Privacy policy

Data controller

Ahmet Cerit. Questions and requests: [email protected].

Without an account

You can use the site without signing up. In that case we keep no data that identifies you. We use no advertising or visitor analytics cookies.

As with any website, your IP address and browser details may be kept briefly in technical logs while your request reaches our servers. They are used only to run the site and prevent abuse.

What we process when you have an account

• Your email address, to send you a one-time code and sign-in link when you sign in with email.
• If you sign in with Google: the name, verified email address and Google account ID that Google shares with us. We never see your Google password.
• Your language preference.
• The products you save and your boards.
• Your price alerts: which product you are waiting on and at what price.
• If you choose to enter them: your size, shoe size, body measurements (bust, waist, hips), favourite brands, interests and poll answers. All of these are optional.
• Session details: the browser information (user agent) of the device you signed in on and when the session started.

Why we process it

• To run your account, saved items and alerts: performance of our membership agreement (KVKK art. 5/2-c).
• To let you know when a price drops on products you set an alert for, under the same agreement. You can turn notifications off at any time.
• To highlight products that fit your size and taste, using only what you entered.
• To protect your account and the site against unauthorised access and abuse: legitimate interest (KVKK art. 5/2-f).

We do not sell your personal data or share it with anyone for advertising.

Store links

Asvoya does not sell anything. When you go to a store you leave our site, and what you do there is covered by that store's privacy policy.

Some links are affiliate links: if you buy something, the store may pay us a commission. This costs you nothing extra, and we do not pass your personal data to the store.

Cookies and data on your device

• vt_at and vt_rt: cookies that keep you signed in and cannot be read by JavaScript. vt_at lasts 15 minutes, vt_rt 60 days.
• Session flag: a cookie with no personal data that tells the page whether you are signed in (60 days).
• Your browser's local storage: recent searches, recently viewed products, likes and display preferences. These stay on your device and are never sent to us.

All of these are needed for the site to work. We use no advertising, tracking or analytics cookies.

Who we share data with

Our servers are in Türkiye. We work with these service providers to run the site:

• Cloudflare, which delivers traffic to the site and protects it against attacks. Your request, including your IP address, may pass through Cloudflare servers outside Türkiye.
• Google, only if you choose to sign in with Google, to verify your identity.
• An email delivery service, to send you sign-in codes and price notifications.

How long we keep it

• Account data, for as long as your account is open.
• Sign-in codes are valid for 15 minutes, sessions for at most 60 days.
• When we delete your account, your profile, saved items, boards and alerts are deleted. Instead of your email address we keep a keyed digest of it that cannot be turned back into the address. It is used only to recognise that you signed up again with the same address.

Your rights

Under article 11 of KVKK you have the right to learn whether your personal data is processed, to request information about it and its purpose, to know who it is shared with, to have it corrected if incomplete or wrong, to have it deleted, to object, and to claim compensation for any damage.

For any request, including deleting your account, write to [email protected]. We reply within 30 days at the latest. If you are not satisfied with our reply, you can complain to the Turkish Personal Data Protection Board.

Changes

When we change this policy, the current version is published on this page and the date below is updated.