Privacy Policy

We process the following categories of personal data to provide the Service:

Account and profile information

• Username, email address and password (passwords are stored only in irreversible, hashed form).
• Optional profile information: bio, profile picture, social links, language and theme preferences.

Content and interaction data

• Posts, titles, the qubes (topics) you use, and images you upload.
• Ratings (stars) you give, users and qubes you follow, and content you save.
• Feedback and support messages you send us.

Usage and device data

• Technical data recorded by our servers and infrastructure when you access the Service (e.g. pages accessed, request time), and aggregate, anonymous usage/traffic statistics.
• Device and browser information, IP address, and approximate location derived from your IP (country/city level).

Cookies and similar technologies

We process data through cookies and similar technologies. See the Cookie Policy for details.

• To create your account, authenticate you, and provide the Service.
• To publish your content, build feeds and qubes, and process interactions (follows, ratings, saves).
• To keep the Service secure and prevent fraud, abuse and unwanted content.
• To analyze the Service, fix bugs and improve the user experience.
• To comply with legal obligations and protect our rights.
• To communicate with you, to the extent you permit.

We process your personal data only on a valid legal basis (KVKK Art. 5 and GDPR Art. 6):

• Performance of a contract: to provide your account and core Service functionality.
• Consent: where processing requires it, such as international data transfers. You may withdraw consent at any time.
• Legitimate interests: to secure the Service, prevent abuse and improve the product (balanced against your interests).
• Legal obligation: where required by applicable law.

We do not sell your personal data. We share it only with service providers (processors) acting on our behalf and under our instructions to operate the Service:

• Supabase — database and authentication infrastructure.
• Cloudflare — DNS, content delivery and image/content storage (R2).
• Plunk — transactional email delivery (e.g. email verification).
• Vercel — website hosting and delivery.

We may also share data with competent authorities where legally required (legal requests, court orders) or where necessary to protect our rights and the safety of our users.

Some of the providers above may host data on servers located outside Turkey. This means your personal data may be transferred abroad.

Such transfers rely on your explicit consent or appropriate transfer mechanisms under KVKK Art. 9, and on appropriate safeguards such as Standard Contractual Clauses under the GDPR.

• We retain your account and content data for as long as your account is active.
• When you close your account, we delete or irreversibly anonymize your personal data within a reasonable period; however, data required for legal obligations, dispute resolution and enforcement of agreements may be retained for the relevant period.

Under applicable law (KVKK Art. 11 and the GDPR) you have the right to:

• Learn whether your personal data is processed and access your data.
• Request rectification of inaccurate or incomplete data.
• Request erasure of your data.
• Object to processing and request restriction of processing.
• Request portability of your data in a structured format.
• Withdraw consent you have given (withdrawal does not affect prior processing).

To exercise these rights, contact us at support@bloqube.com. We will respond within the period required by law.

We take reasonable technical and organizational measures to protect your data: encryption in transit (TLS), irreversible storage of passwords, access controls and regular reviews. No system is 100% secure.

Bloqube is not directed to children under 13, and we do not knowingly collect data from users below that age. In the European Union, the minimum age for consent-based processing may be up to 16 depending on local law. If we learn that a child has provided us data, we will delete it.

If you are in the European Economic Area, the United Kingdom or Switzerland, processing relies on the legal bases described in Section 3. You have the right to lodge a complaint with your local data protection authority.

Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know the categories of personal information we collect, to access it, and to request its deletion. We do not sell your personal information and do not share it for value. We will not discriminate against you for exercising these rights.

We may update this Privacy Policy from time to time. We will notify you of material changes through the Service. The "Last updated" date at the top indicates the current version.

Data controller: [Şirket/Veri Sorumlusu Ünvanı]. Address: [Açık Adres]. For any privacy questions or requests: support@bloqube.com.