Privacy Policy

Data controller

Sosyal Medya Çekilişi (sosyalmedyacekilisi.com) is run by Devcode Ltd, registered in the United Kingdom, which is the controller of personal data. Send your questions to [email protected].

Our relationship with Instagram and Meta

This service is not endorsed, approved or affiliated with Instagram, Meta, YouTube or Google. We access Instagram only through Meta's official "Instagram Login" (Business Login) interface, and only within the permissions you grant.

Which data we process

To run a giveaway we process:

• For organizers: Instagram username, Instagram professional account ID, account type, language preference and the Instagram access token (stored encrypted).
• For commenters: username, comment text, Instagram's app-scoped user ID (IGSID) or YouTube channel ID, and the time of the comment.
• For result pages: winners' masked usernames (e.g. @ay***aya) and ticket numbers that contain no identity.
• For security: session cookies and action codes in our logs. We collect no advertising or tracking data.

Why we process it (legal basis)

To set up and run the giveaway the organizer asks for (performance of a contract), to keep the result fair and verifiable by anyone (legitimate interest), and to meet legal obligations. The bases are Article 5 of KVKK and Article 6 of the UK GDPR.

How long we keep it

Comments are kept while the giveaway runs and as long as the organizer wants; they are deleted on a deletion request. The access token is deleted as soon as the connection is removed. The proof of published giveaways (ticket list without identities, rules, drand round) is kept so the result stays verifiable. Logs only contain codes and numbers without identities. Exact periods will be set during legal review.

Your rights

Under Article 11 of KVKK and the UK GDPR you can access, correct and erase your data, restrict or object to processing, and ask for portability. Send requests to [email protected]. You may also complain to the Turkish Personal Data Protection Authority or to the ICO in the United Kingdom.

Sub-processors

We share data only to provide the service, with:

• Hosting: Hetzner Online GmbH.
• Meta Platforms (Instagram API): to read comments with your permission.
• Google (YouTube Data API): to read public video comments.
• drand (League of Entropy): public randomness. No personal data is sent to it.

International transfers

Meta's and Google's servers may be in other countries. Transfers rely on those companies' standard contractual clauses; details will be confirmed during legal review.

Cookies

We use only cookies that the service needs to work; there are no advertising or analytics cookies, so we do not ask for cookie consent.

• Session cookie: remembers that you are signed in (up to 14 days).
• Security cookies: stop other sites from acting on your behalf.
• Sign-in cookie: ties an Instagram sign-in to your browser (10 minutes).
• Your language is kept in the address (/ Turkish, /en English), not in a cookie.

Getting your data deleted

Remove the app in your Instagram settings and request deletion, or write to us. The steps are on the Data deletion page.

Changes

If we update this policy we change the date and announce important changes to organizers in advance.