Privacy policy
What data we process, why, who we never share it with, and your rights.
Who is responsible
This site is operated by Hostlyzer. For any privacy question, write to the contact address in the footer; requests are answered within 30 days.
What we process
When you visit: server access logs (IP address, browser info, requested page, time) and strictly necessary cookies (session, language preference, security token). Your comparison basket is tied to the session, not to your identity. If you write a review or claim a provider profile: the name and e-mail you provide. If you open a provider portal account: your account details and login times.
Why we process it
To run the site, to prevent abuse and fake reviews, to verify provider claims, and to meet legal obligations. We do no profiling, no ad targeting and no selling of data.
How we collect and on what legal basis
We collect data only while you use the site: automatically (server logs, strictly necessary cookies) and from forms you fill in. Legal bases: running and securing the site rests on our legitimate interest (GDPR Art. 6(1)(f) · Turkish DPL Art. 5/2-f); an account, a review or a price alert rests on performance of a contract (GDPR Art. 6(1)(b) · DPL Art. 5/2-c); retention and notification duties rest on our legal obligations (GDPR Art. 6(1)(c) · DPL Art. 5/2-ç). We do not rely on consent for any processing; if a record is ever created on consent, you may withdraw it at any time.
Third parties
There is no third-party analytics or advertising script on this site. Our infrastructure providers (hosting and Cloudflare) technically process traffic. When you click an affiliate link, the destination site sets its own cookies; from that moment its privacy policy applies.
International transfers
Our servers and network layer are outside Türkiye: Namecheap, Inc. (ABD) and Cloudflare, Inc. (ABD). When you open the site, your IP address and request data technically pass through these providers; that is an international transfer (GDPR Chapter V · Turkish DPL Art. 9). The transfer is necessary to deliver the service and relies on the standard data protection commitments in our contracts with those providers. They process the data on our behalf, for hosting and security only, never for their own purposes.
Retention
Server logs are kept at most 6 months, session data 7 days, the language preference 1 year. Review and claim records are kept while published, for verifiability.
Automated decisions and profiling
Plan rankings are produced by a scoring algorithm, but that algorithm evaluates PLANS, not YOU: its inputs are the answers you give in the wizard and providers' published data — not your personal history. We make no automated decision that produces legal effects concerning you or similarly significantly affects you (GDPR Art. 22). We do not profile for advertising and we do not sell data.
Your rights (GDPR)
You have the right to access, rectify, erase, object to processing and to data portability. Send your request to the contact address; after verifying your identity we answer free of charge within 30 days. You may also complain to your local supervisory authority.
How to make a request
Send your request to [email protected] or, in writing, to the postal address in the imprint. Under the Turkish communiqué on applications to data controllers, a request should state your name, your national ID number (or nationality and passport number if you are a foreign national), an address or e-mail for the reply, a phone number if relevant, and the subject of the request. Requests are free of charge; where the action genuinely incurs a cost, the fee in the Board's tariff may apply. We reply within 30 days at the latest.
The badge endpoint and the embedded verification mark
When you open the page of a provider that embeds our verification badge, your browser requests the badge image from us. We do NOT store your IP address for that request, we write you no cookie and we open no session; the badge endpoint runs entirely outside the site session. The only record we keep is an impression counter aggregated over the triple (provider, badge type, day); there is no way to reach an individual visitor from that counter. The provider embedding the badge sees only that total, never who saw it.
Changes
Changes to this policy are published on this page; significant changes refresh the page's update date.