Personal data protection and privacy

1. Data controller

Data controller contact: Metin2 Okulu contact channel. Application contact: info@metin2okulu.com.

2. Categories of personal data

For account creation and security, the site may process usernames, email addresses, account roles and status, email-verification status, and profile images. Community features may involve forum topics and replies, reactions, and reports. PVP features may involve applications and server details, votes, and comments. If you consent to measurement, Google Analytics may process visit and device information, and forum topic views may be counted in aggregate. Your password is protected and is not readable by site staff.

3. Purposes of processing

Processing is limited to account creation and session management, email verification and password reset, providing forum and PVP community features, preventing abuse, moderation, investigating security incidents, and meeting legal obligations. Optional visit and topic-view measurement runs only after consent in the cookie preferences.

4. Legal grounds

Depending on the specific activity, processing may rely on grounds provided by the Turkish Personal Data Protection Law (KVKK), such as entering into or performing a contract, the data controller's legal obligations, establishing, exercising, or protecting a right, or legitimate interests. Explicit consent is obtained where required. The duty to inform does not depend on obtaining explicit consent.

5. Sharing and service providers

Information is shared only when needed to provide and protect the site, with service providers that support site operations and email delivery. If you consent to measurement, Google Analytics may send visit and device data to Google services. Information may also be shared with authorized public authorities where required by law. Any international transfer through a third-party service is handled in accordance with applicable requirements.

6. Cookies and privacy choices

A necessary cookie keeps your sign-in session available for up to 7 days. Short-lived cookies may be used to protect Google sign-in and expire within 10 minutes. Optional Google Analytics measurement runs only after consent. Your cookie choice is remembered in your browser for 180 days and can be changed at any time from the site footer.

More information: Cookies and browser storage

7. Retention approach

Account data is kept while the account is active and for as long as needed to provide the service and maintain security. Verification and password-reset tokens should be deleted after their purpose ends or they expire. Logs and reports are retained only for a purpose-limited period; they may be kept as long as necessary where a legal obligation or dispute applies. Exact periods must be set by the data controller after reviewing the processes and applicable rules.

8. Individual rights and requests

Signed-in users can request a secure JSON copy of their data or request account deletion/anonymization from the profile page. These requests do not trigger immediate automatic deletion; an authorized administrator reviews them after identity, content-integrity, and PVP-ownership checks. Alternatively, requests suitable for identity verification can be sent to info@metin2okulu.com.

9. Security

We use appropriate safeguards to protect accounts and the site. If a security concern is identified, we assess and take steps to protect access, investigate the matter, and provide any notices required by applicable rules.