Mustafa Evleksiz
KVKK

KVKK notice — SineO

Document version 1.1 — 5 September 2026 · translation of the Turkish original

This notice is written under Türkiye's Personal Data Protection Law No. 6698 (KVKK). The short version: an account in SineO is needed for the watchlist only — discover, search and "What should I watch?" work without one — and if you never sign in, none of your personal data is processed. If you do sign in, the only thing processed is what it takes to carry your list between your phones. The detail is in the privacy policy.

1. Data controller

SineO is built and published by Mustafa Evleksiz alone, not under a registered company. Contact is by e-mail only: mustafa@mustafaevleksiz.com

2. Personal data processed

Used without an account: none. SineO has no server and no database of its own; it gathers no analytics, embeds no ad network and sends no crash reports. If you choose to sign in so you can use the watchlist, these are processed:

  • Your user id and, unless you hid it with Sign in with Apple, your e-mail address
  • The identifiers of the titles on your watchlist, and the timestamps for adding, removing and reacting

A name, photo, phone number, contacts or location are never asked for under any circumstance. The lawful basis is KVKK Art. 5/2-c: performance of the relationship you entered by choosing to sign in. The records live in Google's Firebase Authentication and Firestore services, in the European Union region; the transfer abroad rests on your explicit consent under KVKK Art. 9, and not signing in removes that transfer entirely.

3. What stays on your device

Your watchlist, watched marks, region and service selections, appearance preference and recent searches are kept only in your device's own storage. We have no access to them, and deleting the app deletes all of it. The full list is in the privacy policy.

4. Requests to third parties

To work, SineO makes requests to TMDB, OMDb and — when you play a trailer — YouTube; if you sign in, Google Firebase is added to that list. The TMDB, OMDb and YouTube requests carry no account, device identifier or advertising identifier; as with any internet request, your IP address is visible to the other side. We do not record it.

The Firebase package is never started until you press a sign-in button: for somebody using the app without an account, not a single request is made.

5. Your rights

Article 11 of the KVKK grants a person whose data is processed the right to request information, correction, deletion and objection to processing. Used without an account, we hold no record, so in practice there is no data to request.

If you have an account, you can exercise the right to deletion in two ways: in the app, Settings → Account → Delete account, or by writing to mustafa@mustafaevleksiz.com. The detail is on the account-deletion page.

6. Changes

If this notice changes, the date above is updated. Should the app ever change so that data is processed, this page will be updated before that change ships.

7. Legal note

This notice is an engineering assessment, not legal advice. It describes exactly what the app does; a lawyer should be consulted for a final compliance view.

Mustafa Evleksiz — Product Engineer · Mustafa Evleksiz