Privacy Notice

Who is responsible

link.piyanos.com is operated by Piyanos Technology, which acts as data controller under Turkish data protection law (KVKK, Law No. 6698). Address: Evliya Çelebi Mah. Sadi Konuralp Cad., Beyoğlu, İstanbul, Türkiye.

Data we process

When you create an account and use the service, the following is processed:

• Account details: your username, email address, and an irreversible bcrypt hash of your password. The password itself is never stored.
• Profile content: your display title, bio, profile picture, the links you add with their titles, order and scheduling, and your page design settings.
• If you sign in with Google: the name and email address Google passes to us.
• Visitor statistics: page views and link clicks, each with a timestamp, the visitor device type (desktop or mobile), operating system name, browser name, and the referring address.

What we do not collect

Visitor statistics do not record IP addresses. There are no third-party advertising or profiling cookies. No location data is collected. Because the service is free, no payment or card details are ever processed.

Purposes and legal basis

Account details are processed to create and secure your account and to handle password resets — necessary for performance of the contract (KVKK art. 5/2-c).

Profile content is processed at your own request, for the express purpose of publishing it on a public page.

Visitor statistics are processed on the basis of legitimate interest (KVKK art. 5/2-f), so that we can show you how your page is performing.

Your profile is public

Your page at link.piyanos.com/yourusername is open to the internet and may be indexed by search engines. The title, bio, picture and links you publish there are visible to anyone. Do not put anything on your profile that you would not want to be public.

Transfers and third parties

Your data is not sold or rented for marketing. The service relies on these third parties:

• Hosting: our servers run on Hetzner infrastructure in Finland, so your data is hosted outside Türkiye.
• Database: MongoDB Atlas.
• Sign in with Google: only if you choose that method, authentication data is exchanged with Google.
• Google Fonts: typefaces on our pages load from Google servers, so the visitor IP address reaches Google as part of that request.
• Email: password reset messages are sent through an email service provider.

How long we keep it

Account and profile data is kept for as long as your account exists. When you delete your account, your profile and links are taken offline and deleted. Visitor statistics are tied to your account and are deleted with it.

Cookies and browser storage

A session key (auth-token) and your language preference are stored in your browser localStorage to keep you signed in. Neither is used for advertising or tracking, and both disappear when you clear your browser data.

Your rights

Under article 11 of the KVKK you may ask whether your personal data is processed and request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties it is transferred to inside or outside Türkiye, request correction of incomplete or inaccurate data, request erasure or destruction, ask that these actions be notified to third parties the data was transferred to, object to an adverse outcome produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.

You can correct your profile details and links from your account settings, or delete your account, at any time.

Making a request

Requests relating to the rights above can be sent to the data controller through the channel below and will be answered within thirty days at the latest.

Changes

This notice may be updated. The current version is always published on this page and the date above is revised.