Privacy policy
Effective date: 2026-10-31
This notice explains which personal data is processed when you use the Ortalig website (ortalig.com) and the Ortalig mobile app, and why, under Turkey's Personal Data Protection Law No. 6698 (KVKK).
Data controller
Ortalig is run by Esmanur Çakır, who is the data controller for personal data. You can reach us at [email protected].
What data we process
If you use Ortalig without an account, only a guest session specific to your device is created; no name or email is asked for. If you create an account, your email address, display name, and a one-way hash of your password are stored. While you use the app, your grade, exam attempts and answers, scores, completed topics, focus sessions and forest, and game results are saved. The server also keeps the connection's IP address in memory for a short time to limit requests and prevent abuse; request logs do not store IP addresses, passwords, or session tokens.
What we use it for
We use your data only to provide the service: showing practice and exams, scoring your answers, showing your progress and rewards, letting you sign in and reset your password, and keeping the service secure. Your data is not used for advertising, profiling, or marketing, and it is never sold. The app has no ads and no third-party tracking.
Legal basis
Data is processed to set up and perform the agreement for your account and the service (KVKK art. 5/2-c), for the legitimate interest of keeping the service secure (art. 5/2-f), and to meet legal obligations (art. 5/2-ç).
Who we share it with
Your data is shared only with the providers needed to run the service: the hosting provider for the server and database, and the email service that sends password reset emails. Their servers may be outside Turkey; any transfer follows KVKK art. 9. Unless the law requires it, your data is not shared with anyone else. If you sign in with Google, your identity is checked with Google's Firebase Authentication service; only your name and the email address Google has verified are received from Google.
Classrooms
If you join a teacher's classroom with its code, that classroom's teacher sees your display name, when you joined, and your status on the classroom's assignments: the lesson notes you read, the topics you completed, and your scores on tests given as assignments. The teacher does not see your email address, your other exam results, or your activity outside the classroom. You can leave a classroom at any time; after you leave, the teacher no longer sees your progress. For teachers who open classrooms we also record the start and end dates of their premium membership. Lesson notes and tests written by teachers are shown only to that classroom's students.
How long we keep it
Account data is kept until you delete your account. When you delete it, all data linked to it (exam attempts and answers, progress, focus sessions, forest, game results, and profile) is permanently deleted. A guest session is valid for 30 days. Password reset links expire after 1 hour. When a teacher who opened classrooms deletes their account, their email address, name, and password are permanently deleted, their classrooms are closed, and the lesson notes they wrote are deleted; students keep their own results on classroom tests in their own accounts.
Children
Ortalig is made for middle school students. It can be used without an account. To keep progress across devices, a student or their parent can create an account, which asks only for an email address, a display name, and a password. The app has no chat, messaging, public profiles, or leaderboards.
Security
Connections are encrypted with HTTPS. Passwords and session tokens are stored as one-way hashes. The mobile app keeps its session token in the device's secure storage.
Your rights
Under KVKK art. 11 you can ask whether your data is processed, request information, ask for it to be corrected or deleted, object, and claim compensation for damage. You can delete your account and all its data yourself on the My account page. For other requests, write to [email protected]; you will get an answer within 30 days.
Changes
If this notice changes, the current version is published on this page with an updated effective date.