Account Creation Privacy Notice

1. Controller And Scope

Data controller and service operator: Ömer Taha Tonbaklar. BITESCORE. is the service name, not a separate legal person.

Legal and privacy contact: legal@bitescore.co.

2. Data Collected During Account Creation

• Account and sign-in information: username, email address, a one-way protected record of your password or, if you choose Google/Apple sign-in, the account identifier and any display name supplied by that service. Email-verification status and a BITESCORE. account identifier are also kept. A profile photograph received from a sign-in service is not stored during ordinary registration.
• Verification information: a protected record of the email-verification code, its expiry and the number of attempts. An invitation code and its use are also processed if registration is by invitation. Verification codes are not stored in readable form.
• Declarations and acceptance records: your declaration that you are at least 18, the editions of the Terms of Use and Privacy Notice presented to you, the language used, presentation and acceptance dates, and information used to verify the integrity of these records.
• Security information: IP address, browser details, verification attempts, sign-in sessions and abuse-detection records needed to prevent unauthorised registration and protect your account.
• Ordinary account creation does not require a date or year of birth, identity document, postal address or telephone number.

3. Purposes And Legal Grounds

• Create and operate your account, enable sign-in, and provide the profile and community services you request: necessary to establish or perform the user agreement (KVKK Article 5/2-c).
• Verify your email and chosen sign-in method, check any invitation requirement, and prevent false, duplicate or unauthorised accounts and abuse: legitimate interests that do not override your fundamental rights and freedoms (KVKK Article 5/2-f).
• Keep limited records needed to demonstrate which notices you were shown and what you accepted: establishment, exercise or protection of a right (KVKK Article 5/2-e).
• Respond to lawful requests from competent authorities and keep records required by law: legal obligation (KVKK Article 5/2-ç).
• Optional usage analysis is not required to create an account. Collection for that purpose requires your separate explicit consent after you have been informed.

4. Collection, Recipients And Transfers

New accounts do not appear in search or the league. You can enable visibility separately on the Community Rules screen or in Settings. Published reviews are shown to other users with your username and profile picture, independently of search and league visibility. Your friend list and profile details initially appear only to you and accepted friends, following their own privacy settings.

If you separately enable search and league visibility, your username, profile picture, bio, level, community score and rank may be shown publicly in search, the league and limited profile identity views. Search engines may index this information and others may copy it. Email, sign-in information and private demographic details are not published. Social sign-in accounts do not appear in search or the league until username selection is complete.

Enable or disable search and league visibility separately on the Community Rules screen or in Settings. Friends and profile details follow a separate privacy setting. Existing accounts' disabled preferences are not enabled by this edition; previously enabled visibility is not disabled by this change. Turning visibility off does not prevent access to the core service or immediately remove previous third-party copies or search-engine caches.

Reviews and ratings are subject to moderation and publication requirements. Before submitting a review, you are informed that your published review will be shown to other users with your username and profile picture. Review visibility is independent of search and league visibility. Turning search and league visibility off does not hide published reviews or their username and profile-picture attribution. Content held for review or removed is not shown to other users. Lists and Clashes follow their own visibility settings. Do not share personal or sensitive information in public areas.

Visibility is separate from the 18+ membership declaration. Becoming eligible does not enable a disabled preference. Community visibility is processed to establish and perform the service (KVKK Article 5/2-c); optional usage analysis requires separate explicit consent.

Initial visibility is an account default, not a consent or visibility decision made by the member. Later changes record the account-linked enable/disable preference, decision identifier, language, version, full copy of the notice and its hash, presentation verification status, action channel (web or mobile) and decision time. This setting collects no date of birth, identity document, IP or device information. Limited preference evidence is retained to protect a right (KVKK Article 5/2-e) and removed on account deletion. Declarations from previous editions are not rewritten. The Privacy Notice explains service providers, transfer conditions and Article 11 rights.

Personal data is obtained electronically, wholly or partly by automated means, through registration and verification, security records, and Google or Apple only if you select that service.

Data may be shared only as necessary for the stated purposes with providers used to host the service, store data, deliver emails, support sign-in and maintain security; with professional advisers when needed; and with competent public authorities where legally required. Account-creation data is not sold.

Processing by a provider outside Türkiye is subject to the transfer conditions in KVKK Article 9. Providing this notice or accepting the Terms of Use does not, by itself, constitute explicit consent to an international transfer.

5. Retention And Account Deletion

• Account information is retained while your account is active. It is removed when you delete your account, subject to the limited legal, security and deletion-completion requirements explained in the Privacy Notice.
• Email-verification codes are valid for 10 minutes. Security and abuse-prevention records are kept only for the period justified by the relevant risk or legal obligation.
• After account deletion, limited evidence of the notices you were shown and your acceptance may be kept separately with IP and browser information removed. These records are subject to the legal-claims retention period in the Privacy Notice and cannot restore the deleted account.

6. Rights, Requests And Separate Choices

Under KVKK Article 11, you may ask whether your data is processed, request information or correction, request deletion or destruction where the legal conditions are met, ask that these actions be communicated to recipients, object to an adverse result based solely on automated analysis and seek compensation for damage caused by unlawful processing. Use the data-download and deletion options in account settings or contact legal@bitescore.co. Applications meeting the legal requirements are answered as soon as possible and within 30 days at the latest.

This is an information notice, not a request for explicit consent. The separate registration checkbox records the age declaration and acceptance of the Terms of Use. Search and league visibility starts off for new accounts; you can enable it separately on the Community Rules screen or in Settings. Optional usage analysis stays off unless you give separate explicit consent.

Your declaration that you are at least 18 is separate from consent. Optional data-processing choices are not selected in advance, and declining them does not prevent access to the core service.