Privacy Policy

This page explains how the applycas.com website handles visitors’ data. Each app’s privacy policy is published separately on that app’s own page and is independent of this one.

Two further notices follow at the end of this page: a KVKK notice for people in Türkiye, and a GDPR notice for people in the European Economic Area and the United Kingdom.

In short

This site does not use cookies.
There are no advertising or tracking tools; you are not tracked across sites.
We measure which pages are visited and how fast they load with cookieless tools; details below.
The site has no forms; you can reach us only by email.

What happens when you view the site

Hosting. The site is hosted on Vercel’s infrastructure. When you view a page, the hosting provider may process technical data such as your IP address and browser information in its server logs, in order to serve the site to you. We do not use these logs for analysis.

Fonts. The site serves the Inter typeface from our own server; your browser does not connect to Google or any other third party for fonts. The site loads no third-party resources.

Visit statistics and page speed

We use Vercel Web Analytics to see which pages are visited. This counter uses no cookies and stores nothing in your browser. Visitors are distinguished by a hash derived from the incoming request, which expires after twenty-four hours; it does not identify you and cannot be used to follow you across other sites.

The following is recorded with each page view: timestamp, page address, referring address, filtered query parameters, location at country/region/city level, operating system, browser and device type. Your IP address is not stored with the data points. The data is shown only as aggregate statistics, is never used for advertising and is not shared with third parties.

To see how fast pages load, we also use Vercel Speed Insights. It reads page speed values (Web Vitals) from your browser’s built-in measurement interfaces and sends them to Vercel on each page load. The following is recorded with each measurement: page route and address, network speed class (e.g. 4g), browser, device type, operating system, country, the measured value, which page element the value relates to, the time the measurement reached the server, and the script version. According to Vercel’s documentation, this data is not tied to any individual visitor or IP address, and no information is collected or stored that would allow a browsing session to be reconstructed across pages or a user to be identified. These measurements are also viewed only as aggregate results, are never used for advertising and are not shared with third parties.

Both scripts are served from our own domain and create no cookies or other stored entries in your browser; your browser connects to no other site for them.

When you email us

When you write to support@applycas.com, your email address, your name (if you give it) and the content of your message are processed to answer your request. Emails reach our mailbox through our domain’s email forwarding service (Cloudflare); the mailbox is on Google’s Gmail service, and our replies are sent through it as well. Your correspondence is therefore also processed by Google. We do not use your correspondence for marketing and we do not share it with third parties other than the service providers named above.

Automated decision-making

No profile is built about you and no decision based solely on automated processing is taken that produces legal effects concerning you. Visit statistics are aggregate counts; no assessment is made about individual visitors.

Our apps

What each app collects (or does not collect) is written in that app’s privacy policy, in the same form as its store declaration. Once we have published an app, you will be able to reach its policy from the app list on the home page.

Children’s data

This site is not directed at children and we do not knowingly collect personal data from children through it. Age ratings for the apps are shown on their store pages.

Changes

If we change this policy, we will update the date and publish the new text on this page.

KVKK Notice

Under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”), we inform you about how your personal data is processed. This section is for people located in Türkiye.

Data controller. Oktay Tanrıkulu (Applycas). Address: Bağlar Mah., 46. Sokak No: 22, Flat 8, Bağcılar/Istanbul, Türkiye. Contact: support@applycas.com.

Personal data processed. When you email us: your email address, your name (if you give it), the content of your message and any information you attach. When you visit the website: technical data such as your IP address and browser information in the hosting infrastructure’s server logs; and, for visit statistics, the page address, referring address, location at country/region/city level, operating system, browser and device type; and, for page speed measurements, the page route and address, network speed class, browser, device type, operating system, country and the measured value. We do not process special categories of personal data.

Purpose of processing. Answering your support requests and messages, fixing problems in the apps, keeping the site running securely, measuring in aggregate which pages draw interest and how fast pages load, and meeting legal obligations.

Legal basis. KVKK Art. 5/2(f) (the controller’s legitimate interests, provided they do not harm your fundamental rights and freedoms) and Art. 5/2(ç) (the controller’s compliance with a legal obligation).

Method of collection. By email, and automatically through the website’s hosting infrastructure.

Transfers. To the extent necessary to provide the service, your personal data is processed by our hosting, visit statistics and page speed measurement provider Vercel Inc. (USA) our email forwarding provider Cloudflare, Inc. (USA) and Google LLC (USA), which hosts our mailbox, and to that extent is transferred abroad. Data processing agreements under KVKK Art. 12 are in place with Vercel and Cloudflare. Google’s Gmail service is used under Google’s standard terms of service and privacy policy for account holders. As the Personal Data Protection Board has issued no adequacy decision for these countries, the transfer is made under paragraph six of KVKK Art. 9, on an incidental basis and only to the extent strictly necessary for the technical performance of the operation you initiated — delivering the email you sent us and our reply to you, serving the page you asked to view. Your data is not transferred to any other third party and is not sold.

Automated decision-making. No profile is built about you and no decision against you is produced by automated analysis. Visit statistics and page speed measurements are viewed only as aggregate results.

Your rights. Under Article 11 of the KVKK, you may apply to the data controller to:

Learn whether your personal data is processed,
Request information if it has been processed,
Learn the purpose of processing and whether it is used accordingly,
Know the third parties to whom it is transferred, in Türkiye or abroad,
Request correction if it is incomplete or inaccurate,
Request deletion or destruction under the conditions set out in the law,
Request that corrections, deletions and destruction be notified to third parties to whom the data was transferred,
Object to a result against you that arises from analysis of the data by automated systems,
Request compensation for damage arising from unlawful processing.

How to apply. Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you may apply: in writing with a wet signature to the address above; by email to support@applycas.com using a secure electronic signature or mobile signature; or by a message sent to support@applycas.com from an email address you have previously notified to us and which is registered in our system. Your application should state your name and surname, your signature (for written applications), your Turkish ID number (for foreign nationals, your nationality and passport number), your address for service, your email address and phone number if any, and the subject of your request.

Time limit and cost. Your application is concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. If the request requires an additional cost, the fee set out in the Board’s tariff may be charged.

Complaints. If your application is rejected, our reply is insufficient, or we do not reply within thirty days, you may complain to the Personal Data Protection Board within thirty days of learning of our reply and in any event within sixty days of the date of your application.

This section explains your rights under the General Data Protection Regulation (GDPR) and the UK GDPR if you are located in the European Economic Area (EEA) or the United Kingdom.

Controller. Oktay Tanrıkulu (Applycas), Bağlar Mah., 46. Sokak No: 22, Flat 8, Bağcılar/Istanbul, Türkiye. Contact: support@applycas.com. Given the scope of our processing, we are not required to appoint a Data Protection Officer.

EU representative. We have no establishment in the EEA. Because the processing described here is occasional, limited in scope and involves no special categories of data, we have not appointed a representative, relying on the exemption in Article 27(2)(a) GDPR. We will reassess this if our processing changes.

Data, purposes and legal bases.

Email correspondence (your email address, your name, the content of your message and any attachments) — to answer your support request. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in responding to requests addressed to us; where the request concerns performance of an app contract, Art. 6(1)(b).
Server logs (IP address, browser information) — to serve the page you asked for and keep the infrastructure secure. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in keeping the site running and secure.
Visit statistics (page address, referring address, location at country/region/city level, operating system, browser, device type; cookieless, using a hash that expires after twenty-four hours) — to measure in aggregate which pages draw interest. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in understanding whether the site is useful. Because the counter creates no cookie or other stored entry in your browser, no consent is required under Art. 5(3) of the ePrivacy Directive.
Page speed measurements (page route and address, network speed class, browser, device type, operating system, country, the measured page speed value and the page element it relates to) — to see whether pages load fast enough and to fix slowdowns. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in keeping the site usable and fast.
Legal obligations — Legal basis: Art. 6(1)(c) GDPR.

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms; the data processed is minimal and is never used for marketing.

Recipients. Vercel Inc. (hosting, visit statistics and page speed measurement) Cloudflare, Inc. (email forwarding) and Google LLC (the Gmail service that hosts our mailbox). Vercel and Cloudflare act as our processors under Art. 28 GDPR and process data only on our instructions. Google’s Gmail service is used under Google’s standard terms of service and privacy policy for account holders. There are no other recipients; your data is not sold and not shared for advertising.

International transfers. These providers (including Google) process data in the United States. Transfers rely on the European Commission’s Standard Contractual Clauses included in Vercel’s and Cloudflare’s data processing agreements and, where the provider is certified, on the EU–US Data Privacy Framework. You can request a copy of the safeguards in place by writing to support@applycas.com.

Retention. Correspondence is kept for no more than twenty-four months after your request is resolved, and, where a legal dispute is possible, for the applicable limitation period. Server logs are kept for a short period under the hosting provider’s own retention policy. In visit statistics the hash that distinguishes a visitor expires after twenty-four hours; what remains is aggregate counts that cannot be linked to anyone. Page speed measurements are kept under Vercel’s own retention policy.

Your rights. Under Arts. 15–22 GDPR you have the right to access your data, to have it rectified, to have it erased, to restrict its processing, to receive it in a portable format, and to object at any time to processing based on legitimate interests. Our processing is not based on consent, so there is no consent to withdraw.

Automated decision-making. We carry out no decision-making based solely on automated processing, and no profiling, within the meaning of Art. 22 GDPR. Visit statistics and page speed measurements are aggregate results.

Do you have to provide data? You need to provide nothing to browse the site. The information you share when emailing us is used only so that we can reply; without it we may not be able to answer your request.

Right to complain. You may lodge a complaint with the data protection authority of your EEA member state. In the United Kingdom the competent authority is the Information Commissioner’s Office (ico.org.uk). If you contact us first, we will do our best to resolve the matter.