KVKK Information Notice

Scope and privacy requests

This notice explains how personal data is processed when you visit UniverseHall, create an account, use learning and game features, take a level check, or submit a privacy request.

Privacy questions and personal-data requests can be submitted through the form below or to destek@universehall.com. The form provides a reference number so you can follow up on your request.

Data categories

UniverseHall processes only the information needed for the relevant feature.

• Identity and contact: display name, username and email address.
• Account and security: password hash and salt, session records, password-reset records and sign-in security events. Plain-text passwords are not stored.
• Learning and assessment: answers, scores, progress, assigned modules, submissions and feedback.
• Usage and preference: interface language, consent choices, selected game character, room participation and first-party library content opens.
• Technical security: short-lived rate-limit identifiers and necessary browser preferences. Optional analytics are currently disabled.
• The existing traffic counter estimates daily sources on eligible public pages, including guests and bots. It processes the connection IP and a bounded browser signal transiently to derive the same day-specific technical hash used by the historical counter; raw IP addresses and browser strings are not stored. The stored traffic record contains that pseudonymous hash, an estimated class and measurement/expiry times. A source is counted in only one class per Istanbul calendar day: likely human, bot or unclassified. These are not verified people; network or browser changes can affect the estimate. No account ID, page path, query string, cookie or local-storage identifier is recorded by this counter. Historical records remain in the same traffic series. Expiry fields are not a guarantee of scheduled physical deletion. Other optional event-level analytics remain disabled.

Purposes and legal grounds

Data is processed to create and secure accounts, deliver lessons and assessments, calculate and send results, track learning progress, operate class/game rooms, answer requests, prevent abuse and meet legal obligations.

Depending on the operation, the legal grounds are establishment or performance of a contract, compliance with a legal obligation, establishment or protection of a right, and the controller’s legitimate interests without harming fundamental rights. Explicit consent is requested separately only where consent is the appropriate legal ground, such as optional marketing or non-essential analytics.

Collection method and recipients

Data is collected electronically through account and level-check forms, lesson interactions, security logs and privacy requests. It may be shared, only as necessary, with authorized UniverseHall operators and assigned mentors; hosting, security and transactional email providers; professional advisers; and competent public authorities when legally required. Personal data is not sold.

UniverseHall uses Cloudflare for hosting, database and uploaded-file storage. When configured, transactional email uses Resend. Optional AI text feedback uses OpenAI only when the feature is enabled and you separately choose it. These providers may process or access personal data outside Türkiye, depending on the service and its configuration. Cross-border transfers are subject to Article 9 of Law No. 6698.

Retention and deletion

Level-check contact and result records are set to expire after 180 days. Security sign-in events and first-party library open records are retained for 30 days; ordinary sessions for up to 8 hours or 30 days when “Remember me” is selected; password-reset records for 1 hour; and temporary game rooms for 2 hours. Account and learning records remain while the account is active and thereafter only for an applicable legal or claims period. When the purpose and legal basis end, data is deleted, destroyed or anonymized under the applicable policy.

Your rights and application process

Under Article 11 of Law No. 6698, you may ask whether your data is processed; request information and learn the purpose and recipients; request correction, deletion or destruction where conditions apply; request notification of these operations to recipients; object to a result produced exclusively by automated analysis; and request compensation for unlawful processing.

Use the form below without entering passwords, identity-document images or sensitive data. A reference number is issued immediately. Identity verification may be requested before a response is disclosed. Applications are answered as soon as possible and no later than 30 days, subject to the statutory fee rules.

Children and local speaking practice

Where a learner cannot legally manage an account alone, the account and permissions must be managed with a parent or legal guardian. UniverseHall does not request special-category personal data for ordinary learning use.

In the local speaking practice within lessons, UniverseHall keeps recordings in browser memory and does not upload or save the audio file. Where supported, the browser may use its speech recognition service to turn speech into text under that browser’s terms. The learner can edit the text before a check. With the learner’s separate choice, the text and lesson task may be sent to OpenAI for brief feedback; without that choice, a local text check is used. Neither check identifies the speaker or measures pronunciation or acoustic fluency.

Plus speaking submissions

In a UniverseHall Plus speaking assignment, if you choose to submit an audio response, the audio file is uploaded to and stored by UniverseHall. You can play the submitted recording through the Plus area. The mentor assigned to that task can also play it while authorized for that assignment. This is separate from local speaking practice in lessons.