Privacy policy

Last updated 2026-11-06. This policy covers favapp.store. We follow the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK).

What we collect

• Account data: your email address, a securely hashed password (we can't read it) and your nickname.
• Content you post: app listings, images, ideas, votes, comments and reports.
• Security data: a keyed hash of your IP address (not the address itself) and your browser's user agent, kept with your login sessions to detect abuse.

We don't use advertising trackers, we don't sell data, and we don't load Google Fonts or other third-party scripts that track you. Fonts are served from our own servers.

Why

To run your account and show your content (contract), to keep the service safe from spam and attacks (legitimate interest), and to meet legal obligations.

Who processes it

Hosting (Hostinger), network protection and bot checks (Cloudflare, including Turnstile), image storage on our own server, transactional email (Resend) and link safety checks (Google Safe Browsing, which receives only the submitted URLs). Some of these providers operate outside Türkiye and the EU under standard contractual safeguards.

How long

Account data and content stay until you delete your account. Login sessions expire after 30 days. Security logs are kept for up to 12 months.

Your rights

You can see, correct or delete your data at any time. Deleting your account from the account page removes your profile, listings, ideas, votes and comments immediately. For any other request, email hello@favapp.store; we answer within 30 days. You may also complain to your data protection authority (in Türkiye, the KVKK Board).

Cookies

We set one strictly necessary cookie that keeps you logged in. Cloudflare may set a security cookie to tell people from bots. We use no analytics or advertising cookies, so there is nothing to opt out of.