The data controller is Bora Bulut (Boisha Games). For anything about your data, write to boisha.gamedev@gmail.com.

Visiting the site. The site runs on Cloudflare. To deliver the pages and protect the site from abuse, Cloudflare processes technical connection data such as your IP address and browser details. We use no analytics, no ads and no cookies. Your language and theme choices are stored only in your browser.

Contact form. The name, email address, subject and message you enter are sent through the FormSubmit service (formsubmit.co) to our Gmail inbox. We use them only to answer you.

HEX, our AI assistant.

• To write answers, your messages are sent to AI providers: Groq, Cloudflare Workers AI and OpenRouter. On OpenRouter we only use providers that don’t store data. Email addresses and phone numbers in your messages are masked before they are sent.
• Your chats are saved in your browser (up to 20). So we can improve HEX and prevent abuse, they are also kept on our server for 90 days, with email addresses and phone numbers masked.
• Before your first message, Cloudflare Turnstile checks that you are not a bot.
• To limit abuse, our counters use a one-way hash of your IP address; the IP address itself is not stored. Swearing at HEX gets a warning, and if it happens again within a day, HEX is closed to that address for 24 hours.
• Questions HEX can’t answer, or can’t share yet, are emailed to the team without your name or email address and kept in our database. The team’s answer may be added, together with the question, to what HEX knows.
• If you leave your email address to get an answer, or ask HEX to pass a message to the team, your email address and message reach our Gmail inbox. Your email address is never sent to an AI.

We process this data based on our legitimate interest in answering your messages and questions, running and improving HEX and keeping the site secure (KVKK art. 5/2(f), GDPR art. 6(1)(f)).

The services we use process data on servers outside Türkiye, mainly in the United States: Cloudflare (hosting, HEX infrastructure, Turnstile), Groq and OpenRouter (AI), Google (Gmail) and FormSubmit (form delivery). Your data is therefore transferred abroad.

• Emails and messages in our inbox: until the conversation ends, then for 2 years at the most. Ask us and we’ll delete them sooner.
• An email address left for a HEX answer: deleted once the answer is sent, after 30 days at the latest.
• HEX chats on our server: deleted after 90 days.
• Questions HEX couldn’t answer: deleted after 6 months at the latest. Answered questions can stay in what HEX knows until they are removed; you can ask us to remove one.
• Hashed IP counters: deleted within 2 days.
• Data in your browser (chats, language, theme): stays on your device until you delete it, for example by clearing your browser data.

Under KVKK art. 11 you can ask whether your data is processed and request information about it, learn why it is processed and whether it is used for that purpose, know who it is shared with in Türkiye or abroad, ask for it to be corrected or deleted and for those recipients to be told, object to a result against you that comes only from automated analysis, and claim compensation for damage caused by unlawful processing. The GDPR also gives you the rights to restrict processing, to data portability and to object. You can complain to the Turkish Personal Data Protection Board or, in the EU, to your data protection authority.

To use your rights, write to boisha.gamedev@gmail.com. We reply free of charge within 30 days at the latest. If you prefer to apply by post, ask us for a postal address by email.

We may update this notice. The current version is always on this page.