Privacy Policy

Within the scope of Article 3 of KVKK, the data controller acts individually under the Atosweb brand. Weble.TR is currently offered as a free service.

Account data

• Email address (for sign-in and communication)
• Username, display name, biography, profile image (provided by you; publicly visible)
• If you sign in via OAuth: the email forwarded by the provider + provider ID
• Password (bcrypt hash via Auth.js v5; we do not store it in plain text)
• Two-factor authentication (TOTP) secret (if enabled, encrypted)

Content data

• The links and short links you add
• Images you upload (avatar, link covers) — on Cloudflare R2

Usage analytics

• Profile view and link click events (IP, country, browser summary, referral source). IPs are retained briefly, anonymized, or processed for statistical purposes.
• Error and performance data (via Sentry)

• To create your account, manage your session, and provide the service
• To show your profile page and links to visitors
• To prevent abuse of the service (rate limiting, blocklist, automatic URL checks)
• Statistics and reporting (showing only a summary of data belonging to you)
• To comply with legal obligations toward competent authorities when requested
• Communication (important security notices, service changes)

We do not send bulk marketing emails.

Your data is shared with the following service providers solely to provide the service:

• Hosting: Hetzner (Germany — application server), Cloudflare (CDN, DNS, R2 file storage, KV)
• Database: Neon (EU region)
• Email: Brevo (transactional and magic link emails)
• Error/performance monitoring: Sentry
• URL safety check: Google Web Risk API (only the URL you add is sent; no account information is sent)
• OAuth sign-in: Your preferred provider (Google, Discord)
• Analytics (only if you consent): Google Analytics 4 (Google Ireland Limited)
• Marketing (only if you consent): TikTok Pixel (TikTok Technology Limited, Ireland)

We do not share, sell, or rent your data to third parties for marketing purposes. Only with your consent, anonymous/aggregate data is sent to analytics/marketing service providers; details are in the Cookie Policy.

Weble.TR uses three categories of cookies: essential (Auth.js session, CSRF, theme, cookie preference), analytics (Google Analytics 4 — consent required), and marketing (TikTok Pixel — consent required). The analytics and marketing categories are loaded only if you explicitly consent; if you do not, they are never invoked. You can change your preference at any time.

For a detailed list, retention periods, and steps to manage your preferences, see the Cookie Policy.

• Account data: for as long as your account is active + 30 days after closure (if legal periods differ, those apply)
• Click/view events: anonymized or deleted after 12 months
• Sentry error logs: 90 days

• HTTPS enforced (TLS 1.2+)
• Passwords are hashed with bcrypt; they are not stored in plain text
• 2FA TOTP secrets are kept encrypted
• Access is limited to authorized administrators only; all administrative actions are written to an audit log
• If we detect a data breach, we will contact you and the Personal Data Protection Board in accordance with the notification periods under KVKK

Weble.TR is not intended for users under the age of 13. If we learn that a user under the age of 13 has created an account, we will close the account and delete their data.

We may update this policy from time to time. We will announce significant changes by email or in-service notification. The “Effective date” at the top of the page shows the most recent update.

For questions about our data processing practices:
Atosweb
Email: [email protected]