's communication preferences. Your request is handled promptly and no further commercial messages are sent.