Privacy
policy

This is the English version. The binding Turkish text, written under Turkish data protection law (KVKK), is at ibrahimakkaya.com/gizlilik. Where the two differ, the Turkish text governs.

Who is responsible

İbrahim Akkaya · Bodrum, Muğla, Türkiye. Contact: [email protected]

What we collect

• Phone number — only if you submit a form. Used to verify you with a one-time SMS code and to reach you about what you wrote.
• What you write in a form — your name, and optionally your company, your role and your message.
• Access records — sign-in attempts, sign-in and sign-out times, and refused attempts.
• Page activity — which pages you viewed, time on page, scroll depth, and outbound links you clicked.
• Coarse technical data — device class (mobile, tablet or desktop) and browser family, country, and the domain you arrived from.

What we do not collect

We do not store your full browser identifier (user-agent), the full address of external pages you visit, or any fingerprinting data beyond the cookies listed below.

Your IP address does not enter our records. The single exception: on form and sign-in screens it is held as a temporary counter for at most 24 hours to prevent abuse, then deleted automatically.

See Meta pixel below: that measurement necessarily delivers your IP address to Meta's servers. We neither see nor keep it.

Cookies

• ia_sess — session cookie. Created when you sign in, signed, valid one year.
• ia_zid — visitor cookie. Gives your browser a random identifier, valid two years. Used only for this site's own analytics; there is no advertising use and no sharing with third parties.
• ia_gclid — set only if you arrive from one of our own search ads. It stores the click identifier the ad platform put in the address, valid 90 days, so we can tell which ad led to a form submission. This is our own cookie and it is HttpOnly.
• _fbp and other cookies set by Meta — see Meta pixel below. These are third-party cookies, governed by Meta's rules, not ours.
• _gcl_* and other cookies set by Google — see Google Ads tag below. Also third-party cookies, governed by Google's rules.

The first three are HttpOnly: scripts on the page cannot read them. Meta's and Google's cookies are not, because those companies' own scripts read them.

Meta pixel

Since 9 September 2026 this site runs the Meta pixel, used to measure whether our social media advertising works.

When it runs, the following is sent to Meta: your IP address, browser information, which page you opened, and the identifier in Meta's own cookie. If you submit a form, a "a form was submitted" signal is also sent.

If you enter a name, phone number or email address in a form, those values are also sent to Meta in hashed form. Meta uses them to match the person who saw an ad with the person who filled in the form; this is called "automatic advanced matching".

Hashing is one-way: Meta receives a fingerprint derived from your number, not the number itself. The content of your message is not sent — that stays on our server.

Meta's measurement code runs when you open the site. If you do not want it, turn it off with the button below; once turned off Meta's code never runs and nothing is sent. (The Turkish version of this page was corrected on 10 September 2026 when this changed; this English sentence was left behind and said the opposite until 14 September 2026.)

Meta is based outside Türkiye, so this measurement constitutes a transfer of personal data abroad (KVKK art. 9), on the basis of your consent. If you would rather not take part, use your browser's tracking protection or the advertising controls in Meta's privacy policy. Nothing on this site stops working if you do.

Google Ads tag

This site runs the Google Ads tag (gtag.js), used to measure whether our search advertising works and to reach people who have already seen an ad.

When it runs, the following is sent to Google: your IP address, browser information, which page you opened, and the identifier in Google's own cookie. In addition, a conversion signal is sent if you do one of three things: verify your phone number with an SMS code, click a WhatsApp link, or click a phone number.

Your name, your number and the content of your message are not sent to Google. What leaves is the fact that an action happened; there is no hashed matching as with Meta.

Separately, if you arrived from an ad, we later report your click identifier (ia_gclid) to Google from our own server as an offline conversion: the click identifier and a timestamp are sent, saying which ad click led to a sign-up. No identifying information is included.

Google's measurement code also runs when you open the site. Turning measurement off with the button below stops both: neither Meta's nor Google's script is loaded.

Google is based outside Türkiye, so this too constitutes a transfer of personal data abroad (KVKK art. 9). You can also use your browser's tracking protection or your Google ad settings. Nothing on this site stops working if you do.

Apart from the Meta pixel and this Google Ads tag, no other analytics or advertising tag is loaded: no Google Analytics, no other social tracker. Everything else is measured by our own server.

What this button covers. Your choice applies to ibrahimakkaya.com and all of its sub-addresses (bodto., bodtoyakatil., formudoldur.) — pressing it once is enough for those. ibrahimakkaya.com.tr is a separate domain as far as your browser is concerned, so the choice there is kept separately. To stop measurement there too, press the same button once at ibrahimakkaya.com.tr/privacy. We cannot merge the two: browsers do not let one domain read another domain's stored choice.

Why we process it, and on what basis

Data is processed to control access to a closed site and to improve the content. Access records and page activity rest on our legitimate interest in running an invitation-only site (KVKK art. 5/2-f).

Explicit consent is required for the participation form. The consent box arrives unticked; until you tick it, nothing is processed and no SMS is sent. The time of your consent is recorded.

Sharing

We use what you give us to evaluate your request and to contact you about the election campaign — by SMS, email or phone. That may include announcements, invitations and promotional messages.

You can stop this at any time. Saying "no thanks" is enough; you do not have to give a reason. Write one line to the address below, or use the opt-out in any message you receive. We act on it immediately.

Your data is never sold, rented or handed to a third party, and never to a political party or any other institution. We use two providers that process data on our behalf: our hosting provider, and an SMS provider for the one-time code. Neither uses your data for its own purposes.

Separately, the Meta pixel receives the technical data listed in that section, plus your name, phone number and email address in hashed form if you typed them into a form. It does not receive the content of your message.

Social media accounts

If you interact with our accounts on Instagram, Facebook or other platforms, that platform's own privacy policy applies to what it collects. We read audience statistics for the accounts we own, and we do not match social media activity to visitors of this site.

Instagram messages and comments

If you write to @ibrahimakkaya_bodrum or leave a comment on its posts, we process that message so we can read and answer it. We use Meta's official Instagram API for this.

What we process: the text of your message or comment, your Instagram username, your display name where Instagram provides it, and the time it was sent.

The purpose is only to reply to you. Replies are read and approved by a human before they are sent; no system answers on its own. Your message is not used for ad targeting, is not sold, and is not shared with third parties.

We have no access to your messages unless you write to us. Instagram only exposes conversations that reach this account; we cannot see your other conversations, your following list, or your profile history.

Retention: at most twelve months after the exchange ends. To have it deleted sooner, see Deleting your data.

We cannot delete what Instagram itself stores on its own servers — that is Meta's system. You can delete messages on your side in the Instagram app, and request your account data from the Meta Accounts Centre.

How long we keep it

Activity records are kept at most one year and expire automatically. Participation records are kept for one year after the election concludes, then deleted. If someone is removed from the access list, their records are deleted on request.

Your rights

Under KVKK art. 11 you may ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to [email protected]. You do not need to give a reason to withdraw your record, and we will not ask for one.

Changes

If this policy changes materially, the change will be published on this page. Continued use after that means the updated policy applies.

Terms of Service · Türkçe aydınlatma metni