Skip to main content

Legal

Privacy Policy

How we collect, use, and protect your personal data at İzmir's Spiritual Stars — in compliance with the EU GDPR and the Turkish KVKK (Law No. 6698).

Last updated: 4 June 2026

1. Data Controller

  • Data ControllerHalil Ertekin (2Run)
  • AddressRollekens 83, 2400 Mol, België
  • KBO/BCE1038.480.317
  • VAT (BTW/TVA/VAT)BE1038.480.317
  • Privacy Contact[email protected]

2. Data We Collect

  • QR scan history — which figure QR codes you scanned, used for badge progression.
  • Badge progress — gamification state (unlocked badges, XP) stored locally on your device.
  • Cookie preferences — your consent choices for necessary / analytics / marketing cookies.
  • Anonymous device data — browser type, screen size, language preference (no IP storage).

3. Purposes of Processing

  • Personalising the content you see based on language and faith preferences.
  • Generating aggregate, anonymised statistics about how the site is used.
  • Remembering your gamification progress across sessions (via localStorage).
  • Honouring your cookie consent choices.

4. Data Storage

  • Email OTP sign-in creates a user account, session cookie, verification token, and account record.
  • Profile data includes email address, optional display name, locale, role, and timestamps.
  • Chat messages are sent to OpenRouter or upstream AI providers only after explicit first-use consent.
  • QR analytics may process route, locale, referrer, user-agent, device type, and timestamp; raw IP storage is not used in the app schema.
  • Badge progress, reading stats, cookie choices, and AI transfer consent are stored locally in your browser.

5. Your Rights — KVKK Art. 11

  • Right of accessAsk what data we hold about you.
  • Right to rectificationRequest correction of inaccurate data.
  • Right to erasureRequest deletion of your personal data.
  • Right to objectObject to processing for legitimate-interest reasons.

6. Your Rights — GDPR (EU)

  • Access (Art. 15)Obtain a copy of your personal data.
  • Rectification (Art. 16)Correct inaccurate or incomplete data.
  • Erasure (Art. 17)The “right to be forgotten”.
  • Portability (Art. 20)Receive your data in a machine-readable format.

7. Contact

For any privacy request, write to [email protected]. We respond within 30 days at the latest.

8. Governing Law and Dual Compliance

This service is operated by Halil Ertekin (2Run, KBO 1038.480.317) from Belgium and operates under dual compliance with the EU General Data Protection Regulation (GDPR, EU 2016/679) and Türkiye's Personal Data Protection Law No. 6698 (KVKK). For users in Türkiye, the detailed disclosure notice is available at: KVKK Disclosure Notice.