Privacy notice
Last updated:
This notice explains how your personal data is processed when you use the CernSoft Games website or email us. It is issued under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, where it applies to you, the EU and UK General Data Protection Regulation.
Who is the data controller?
The controller is CERNSOFT. CernSoft Games is CERNSOFT's game studio. Contact: info@cernsoft.com.
What personal data do we process?
- When you visit the site: IP address, browser and device information, the page requested and the time of access. These records are created on our hosting provider’s servers for security.
- If you email us: your email address and the content of your message.
- When you play Gravity Jar in the browser: your scores, coins and settings stay in your own browser; they are never sent to us and are not processed under this notice.
Why do we process it?
- To serve the site securely and without interruption, and to prevent abuse.
- To answer your requests and questions.
What is our legal basis?
- Security logs and correspondence: our legitimate interests, provided they do not override your rights (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).
Who do we share it with?
- Hosting: Vercel Inc. (USA) — site traffic and server logs.
- Public authorities, where we are legally required to.
Is my data transferred abroad?
Yes. Vercel Inc. is based in the United States. These transfers rely on standard contractual safeguards as required by Article 9 of the KVKK and, where the GDPR applies, its Chapter V.
How long do we keep it?
- Server logs: kept briefly on the hosting provider’s systems and deleted automatically.
- Correspondence: until the matter is resolved, for 2 years at most.
- Unless the law requires us to keep it, we act on a deletion request within 30 days.
What are my rights?
You can ask us whether we process your data and request access to it, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time. Under the KVKK you can also learn which third parties received your data and seek compensation for damage caused by unlawful processing.
How do I make a request?
Email info@cernsoft.com with enough information to identify you. We respond free of charge within 30 days at the latest.
If you are not satisfied with our answer, you can complain to the Turkish Personal Data Protection Board or, if you are in the EU or UK, to your local data protection authority.