Legal
Privacy Policy
Last updated: Sep 24, 2026
1. Who is responsible
This website is operated by Yuefolabs ("we"), an independent software engineering practice established in Türkiye. We decide why and how the data described below is processed, which makes us the controller under the EU General Data Protection Regulation (GDPR) and the data controller under Turkish Law No. 6698 (KVKK).
You can reach us through the contact form or at hello@yuefolabs.com.
2. What this site collects
Contact form. Your name, email address, company name if you give one, and the message you write. We use this only to answer you and to prepare a scope and a price. Legal basis: steps taken at your request before entering into a contract, GDPR Art. 6(1)(b).
Cookie choice. If you answer the cookie notice, your answer is stored in your own browser so that we do not ask again. So that we can show your consent, the same choice is also recorded on our server under a random identifier. Legal basis: our legitimate interest in honouring your choice, Art. 6(1)(f). You can change your choice at any time in cookie settings.
Server logs. Each request is logged with its IP address, timestamp, requested path and browser user agent, to keep the service running and to detect abuse. Legal basis: legitimate interest, Art. 6(1)(f).
Visit measurement (only with your consent). If you consent in the cookie notice, we record the following on our own server: a random session identifier; the pages viewed and time on page; the referring source (referrer address) and campaign (UTM) parameters; the browser user agent and the device type, browser and operating system derived from it; an irreversible hash of your IP address (the IP address itself is not stored for this purpose); click and scroll events on the page. The purpose is to see how the site is used and to improve it. Legal basis: your consent, GDPR Art. 6(1)(a) and KVKK Art. 5(1). Without your consent measurement never starts; you can withdraw consent at any time in cookie settings.
That is the complete list. We run no third-party analytics, advertising or social media trackers. There is no profiling and no automated decision-making.
3. Cookies and local storage
Everything this site stores in your browser is listed below. The analytics cookie is only set after you consent; the others are needed for the site to work or to remember your choice. You can change your choice at any time in cookie settings.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| NEXT_LOCALE | Cookie (necessary) | Remembers the language you are viewing | Session |
| cs_lang | Cookie (necessary) | The language you chose in the language switcher; only set when you choose one | 1 year |
| cookie_consent, cookie_consent_session_id | Local storage (necessary) | Your cookie choice and the identifier of the consent record | Until you delete it |
| theme | Local storage (functional) | Light or dark theme preference | Until you delete it |
| cs_session_id | Cookie (analytics, consent only) | Session identifier for visit measurement | 1 year |
4. How long we keep it
Enquiries that do not lead to a project are deleted after 24 months. Records tied to a signed project are kept for as long as commercial and tax law requires. Server logs are kept for up to 30 days, visit measurement data for 90 days and consent records for 2 years.
5. Who else sees it
This website runs on a server in Türkiye operated by our hosting provider; traffic passes through Cloudflare (DNS/CDN and bot protection — it sees your IP address), media files are stored on Cloudflare R2, and notifications of your message are delivered through an email provider (Resend/Migadu). All of them act as processors under a data processing agreement. We do not sell personal data and we never share it for marketing.
Hosting for client projects is a separate matter: for clients in the European Union, project infrastructure runs in the EU under its own data processing agreement.
6. Where your data goes
We are established in Türkiye and this website is hosted there. The European Commission has not recognised Türkiye as providing an adequate level of data protection, so if you are in the EEA your enquiry is transferred outside it. We rely on the European Commission’s Standard Contractual Clauses for that transfer and will send you a copy on request.
7. Your rights
Under the GDPR you may ask for a copy of your data, ask us to correct or erase it, ask us to restrict or stop processing, object to processing based on legitimate interest, and ask for your data in a portable format (Arts. 15 to 21). Write to us through the contact form or at hello@yuefolabs.com and we will answer within one month. You may also complain to the supervisory authority in the country where you live or work.
If you are in Türkiye, KVKK Art. 11 gives you equivalent rights and we answer within 30 days.
8. Changes to this policy
If we change how this site handles data, we update this page and the date shown at the top of it. There is no hidden version.