Privacy

From Production is operated by PROCUX Teknoloji A.S., Balikesir, Turkiye, which is the data controller for everything described here.

We do not use tracking cookies

There is no analytics script on this site. No Google Analytics, no tag manager, no pixel, no session recorder, no advertising network. We do not build a profile of you and we have nothing to sell to anyone about you. That is why there is no cookie banner: the cookies we set are the ones the site cannot work without.

Every cookie we set, in full:

• better-auth.session_token — set when you sign in, so the site knows who you are on the next request. Removed when you sign out.
• fp_csrf — a short-lived random value that proves a form submission came from this site. Expires in 30 minutes.
• fp_r_<post> — a mark that this browser already counted a read for one post, so the counter is not inflated by a refresh. Expires in 12 hours and contains no identifier.

Nothing is loaded from a third party

Fonts, stylesheets and scripts are served from this domain. Your browser does not contact any other company while reading this page, so no one else learns your IP address from your visit.

What we collect when you sign in

Signing in is optional; reading needs no account. If you sign in with GitHub or Google we receive your name, email address, avatar URL and the account id at that provider. We use it to attribute what you write, to match your email domain against a verified hub, and to contact you about your account. We never receive your password.

What we collect when you do not

Votes and read counts. A read is counted per browser, per post, using the cookie above. Our servers apply a short-lived rate limit keyed on IP address to stop the counter being inflated; that key lives in memory only and is never written to the database or to a log.

Posts we collect from other blogs

We read public RSS feeds. For each post we store a title, a date, up to 600 characters of excerpt and a link to the source. We do not store the body. This is publishing data, not personal data, but if a post of yours is here and you want it gone, write from an address on the domain and the feed and every entry from it are removed. No form, no argument, no retention period.

How long we keep it

Account data for as long as you have an account. Ask us to delete it and it goes, along with your votes; posts you published stay unless you ask for those too. Sessions expire on their own. Aggregated counters keep no per-person history.

Who else sees it

Our hosting provider processes the data needed to serve the site. When paid launch slots open, checkout will run through Paddle as Merchant of Record, and Paddle will handle payment data under its own privacy policy — we never see a card number. Otherwise we do not share your data, and we do not sell it.

Our servers are in the European Union. If you are outside it, your data is transferred there when you use the site.

Your rights

Under the Turkish KVKK and the GDPR you can ask what we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. Write tocontact and we answer from the same address. You can also complain to your local data protection authority.

Changes

If this page changes we update the date at the top. If a change matters — a new processor, a new category of data — we say so here rather than leaving you to spot it.