This notice explains, under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK), how your personal data is processed when you use the xsatranc.com website and app.
Data controller
Murat Türkün, [Açık adres]. Contact: iletisim@xsatranc.com.
Data we process
- Identity and contact: username, email address; your Google or Apple account ID if you sign in with them (including Apple's private relay address).
- Profile (optional): the profile photo you upload, your short bio, chosen avatar, colour and cover.
- Account security: an irreversible hash of your password (the password itself is never stored), session records.
- Location (declared): the country and city you choose in your profile.
- School and class (optional): the school you choose, your role in education (student, teacher, parent) and the classes you join.
- Game data: the games you play, moves, ratings, lesson, puzzle and streak progress, your daily goal, reports and support requests you send.
- Invites: if you signed up through an invite link, the player who invited you (for the invite reward).
- Teacher application (only if you apply): your school email address and the teaching document you upload; the document is deleted once the application is decided.
- Payments (only if you buy): the product, amount, date and the payment institution's transaction number. Your card details never reach us.
- App notifications: your phone's notification token if you allow notifications.
- Technical data: IP address and time in server security logs; an irreversible hash of your IP address and browser device ID to prevent fake accounts and cheating (used for at most 90 days).
Purposes and legal grounds
- Creating your account, providing the game and learning service, building rankings: performance of a contract (KVKK Art. 5/2-c).
- Account security and preventing cheating and abuse: legitimate interest (Art. 5/2-f).
- Legal obligations (e.g. invoicing for paid services): legal obligation (Art. 5/2-ç).
- Service information (e.g. the weekly City League results email, game and tournament notifications): performance of a contract and legitimate interest; you can turn them off with the link in each email or on the Settings page. Commercial messages with campaigns or ads are never sent without your consent.
Transfers
Data is processed by our hosting and file storage provider, our email delivery provider (Resend), Apple (APNs) and Google (Firebase) for app notifications, Google or Apple depending on your sign-in method, and the payment institution (iyzico) or app store if you buy, only as far as needed to provide the service. For the Premium AI coach comment, the game's moves and analysis findings are sent, without your name or contact details, to an AI service provider (Anthropic). Transfers to providers located abroad follow the conditions of KVKK Art. 9 (standard contracts etc.). Public authorities receive information only when legally required.
How data is collected
Data is collected electronically through the sign-up and profile forms, Google sign-in and your use of the site.
Retention
Account data is kept while your account is open. When you close your account your personal data is deleted or anonymised; game records may remain in your opponents' history without your name. Records with a legal retention period are kept for that period.
Your rights (KVKK Art. 11)
You have the right to learn whether your data is processed, request information, ask for correction or deletion, learn who it was transferred to, object, and claim compensation for damage. To download a copy of your data or delete your account, use the "My data" section on the Edit profile page. Send other requests to iletisim@xsatranc.com; they are answered within 30 days.
Users under 18
Users under 18 must have a parent's or guardian's consent before creating an account. Student accounts opened by schools and teachers have no email address and do not appear in search or rankings; informing parents and obtaining their consent for these accounts is the responsibility of the school or teacher who opens them.