Privacy Policy

1Who is responsible

The controller of your personal data (the “veri sorumlusu” under Turkey's Personal Data Protection Law no. 6698, “KVKK”) is Mert Yacan, a sole proprietor in Turkey, trading as Soolloo Labs, who runs Daancee. For anything about your data, write to [email protected].

This policy also serves as the information notice required by KVKK article 10 and by articles 13 and 14 of the EU and UK General Data Protection Regulation (“GDPR”).

2When you visit the site

Every visit passes through Cloudflare, which protects and speeds up the site. To deliver a page, Cloudflare and our server handle your IP address, your browser's details, the address you asked for and the time. We use them only to serve the site, keep it secure and stop abuse:

• Our server counts requests per IP address and per browser session in its memory to enforce limits, and forgets them within a day.
• To show the map's details, your browser earns a short-lived signed token (a “map session”); we do not store it, and it expires within half an hour.
• When a browser looks automated, Cloudflare Turnstile may check it. Turnstile receives signals about your browser and device, under Cloudflare's privacy policy.
• Technical logs, which can contain IP addresses, are kept briefly for security and troubleshooting and then deleted.

Today we use no analytics, advertising or tracking tools, and we do not build profiles of visitors.

3Your location

On the home page, the map can open near you. For that, Cloudflare tells our server the approximate area of your internet connection (roughly a city). We use it once to answer that request and do not store it.

If you press “Near me”, your browser asks for your permission before sharing your position. That position stays in your browser: it is used there to move the map and is never sent to us.

4Accounts

If you make an account, we keep your email address, your password (stored only as a secure hash by our sign-in provider, Supabase, so nobody can read it), when the account was made and when you last signed in. We use them to give you the account, sign you in, and send you the emails it needs: confirming your address and resetting your password. These emails are sent through Microsoft Azure Communication Services.

While you are signed in, your sign-in keys are kept in your own browser's storage, not in a cookie. We do not send marketing emails.

5Asking for your city

When you send a tip through “Ask for your city”, we keep the city and country you typed, any details you add, the site language, the page you were on, and, when you were on the map, the centre of the part of the map you were looking at (where you looked, not where you are). We do not attach your account, your IP address or any other identifier to it.

We read tips to decide where to look for nights. Please do not put personal details in a tip. We delete a tip within 12 months after we have dealt with it.

6Organisers, venues, DJs and teachers

Our listings come from publicly available information. A listing can name a person, for example an organiser, a DJ or a teacher, and link to their public social pages.

We use this information to tell dancers what is on, which is our legitimate interest and theirs. To keep listings accurate, we also keep private notes about nights that only we can see.

If you are named in a listing, you can ask us to correct or remove it, or to remove your name, at [email protected]. We do so without asking for a reason.

7Storage in your browser and cookies

Daancee sets no cookies of its own. It keeps a few things in your browser's storage, only for the site to work:

• the language you chose (“daancee.lang”), so the site opens in it next time;
• your map session for the open tab, until you close it;
• your sign-in keys, only if you sign in (“daancee-access-token”, “daancee-refresh-token”, “daancee-expires-at”), until you sign out.

Cloudflare may set strictly necessary security cookies to tell people from bots. Because nothing we store is optional or used for tracking, the site does not ask for cookie consent. If that changes, we will ask you first. You can clear this storage at any time in your browser's settings.

8Who else handles data

We share personal data only with the providers that run Daancee for us, each only for its part of the service, or when the law requires it:

• Cloudflare: delivery, security and the bot check (all visits).
• Supabase: accounts and sign-in, hosted in the European Union (Ireland).
• MongoDB: our database, which holds the listings and tips.
• Microsoft Azure Communication Services: account emails.
• The provider of our server, which runs the site behind Cloudflare.
• Service providers that help us prepare and check listings: public information about nights and the tips we act on.

We never sell, rent or trade personal data, and we do not share it for advertising.

9Why we may use your data

Under the GDPR and KVKK, we rely on:

• providing a service you asked for (GDPR article 6(1)(b), KVKK article 5(2)(c)), for accounts and their emails;
• our legitimate interests (GDPR article 6(1)(f), KVKK article 5(2)(f)), for delivering and protecting the site, handling tips, and publishing and checking listings drawn from public sources;
• data that the person concerned has made public (KVKK article 5(2)(d)), for listings;
• legal obligations (GDPR article 6(1)(c), KVKK article 5(2)(ç)), when the law requires us to keep or disclose something.

You can object to any use based on legitimate interests (see part 12).

10Data outside your country

Our providers work in several countries, including the European Union and the United States, so your data may be handled outside the country where you live, including outside Turkey. Where the law requires it, these transfers are covered by appropriate safeguards, such as standard contractual clauses, under GDPR chapter V and KVKK article 9.

11How long we keep it

• Accounts: until you delete the account or ask us to; then removed within 30 days.
• Tips: up to 12 months after we have dealt with them.
• Listings: while they are useful to dancers. Past nights may stay reachable at their address for a while, but are not sent to search engines.
• Private notes about nights: until they are no longer needed for accurate listings.
• Request counts in memory: about a day. Technical logs: briefly, for security and troubleshooting.

We may keep something longer only when the law requires it or to deal with a legal claim.

12Your rights

Wherever you live, you can ask us to tell you whether we hold personal data about you and show it to you, correct it, delete it, limit how we use it, or give it to you in a portable form, and you can object to our using it. Under KVKK article 11 you can also learn the purpose of the processing and whether it is used for that purpose, learn to whom it is transferred in Turkey or abroad, ask that corrections and deletions be passed on to them, object to a result reached solely by automated analysis that goes against you, and claim compensation for damage caused by unlawful processing.

Write to [email protected]. We may ask you to confirm who you are, and we answer free of charge within 30 days. If you are not satisfied, you can complain to Turkey's Personal Data Protection Authority (KVKK) or to the data protection authority where you live.

13Children

Daancee is meant for adults. Accounts are for people aged 18 and over, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will delete it.

14Security

We protect data with encrypted connections, a server that is reachable only through Cloudflare, limited access for the admin alone, and providers that take security seriously. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

15Ads and paid listings, later

We plan to offer organisers paid services, such as featured listings, and may show advertising. Neither has started. Before either does, we will update this policy to say what data is involved and which providers handle it, and where the law requires it (for example, for personalised ads or cookies that are not strictly necessary) we will ask for your consent first; you can say no and still use the site. Payments would be handled by a payment provider, and we would not see or store your full card details.

16Changes and contact

We update this policy when what we do changes. The date at the top shows the latest version, and we tell account holders about important changes by email before they take effect.

This policy is written in English and translated for convenience; if a translation differs, the English text applies.

Questions or requests about your data: [email protected].