In short
- This site has no analytics, no advertising and no tracking cookies.
- It processes your data only when you email us, and in server logs for security.
- Emails are kept for 12 months after the last reply. Server logs are kept for 14 days.
- You can ask for a copy, a correction or deletion at any time.
1
What this policy covers
This policy covers the website at carchalabs.com. Visualizer, LicenseKit and Monitoring Tool run on their own addresses and each has its own privacy notice.
2
Who is responsible
Buğra Ömer Aydemir, trading as Carcha Labs, Istanbul, Türkiye. Write to [email protected] for anything about your data.
3
What is processed, and why
| Data | Why | Kept for |
|---|---|---|
| Your email: address, name if you give it, and what you write | To answer you | 12 months after the last reply |
| Server logs: IP address, time, page requested, browser and referring page | To keep the site secure and fix errors | 14 days |
| Theme cookie: light or dark | To remember the theme you chose | 12 months, in your browser |
4
What is not processed
- No analytics, heatmaps or session recordings.
- No advertising or social media trackers.
- No fonts, scripts or images loaded from other companies. Everything is served from carchalabs.com.
- No forms. You contact us by email, from your own mail app.
5
Who else sees it
Three service providers process data for us. None of them may use it for their own purposes.
| Provider | What it does | Where |
|---|---|---|
| Amazon Web Services EMEA SARL | Runs the server | Frankfurt, Germany |
| Cloudflare, Inc. | Delivers the site and protects it against attacks | United States, with servers worldwide |
| Proton AG | Hosts the mailbox that receives your email | Switzerland |
We do not sell personal data and do not share it with anyone else unless the law requires it.
6
Your rights
You can ask what data we hold about you, get a copy, have it corrected or deleted, and object to its use. Write to [email protected]. People in the EU and EEA have the rights in the GDPR notice; people in Türkiye have the rights in the KVKK Aydınlatma Metni.
7
How the data is protected
The site is served over HTTPS only, with HTTP Strict Transport Security and a strict Content Security Policy. Access to the server and the mailbox is limited to the controller.
8 · Version history
Changes to this document
When this document changes, the version number goes up and the change is listed here.
- v1 · 12 Oct 2026First version