Этот документ доступен на турецком и английском языках. Ниже приведена английская версия; при расхождениях действует турецкий текст.
1. Who is responsible
This notice explains how personal data of people using yayindunyamiz.com.tr (the "site") is processed under Türkiye's Personal Data Protection Law No. 6698 ("KVKK") and, for visitors from the European Union, the GDPR. The Turkish version prevails.
Data controller: the private individual who owns the Yayın Dünyamız brand. Contact: [email protected]. Identity details are disclosed on request to a person exercising their data protection rights and to competent authorities.
Yayın Dünyamız is a volunteer-run SCP: Secret Laboratory community playing since 2018. The site shows no ads and uses no advertising or tracking cookies.
2. What we process, why and on what legal basis
- Sign-in with Discord. You sign in with your Discord account to send and follow forms. With the only permission you approve (identify), Discord gives us your Discord ID, username, display name, avatar, banner and profile colour. Your email address and password never reach us from Discord. The access token is not stored and is revoked right after reading. Your avatar and banner are loaded directly from Discord's servers (cdn.discordapp.com) when shown, which passes your IP address to Discord. Purpose: signing you in and linking your forms to you. Legal basis: performance of a contract and legitimate interest.
- Discord servers. We do not check whether you are on our Discord server, and no data from the Yayın Dünyamız server or any other server (nickname, roles, join date, server list) is received. Such data stored earlier has been deleted. Actions such as giving you a role on Discord when a form is accepted are done by the bot on our Discord server.
- Forms. The answers in the forms you send (whitelist application, Discord, modded and roleplay staff applications, ban appeal, streamer application) are processed together with your Discord account. Staff and streamer forms also ask for your email address so we can get back to you about your application; the streamer form asks your name and age. The "IC" (in character) questions of the whitelist form are about the fictional character you will play; do not enter your real name, health details or real criminal record there. The forms never ask for ID numbers, phone numbers, addresses or special categories of data such as health, religion or political opinion; do not enter such information in any answer. Purpose: reviewing the application, showing the result on My forms and contacting you when needed. Legal basis: performance of a contract and legitimate interest. Your email address is never used for advertising or newsletters.
- Who reads the forms. Forms are read by community management and the volunteer staff they authorise. Staff only see the forms opened to them, are bound by confidentiality and may not use the data for anything other than reviewing the application or share it with anyone.
- Decisions and Discord roles. If your application is accepted, you are invited to an interview. The site then passes your Discord ID and the form group (staff, whitelist, streamer, ban appeal) to the bot on our Discord server, which gives the role the management chose for that group (e.g. "New staff candidate"). Legal basis: performance of a contract.
- Whitelist and game servers. If your whitelist application is accepted, you are invited to an interview; if you pass it, the Steam ID you entered is added to the whitelist, which our whitelisted roleplay server checks when you join. If you enter a Steam username instead of a profile link, Steam's public profile page is queried to find your Steam ID. Our game servers only report the server name and the current player count to the site; no player names or IDs are sent.
- Coins and levels. The coin and level system is run by the bot on our Discord server. Its sections on the site (Market, Leaderboard, My account) are currently closed: while they are closed, your coin balance, level, inventory, leaderboard position and market orders are not stored on the site, and such data transferred earlier has been deleted. The bot only sends the market item list to the site; it contains no personal data and can be edited in the management panel. If these sections reopen, this notice will be updated before they do.
- Security logs. When you open the site, your IP address, browser details and request time are processed by Cloudflare. For rate limiting we keep only an irreversible hash of your IP address for at most 24 hours. Actions by managers and form readers (for example which application was decided and who was given access) are logged. Legal basis: legitimate interest.
- Visit statistics (only with your permission). Cloudflare Web Analytics counts page views anonymously, without cookies or personal profiles. Legal basis: consent, which you can withdraw at any time in the cookie settings.
- Guide videos and social media. The guide videos are played from the site itself; no data is sent to third parties to watch them. Links to Discord, YouTube, Instagram and similar platforms take you to those services, where their own privacy policies apply.
- Email. If you email us, your address and message are used to reply and are deleted no later than 2 years after the matter is closed.
- Form log (Discord log channel). New applications, reviews, acceptance and interview, interview results and rejections are written by our bot to a log channel on our Discord server that only staff can see. An entry contains the form name, the applicant's Discord account, the event and the staff member who made the decision; your answers and staff notes are not included. Admin panel sign-ins and permission or setting changes are written to the site's activity log, and, if the management chooses, to a Discord channel only staff can see. Purpose: letting staff follow the work and spotting misuse. Legal basis: legitimate interest. Entries are deleted after 1 year.
- Staff. If you are staff on our Discord server, our bot sends the site your Discord ID, name, staff area and rank, your staff points (with code, reason and expiry date) and the average of your support ratings (who rated you is not sent). Purpose: letting you into the admin panel and showing the staff list to staff. Your point count is visible to all staff; the reasons and your support rating only to you and the managers. Each update from the bot replaces the previous list; if you leave the staff, your data is removed too. Your actions in the admin panel (decisions, permission and setting changes) are written to the activity log kept for 1 year. Legal basis: legitimate interest.
3. How long we keep data
| Data | Deleted |
|---|---|
| Discord account details | 12 months after your last sign-in, or when you delete your account on My forms |
| Discord server data (nickname, roles, server list) | Not received; data stored earlier was deleted |
| Form answers (including email) | Decided forms 90 days after the decision, undecided ones 180 days after sending |
| Whitelist entry (Steam ID) | While you stay on the whitelist; immediately when the staff remove it or you delete your account |
| Coin, level, inventory and market orders | Not stored while the coin system is closed on the site |
| Earlier coin alerts and pause records (security) | 1 year after the record date |
| Session cookie | 30 days, or when you sign out |
| IP hash for rate limiting | At most 24 hours |
| Management activity log and form entries in the Discord log channel | 1 year |
| Staff list and points (from the bot) | Replaced on every bot update; removed when you leave the staff |
| Form tasks passed to the bot (roles and log) | 30 days after processing |
4. Who receives data
Your data is never sold or shared for advertising. It is only passed to the service providers we use to run the site: Cloudflare, Inc. (hosting, database, security, statistics and automatic translation of admin texts; no personal data is sent for translation) and Discord Inc. (sign-in, Discord roles and the staff log channel; your answers are never sent to Discord). If you enter a Steam username, only that name is looked up on Valve Corporation's public profile page.
These providers may store data outside Türkiye (for example in the EU and the US); processing on their servers counts as a transfer abroad under KVKK art. 9. Transfers are limited to the data needed to run the site and take place under the providers' data processing terms and security commitments (and, for EU visitors, GDPR chapter V). When avatars are shown, your browser connects to Discord directly. Information may be given to competent authorities when the law requires it.
5. How data is collected
Data is collected electronically: from Discord when you sign in (with your approval), directly from you when you fill in a form, from the plugin on our game servers (server name and player count only), from the bot on our Discord server (the market item list only; no personal data) and automatically while you use the site (security logs).
6. Your rights
You have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing, to know the third parties it is transferred to, to request correction or deletion and notification of these to recipients, to object to a result against you produced solely by automated analysis, and to claim compensation for damage caused by unlawful processing.
You can delete your account, forms and whitelist entry yourself with "Delete my account and forms" on My forms. For other requests write to [email protected] with your name, contact details, Discord username and request. You can also reach us on our Discord server; we may ask you to write by email so we can verify your identity. We answer free of charge within 30 days. You may complain to the Turkish Personal Data Protection Authority or, in the EU, to your local supervisory authority.
7. Children
The whitelist is for players aged 15 and over. If you are under 18, please talk to a parent before signing in and sending forms. Parents can ask us to delete a child's data.
8. Security
The site only works over HTTPS. Session cookies cannot be read by scripts (HttpOnly, Secure). Only authorised Discord accounts can enter the management panel and every request is checked on the server against the user's role; the separate technical admin area requires a password and an authenticator code. No system is perfect; data breaches are reported to the authority and affected people as the law requires.
9. Changes
This notice is updated when needed; important changes are announced on the site. Last updated: 9 November 2026.