Privacy Policy

1. Who We Are

This Privacy Policy explains how Nyota Creative ("we", "us", or "our") processes personal data when you visit nyotacreative.com, request a project session, or contact us. Nyota Creative acts as the data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR").

Our mobile apps and games have their own policies, such as the CosmoBot Privacy Policy, the Cosmo Xonix Privacy Policy, and the Cheeky Fox: Bike Rush Privacy Policy.

2. Data We Process

• Project session requests: your name, email address, optional phone number, optional teammate email, project note, and the date and time you selected.
• Emails and support requests: the information you choose to send us, such as your name, email address, and message.
• Technical data: IP address, browser and device information, and request logs processed by our hosting and security providers to deliver the website and protect it from abuse.
• Analytics data (only with your consent): pages visited, approximate location derived from IP address, device and browser type, and interaction events collected through Google Analytics.

3. Purposes and Legal Bases

• To respond to your project session request and communicate about a potential project, based on taking steps prior to entering into a contract and our legitimate interest in answering business inquiries (KVKK Art. 5/2(c) and (f); GDPR Art. 6(1)(b) and (f)).
• To operate, secure, and troubleshoot the website, based on our legitimate interest (KVKK Art. 5/2(f); GDPR Art. 6(1)(f)).
• To measure and improve the website with analytics, only if you accept analytics cookies (KVKK Art. 5/1; GDPR Art. 6(1)(a)). You can withdraw consent at any time.
• To comply with legal obligations and protect our rights (KVKK Art. 5/2(ç) and (e); GDPR Art. 6(1)(c) and (f)).

4. Cookies and Similar Technologies

We do not use advertising cookies on this website. Google Analytics cookies (such as _ga and _ga_*) are set only after you choose "Accept" in the cookie banner. We store your cookie choice in your browser's local storage so we do not ask again on every visit.

You can change your choice at any time using the Cookie settings link, which is also available in the website footer.

5. Service Providers and International Transfers

We do not sell personal data. We share it only with service providers that help us run the website and reply to you:

• Vercel Inc. for website hosting and serverless functions.
• Cloudflare, Inc. for content delivery, DNS, and security.
• Resend for delivering emails generated by our website forms.
• Google LLC / Google Ireland Limited for Google Analytics, only if you consent.

These providers may process data on servers outside Türkiye, including in the United States and the European Union. Where KVKK Art. 9 or GDPR Chapter V applies, such transfers are carried out on the basis of your explicit consent, standard contractual clauses, or another transfer mechanism permitted by law.

6. Retention

Project session requests and related correspondence are kept for as long as needed to evaluate and carry out a potential project and for the periods required by applicable commercial and tax laws. Analytics data is kept according to the retention settings of Google Analytics, which we limit to 14 months. Technical logs are kept for short periods by our providers for security purposes.

7. Your Rights

Under KVKK Art. 11 and, where applicable, the GDPR, you may ask whether we process your personal data, request access to it, ask for corrections or deletion, learn the purposes and recipients of processing, object to processing, and request compensation for damages arising from unlawful processing. You may also withdraw consent for analytics at any time.

To exercise these rights, email [email protected]. We respond within 30 days. You also have the right to complain to the Turkish Personal Data Protection Authority (KVKK) or, if you are in the EU, to your local data protection authority.

8. Changes to This Policy

We may update this policy when our website, services, or legal requirements change. The latest version will always be available on this page with its "Last updated" date.