Required before launch
Legal company name, registered address, tax office and number, MERSİS number (if applicable), support email, privacy-request channel, seller identity and applicable service providers have not yet been supplied. These details must be published before this draft is used for real transactions.
1. Information you provide
We use the information entered in early-access, account, seller and test-order forms to provide those functions. Product listings approved for public display may show seller name, description, price and cover. Do not upload identity documents, sensitive personal data or third-party information unless a specifically disclosed process requires it.
2. Browser storage and cookies
Browser storage remembers your language choice and supports sign-in sessions. Mobile installation uses a manifest and a network-only service worker; authenticated pages and API responses are not stored by that worker for offline use. Browser settings can clear stored preferences and sessions, which may sign you out. Any future optional analytics or advertising tracking requires a separate review and appropriate choice controls before activation.
3. Access and sharing
Waitlist entries are private. Seller applications and non-public products are restricted to their owner and authorised review staff. Orders are restricted to the relevant buyer, seller and authorised administrators; fulfilment information is shared only as needed for that flow. Service providers may process information for hosting, authentication, storage and technical operation. The final provider and transfer disclosures must be completed.
4. Payments and files
Current checkout and order flows are test-only. Do not send card numbers, bank credentials or passwords through forms or product files. Product files use access restrictions; signed download or image links allow access during their validity and should not be forwarded. Access controls reduce risk but cannot guarantee absolute security.
5. Retention and your choices
Information should be retained only for its stated purpose and applicable legal obligations. The controller must finalise retention periods and a verified channel for access, correction and deletion requests. Signing out ends your session but does not delete your account or stored orders. The KVKK Information Notice describes statutory data rights and the draft’s outstanding details.
6. Changes and contact
This draft will be updated when company details, service providers and live-sales operations are confirmed. Material changes must be communicated appropriately; a policy update alone does not create consent. The support email and privacy-request channel are awaiting confirmation and are not invented in this document.