Privacy Policy

1. Controller

Todayswall, Istanbul, Türkiye, is the data controller (veri sorumlusu). Contact: [email protected].

2. What we collect

Your note: its text, the optional “for” and signature fields, the handwriting and ink you chose, and the spot you picked.

Context of writing: the time, the time zone your browser reports, and the local date where you were when you wrote. This is what lets us show every time in the reader’s own time zone.

Your email address, so we can send the link to your note and the receipt.

Technical data: a session identifier stored in a cookie so a held spot stays yours, and a one-way hash of your IP address used to limit abuse. We do not store raw IP addresses in the note record.

Payment data: handled by our payment provider. We receive only a payment reference and status, never card details.

If you report a note: the reason, your optional message and your optional email address.

3. Why we use it, and on what basis

To provide the service you asked for — writing, displaying and archiving your note (performance of a contract).

To keep the wall safe and lawful — content checks, reports, limits and anti-abuse measures (legitimate interest and legal obligation).

To send you the messages the service requires — note link, receipt, opening alerts if you asked for them (contract and consent).

4. Automated content checks

Before a note is published, its text is checked by an automated system and may be sent to an AI provider for that check. The check decides whether the note can be published; it does not create a profile about you and has no other effect on you.

If a note is rejected you can edit it and try again, and you can always reach a person at [email protected].

5. Who processes data for us

Hosting and database, email delivery, payment processing, bot protection and the AI provider used for content checks. Each acts on our instructions under a data processing agreement.

Some of these providers operate outside Türkiye and the EEA. Transfers rely on standard contractual clauses or equivalent safeguards.

6. How long we keep it

Published notes are part of a permanent public archive and are kept indefinitely. This is the core of the service and you should assume a note cannot be taken back.

Removed notes are not displayed, but the record is retained so the decision can be audited and reversed and so we can meet legal obligations.

Email addresses connected to a note are kept while the note exists. Alert subscriptions are deleted when you unsubscribe.

7. Your rights

You can ask for access to your data, correction, deletion, restriction, objection, and a copy in a portable format.

Deletion has limits: a note that is part of the public archive, and the records we must keep for legal and accounting reasons, may not be erasable. We will tell you clearly which parts we can and cannot delete.

If a note is about you and you did not agree to it, use the report form on that note and choose “About me”, or write to [email protected]. These requests are handled in a separate queue.

You may complain to your supervisory authority; in Türkiye this is the Personal Data Protection Authority (KVKK).

8. Cookies

We use one cookie, to keep a held spot attached to your browser session. We do not use advertising or cross-site tracking cookies.

9. Children

The service is not intended for children. If you believe a child has written a note, write to [email protected] and we will remove it.

10. Changes

We will post any change here and update the date above. Material changes will be announced on the site.