Privacy Policy
Last updated: July 8, 2026
What personal data TripNVB collects and why, who it is shared with, how cookies are used, and your rights under KVKK and GDPR.
1. Data Controller
TripNVB ("we", "the platform") is the data controller for the personal data processed under this privacy policy. You can reach us with any questions through the contact form on our About page.
2. Data We Collect
When you create an account, we store your name, email address, and an irreversibly hashed version of your password. When you check in at a place, we record your GPS location at that moment — solely to verify you're close enough to the place — which is the platform's core verification mechanism. Server logs briefly retain basic technical information (IP address, browser info).
3. Why We Process Your Data
Your data is processed to manage your account, verify check-ins (required for the location-verified review system to function), publish your reviews, and improve the platform. Location data is not tracked continuously outside the moment of check-in.
4. Sharing With Third Parties
We use the Pexels API for city/place imagery; your personal data is not sent to Pexels in the process. Some place data is sourced from OpenStreetMap contributors (this is open data we receive, not your data being shared). We currently do not share data for advertising or third-party tracking purposes. This policy will be updated when affiliate (flight/hotel referral) partnerships are added later.
5. Cookies
The platform currently only uses essential cookies/local storage for session state and your preferences (language, theme). No advertising or tracking cookies are used. This section will be updated when an analytics tool is added.
6. Your Rights Under KVKK
Under Article 11 of Turkey's Law No. 6698 on the Protection of Personal Data, you have the right to learn whether your data is processed, request information about it, learn its purpose, know third parties it's transferred to, request correction of inaccurate data, and request deletion within legal limits.
7. Your Rights Under GDPR (EU Users)
If you reside in the European Union, you have the right to access, rectify, erase, restrict processing of, port, and object to the processing of your data. Contact us to exercise these rights.
8. Data Retention
Your data is retained while your account is active. Following a deletion request, it is permanently removed within a reasonable period; check-in and review data may be retained in anonymized form to preserve the integrity of the platform's verified-data record.