Privacy policy
Last updated: 21 October 2026
1. Data controller
Your personal data is processed by AKIF FAKIOGLU (sole proprietor, SEKERHANE ECZACILAR NO: FAKIOGLU IC KAPI NO: 9/501 ALANYA/ANTALYA) as data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR). Contact: contact@awordfor.com.
2. What we collect
The meaning you type and the words generated for it; the word you choose and, if you give one, the name it is recorded to; your e-mail address and a transaction id, sent to us by Paddle after payment (we never see card details); a salted hash of your IP address, to limit abuse of paid word generation; and the result of the Cloudflare Turnstile bot check. We do not ask for anything else, such as your full name or phone number. For the Gift plan and gift vouchers also: the recipient's name and (if you give it) e-mail address, your name and your personal note. From the person who uses a gift voucher we also take an e-mail address, to send them their word.
3. What is public
The word, its meaning, the name it is recorded to (if given), the date and the record fingerprint are published on the word's page; search engines may index these pages and others may copy them. So use only a first name or nickname in the meaning and the name, and do not write other people's surnames, contact details or private information. We never publish your e-mail address or payment details. If you leave the name empty, the record is anonymous. For a Gift, and for a word recorded with a gift voucher, the page and gift card show the recipient's name and, if given, your name; the personal note and e-mail addresses are never published.
4. Purposes and legal bases
We process data to coin, check and deliver your order (entering into and performing the contract, KVKK art. 5/2-c, GDPR art. 6(1)(b)), to keep accounting and tax records (legal obligation, KVKK art. 5/2-ç, GDPR art. 6(1)(c)), and to prevent abuse and respond to legal claims (legitimate interest, KVKK art. 5/2-f, GDPR art. 6(1)(f)). A first name or nickname of another person mentioned in a meaning is published on the basis of legitimate interest; that person can ask for its removal at any time. We do not process special categories of personal data and refuse meanings that contain them. We use the recipient's e-mail address on the basis of legitimate interest (KVKK art. 5/2-f, GDPR art. 6(1)(f)) to deliver the gift on your behalf, for that one e-mail only; before giving it to us, make sure they would not mind. Every year on the day a word was recorded, we send a short anniversary e-mail to the address used to pay (or to redeem the gift voucher) (legitimate interest, KVKK art. 5/2-f, GDPR art. 6(1)(f)); you can stop it at any time from the link in each e-mail.
5. Who receives data, and transfers abroad
Paddle.com Market Ltd (payment and invoicing, United Kingdom); Vercel Inc. (hosting, United States); Supabase (database, Frankfurt, EU); Anthropic PBC (reviews your meaning and coins words, United States; does not use API data to train models); Brave Software (web search, receives only the word); Cloudflare (bot check); OpenTimestamps servers (receive only the record fingerprint, no personal data); Resend (sends the delivery e-mail, United States). Transfers abroad rely on appropriate safeguards such as standard contracts under KVKK art. 9 and the GDPR. We do not sell your data or share it for advertising.
6. How long we keep data
We do not store meanings typed for words you do not buy; they may remain in technical logs for at most 30 days. A reservation you do not pay for (with its meaning and name) is deleted within 2 days. IP hashes are deleted after one day. The e-mail address and transaction id are kept while the record is valid and afterwards for the statutory retention periods (usually 5 years for tax records). The public record is kept for as long as it is valid under section 5 of the Terms. The recipient's e-mail address and the personal note are deleted 30 days after the gift or voucher e-mail has been sent; the delay lets a lost e-mail be sent again. A gift voucher that is never paid for is deleted within 2 days.
7. Your rights
Under KVKK art. 11 and the GDPR you have the right to know whether your data is processed, to request information, rectification and erasure, to object to processing, to learn who receives it and to claim compensation. Send requests to contact@awordfor.com; we reply within 30 days at the latest. A record holder can have the recorded name and their e-mail address erased. Anyone mentioned in a meaning, or who believes their privacy is infringed, can ask for the content to be removed; we answer such requests within 24 hours. If the recorded name is erased, the record file changes, so the timestamp proof can then only be verified with files downloaded earlier. You can also complain to the Turkish Personal Data Protection Board or the data protection authority of your country.
8. Automated review
The meaning you write is reviewed automatically with artificial intelligence to decide whether it is fit to publish; if it is not, no words are coined. This review is not a decision with legal effects on you; if you think it made a mistake, write to contact@awordfor.com and a person will look again.
9. Security
Data travels over encrypted connections, and only our server can access the database. We never store raw IP addresses.
10. Cookies
We use no advertising cookies and no analytics. Cloudflare Turnstile may set a cookie that is strictly necessary for the bot check, and one cookie remembers your language.
11. Children and contact
The service is not intended for anyone under 18. For any question about this policy: contact@awordfor.com.