Legal documents

This document explains how Helmari collects, uses, and protects your personal data. Under KVKK Article 10, Helmari is the data controller.

1. Data we collect

Email (required), username, display name, birth date (age verification), avatar (optional), messages you send, files you share, session data (IP, user agent).

2. Purposes

Service provision, KVKK Article 4 legal obligations, account security, fraud + abuse detection.

3. Sharing + transfers

We do not sell your data. We may share with authorities on legal demand (court order, prosecutor request). Infrastructure providers (Cloudflare, Neon, Hetzner) are bound by data-processing agreements.

4. Retention

Retained while your account is active. After a deletion request, anonymised 30 days later; audit records (moderator actions) retained 90 days.

5. Your rights

Under KVKK Article 11 you can access, rectify, delete, or restrict the processing of your data. Use /settings/privacy to request a data export, freeze your account, or delete it.

Contact

Data Controller: Helmari · Contact: [email protected]