Privacy & Legal

Last Updated: April 2026

01. Data Controller

This Privacy Policy provides information about your personal data collected, used, and protected by the DealRaid platform (hereinafter referred to as "Platform" or "We"). The data controller of the Platform is [Your Name/Company Name], and our contact information is [mehmet.basargan@gmail.com].

02. Processed Personal Data and Processing Purposes

When you use our Platform, the following personal data may be processed:

  • Identity and Contact Data: When you log in via Google (NextAuth), your name, email address, and profile picture (provided by Google) are collected.
    Purpose: To create user accounts, authenticate identity, manage your favorite games list, enable commenting, and provide a personalized experience within the Platform.
  • Usage Data: Your navigation information on the Platform, pages visited, clicks, and interactions (anonymously via Vercel Analytics).
    Purpose: To analyze Platform performance, improve user experience, and ensure security.
  • Favorite Games and Comments: Your saved favorite games and comments you make.
    Purpose: To offer user-specific content and facilitate social interaction on the Platform.
  • IP Address and Log Records: Your IP address and access records via server logs.
    Purpose: To ensure Platform security, prevent potential cyber attacks, and fulfill legal obligations.

03. Legal Grounds for Personal Data Processing

Your personal data is processed based on the legal grounds specified in Articles 5 and 6 of the KVKK (Personal Data Protection Law) / GDPR:

  • Performance of a Contract: To create user accounts and provide Platform services (favorite list, comments).
  • Legitimate Interest: To ensure Platform security, analyze and improve its performance.
  • Explicit Consent: Your explicit consent will be obtained if additional services such as marketing or personalized advertising are offered in the future.

04. Transfer of Personal Data

Your personal data may be shared with the following third parties in line with the processing purposes:

  • Vercel: The Platform's hosting service provider. Server logs and anonymous usage data may be processed within the Vercel infrastructure.
  • Google (Auth.js): Provides identity authentication services. Your name, email address, and profile picture are processed on Google servers and transferred to our Platform.
  • Prisma/PostgreSQL: User accounts, favorites, and comments are stored in our database.
  • RAWG API and CheapShark API: Game data and price information are retrieved from these APIs. These APIs do not process your personal data; they only provide game information.

Your data is transferred in accordance with the conditions specified in Articles 8 and 9 of the KVKK / GDPR.

05. Personal Data Retention Periods

Your personal data is retained for the period required by the processing purposes:

  • User Account Data: Retained as long as your account is active. When you delete your account, all related data (favorites, comments) are deleted.
  • Comments and Favorites: Retained as long as your account is active or until you delete them.
  • Log Records: May be retained for a certain period (e.g., 30-90 days) for security and legal obligations.

06. Rights of the Data Subject

Pursuant to Article 11 of the KVKK / GDPR, you have the following rights regarding your personal data:

  • To learn whether your personal data is processed,
  • To request information if your personal data has been processed,
  • To learn the purpose of processing your personal data and whether they are used appropriately for their purpose,
  • To know the third parties to whom your personal data is transferred domestically or abroad,
  • To request correction of your personal data if it is incomplete or incorrectly processed,
  • To request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK / GDPR,
  • To request that the correction, deletion, and destruction requests mentioned above be notified to third parties to whom your personal data has been transferred,
  • To object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
  • To demand the compensation of the damage if you suffer damage due to unlawful processing of your personal data.

07. Application and Contact

Pursuant to Article 13 of the KVKK / GDPR, you can submit your requests to exercise your rights mentioned above in writing or by other methods determined by the Personal Data Protection Board to [mehmet.basargan@gmail.com].

08. Amendments

This Privacy Policy may be updated from time to time. Updates become effective on the date they are published on the Platform.

Questions? Reach out via [mehmet.basargan@gmail.com].