Privacy

Who is responsible

The data controller is Mesut As. Requests go to devcircleup@gmail.com. Your name and enough detail to recognise the account are enough. Requests are answered within 30 days.

The account, posts, comments, event registration and profile are processed to perform the membership (KVKK art. 5/2-c). Reports, security, the sign-in archive and the visitor counter rely on legitimate interest (art. 5/2-f). The counter counts browsers that open the site. Session, theme and language stay so the site can run.

Where data comes from

The provider you sign in with (Google, GitHub or LinkedIn) may send a name, an email and a profile photo. If a profile field is still empty and the provider shared a value, we may offer to fill it. We do not overwrite a field you already wrote. A username is not derived from an email address.

You add the rest yourself: username, headline, bio, slogan, city, country, experience, membership, skills, GitHub and LinkedIn links, company, position, business type, work style and what you are open to. A business account also has a business name.

A browser that opens the site gets a random id for the footer. That id is not matched to your name, your email or your IP address. The same browser is counted once.

What we use it for

To open the account, show you in the feed and on your profile, let you post and comment, count UP and levels, keep event registrations, review mentor and team applications and handle reports.

Your email is not shown on the public profile. It is used to sign you in and to join accounts that share the same address. Admins and moderators can see that address in the panel and write to the members they choose.

Phone verification is off for now. If it is turned on, the number stays inside Firebase Authentication only. It is not published on your profile or in the database.

The footer counter uses this anonymous id on every browser that opens the site to keep the total visitor count and who is online now. While you are signed in, that id is linked to your account for a short time. That live link is removed when you leave. The sign-in archive is separate: admins and moderators can see the name, username, photo and last sign-in time of members who signed in during the past year. A row older than a year is deleted.

Who can see it

Published posts, comments and profile fields can be seen by anyone who opens the site. Like counts and poll totals are public. Only admins and moderators can see which option a member chose. An email or phone written on a job or sale listing is visible to anyone who opens that post. The total visitor count and the online count are public too. The raw visitor id is not listed on the site. Admins and moderators can see the names of members who are on the site right now. Visitors who are not signed in appear only as a count.

Reports, the motivation text on a mentor application, the note on a team application and moderation notes are visible only to DevCircleUp admins and moderators. Approved team roles show on the profile. The private daily UP record is not shown to anyone else.

We use Google Firebase. Authentication, Firestore, Storage and Cloud Functions run in Europe (europe-west). Hosting runs in europe-west4. Google processes the data for us and is established in the United States. The transfer rests on Google’s data-processing terms and the safeguard under KVKK art. 9. The visitor record in Firestore does not store an IP address. Google Cloud may keep the caller address in an operations log for its own retention period. That log is not used to build an advertising profile.

How long we keep it

Your profile and what you publish stay while the account stays. Delete a post or a comment and it leaves the feed. Closing the account from profile settings deletes the profile, notices, likes, poll votes, event registration, mentor and team applications and the sign-in row. Posts and comments stay, the name on them becomes “Former member”, and email and phone fields on a listing are cleared. Copies in backups can remain for a short time.

Security and abuse logs are kept only as long as needed to deal with the incident. The sign-in archive is kept for one year. An anonymous visitor record is not tied to an account. Clearing this site’s data deletes the id on this device. The next visit writes a new id to the counter once. The old anonymous record stays on the server, not tied to a person.

Your rights

Under KVKK art. 11 and the GDPR you can ask to see your data, correct it, delete it or object to how it is used. You can edit most profile fields yourself and close the account from settings. For anything else, write to devcircleup@gmail.com and include enough detail for us to know the account is yours. The reply comes within 30 days.

You can also contact the Turkish Personal Data Protection Authority, or the authority in the country where you live.

Children and links that leave the site

DevCircleUp is for developers, candidates and students who are 18 or older. If we find an account belonging to someone younger, we close it. A parent can ask for that by writing to devcircleup@gmail.com.

The WhatsApp community, LinkedIn, Instagram, X, TikTok and YouTube are other platforms. Their rules apply once you go there.