This notice is given under Article 10 of the Personal Data Protection Law No. 6698 (KVKK). It covers spacestocks.net. The simulated exchange at app.spacestocks.net will have its own notice.
Who is responsible
Spacestocks is a student project, not a company. The data controller for this site is the project team: Burak Sahin Kucuk, Yunus. You can reach us at [email protected].
What we collect, and what we don’t
This site has no accounts, no forms, no analytics, no advertising and no third-party trackers. Our fonts are served from our own address, so loading a page does not send your IP address to a font company.
We handle personal data in two situations only. A third, market data, is a connection your browser makes to Binance, not to us:
- Server logs. When your browser asks for a page, the server that hosts this site records technical details of the request: your IP address, the time, the page you asked for and your browser’s user agent.
- Email. If you write to us, we receive your email address, your name if you include it, and whatever your message says.
- Market data. The markets pages and the price strip on the home page load live prices straight from Binance’s public market data:
data-api.binance.visionanddata-stream.binance.visionfor crypto,fapi.binance.comandfstream.binance.comfor stocks and commodities. Your browser connects to Binance directly, so Binance receives your IP address and browser details, under its own privacy policy. Nothing from these connections reaches us, and no account, cookie or key is involved.
Why, and on what legal basis
- Server logs keep the site running and safe: they let us find faults and stop abuse.
- Emails are used only to answer you.
For both, the legal basis is Article 5(2)(f) of the KVKK: processing that is necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms. We do not use your data for marketing, profiling or automated decisions, and we never sell it.
How it is collected
Server logs are collected automatically, by electronic means, when your browser loads a page. Emails reach us directly from you.
Who receives it
- Server logs are processed on our behalf by Cloudflare, Inc., which serves the site from its worldwide network, so they may be processed outside Turkey.
- Emails are stored by the provider that runs our mailbox.
- Market data connections go from your browser to Binance, whose servers may be outside Turkey. Only the pages that show live prices open them.
We share personal data with no one else, unless the law requires us to, for example at the request of a court.
How long we keep it
We keep emails only as long as we need them to answer you, and we delete them by the end of the project. Server logs are kept under the hosting provider’s own retention period, which we will state here once the provider is chosen.
Browser storage
This site sets no cookies. It saves one item in your browser’s local storage, and only after you change a setting in the Display panel. Pages with live prices also keep the last prices they showed in session storage, which your browser empties when you close the tab.
| Name | Purpose | How long | Set by |
|---|---|---|---|
spacestocks:prefs |
Remembers your display and accessibility settings, such as theme, text size and reading font | Until you press “Reset all” in the Display panel or clear your browser data | This site |
spacestocks:quotes, spacestocks:trend:* |
The last market prices and trend lines this tab saw, so the next page shows them at once | Until you close the tab (session storage) | This site |
These items never leave your browser, and we cannot read them from our server. Neither says anything about you: one remembers a choice you made yourself, the other holds public market prices. So neither needs consent, which is why the site shows no cookie banner.
Your rights
Under Article 11 of the KVKK, you can ask us to:
- tell you whether we process personal data about you;
- give you information about that processing;
- tell you why we process it and whether it is used for that purpose;
- name the third parties, in Turkey or abroad, who receive it;
- correct it if it is incomplete or wrong;
- delete or destroy it under the conditions in Article 7;
- tell the third parties who received it about a correction or deletion;
- reconsider a result against you that comes only from automated analysis;
- compensate you for damage caused by unlawful processing.
Send your request to [email protected]. We answer free of charge, within 30 days at the latest. If you are not satisfied with our answer, you can complain to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).
Changes
If this notice changes, the date at the top of the page changes with it.