Privacy Policy and Data Protection Notice

Last updated: 18.10.2026

This text is a starting template based on kodalt's actual data processing practices. Before going live, it is recommended that the [adres, vergi/MERSİS numarası] fields be filled in and reviewed by a legal counsel before going live.

1. Data Controller

kodalt platform (Sina Dijital), 6698 sayılı Kişisel Verilerin Korunması Kanunu ("KVKK") kapsamında veri sorumlusu sıfatıyla hareket etmektedir.

2. Data We Collect

We process the following personal data when you use our services:

When creating an account: full name, email address, phone number (optional)
Google, Microsoft veya Facebook ile giriş yaptığınızda: bu sağlayıcıların paylaştığı ad, e-posta bilgisi
When you use phone login (OTP): your phone number and verification record
For technical security purposes: IP address and timestamp (failed login attempts, abuse prevention)
Cookies: essential cookies for session management and security (CSRF protection)
When your dynamic QR codes, shortened links, digital business card or digital menu are scanned/viewed: the visitor's IP address (with the last segment masked — so the person/device cannot be directly identified), approximate location (estimated country/city via IP), device type and browser information are recorded to be presented to you (the content owner) as statistics

Important: content you generate with the free static QR generator (the URL, text, or WiFi info you enter) is not stored on our servers — the QR code is generated instantly and sent to your browser.

3. Purpose of Processing

To create your account and verify your identity
To provide and improve our services
To ensure account security (abuse/fraud prevention, rate limiting)
To fulfill our legal obligations

4. Data Sharing

Kişisel verileriniz, yasal zorunluluklar dışında üçüncü taraflarla paylaşılmaz veya satılmaz. Google, Microsoft, Facebook ve Netgsm gibi kimlik doğrulama/SMS sağlayıcılarıyla yalnızca ilgili hizmeti (giriş, doğrulama kodu gönderimi) sağlamak amacıyla gerekli asgari veri paylaşılır.

5. Data Retention Period

Your account data is retained as long as your account is active. My Account page, you can delete your account and all associated data (QR codes, digital business card, shortened links, digital menu and all related scan/view statistics) yourself, instantly and permanently — you don't even need to submit a request.

6. Your Rights (under data protection law)

Under applicable data protection law, you have the right to learn whether your data is being processed, request information about it, learn the purpose of processing, know the third parties to whom it is transferred domestically or abroad, request correction if processed incompletely or incorrectly, and request its deletion or destruction.

7. Contact

For privacy-related questions info@kodalt.com you can reach us at.