Privacy notice

The data controller is Mehmet Karabacak, an individual based in Türkiye and operating Muzluk before a company is incorporated. Muzluk is a product and brand name, not a separate legal entity.

• Site delivery and security data: IP address, request time, requested URL, referrer, browser or user-agent information, and response or error metadata that may be processed in infrastructure logs.
• Help Center search data: the words you submit to the search endpoint, language, selected category, and the results needed to answer the request. Search words are not added to page URLs or analytics events.
• Aggregate site-use and performance data: page path without query strings, route, referrer, approximate country or region, device type, operating system, browser, and Core Web Vitals. Vercel Web Analytics uses no cookies and does not expose IP addresses or persistent cross-site identifiers to us.
• Optional analytics data: after consent, article views and CTA clicks, together with locale, article slug, category or intent, an automatically generated anonymous identifier, and ordinary device, browser, URL, and network metadata supplied by PostHog.
• Preference data: your analytics choice is stored in your browser under the local-storage key “muzluk-analytics-consent”.

• We process delivery, security, and short-lived search data to provide the site, return requested results, prevent abuse, diagnose failures, and protect the service. The basis is our legitimate interest in operating a secure public Help Center, subject to your rights (KVKK Article 5(2)(f) and, where applicable, GDPR Article 6(1)(f)).
• We use Vercel Web Analytics and Speed Insights to count aggregate visits and measure page performance without cookies or persistent identifiers. To the extent this processing falls within data-protection law, the basis is our legitimate interest in understanding and improving this public site, subject to your rights (KVKK Article 5(2)(f) and, where applicable, GDPR Article 6(1)(f)).
• We use PostHog analytics only after affirmative consent (KVKK Article 5(1) and, where applicable, GDPR Article 6(1)(a)). Refusing analytics does not limit the site. You may withdraw consent at any time below.
• We may retain limited records where necessary to establish, exercise, or defend legal claims or comply with a binding legal obligation.

Vercel analytics is limited to automatic aggregate page views and Core Web Vitals. Query strings are removed before an event is sent, and we do not send search text or custom events. Vercel's daily visitor identifier expires after 24 hours and cannot follow a visitor across days or websites. Optional PostHog remains consent-gated; autocapture, automatic page views, session recording, surveys, experiments, performance capture, and person profiles are disabled. We do not identify you by name or email, sell personal data, use behavioural advertising, or make decisions with legal or similarly significant effects.

Data may be processed by Vercel for hosting, security, aggregate Web Analytics and Speed Insights; PostHog for consented optional analytics; and Sanity for published Help Center content and search. We may also disclose limited data to professional advisers or public authorities when legally required. These providers may process data outside Türkiye or your country. Where transfer rules apply, we use an applicable lawful transfer mechanism and contractual safeguards before enabling that processing.

• Search words are processed to answer the request and are not intentionally stored by the Help Center application.
• Infrastructure logs are normally retained for no more than 30 days, unless a security incident or legal duty requires longer retention.
• Vercel discards its daily visitor identifier after 24 hours. On our current plan, aggregate Web Analytics reports are available to us for up to one month and Speed Insights reports for up to seven days.
• Consented analytics events are retained for no more than 12 months and are then deleted or aggregated.
• Your browser keeps the consent preference until you change it or clear site storage.

Depending on where you live, you may ask whether we process your data and request access, information, correction, deletion or restriction; object to processing; withdraw consent; request portability where applicable; and complain to the Turkish Personal Data Protection Authority or your local supervisory authority. We may need to verify your identity. KVKK requests are answered as soon as possible and no later than 30 days, subject to applicable law.

We use proportionate technical and organisational safeguards, but no internet service is completely secure. Links to other sites are governed by their own notices. We will update the effective date and publish material changes here before they take effect where required.