This policy explains what personal data the public website turkly.net collects, why, and what you can ask us to do with it. It covers the website only. The student app at app.turkly.net is not part of this policy.

Who we are

Turkly is an online Turkish teaching service run by teacher Ceylan Meriç. "Turkly", "we" and "us" in this policy mean Turkly (Ceylan Meriç), which decides how your data is used (the data controller).

For anything about your data, write to hello@turkly.net.

What we collect and why

When you request a lesson

The lesson request form asks for:

your name and email address (required)
your WhatsApp or phone number (optional)
your Turkish level (required; "not sure" is an option)
your preferred times and a message (both optional)

Your browser also sends your time zone (for example Europe/Berlin) and the language of the page you used, so we can suggest suitable lesson times and reply in your language.

We use this only to answer your request and arrange lessons. The request is saved as a task in Ceylan's teaching app, she gets an in-app notification, and an email with your details is sent to her own inbox. When she replies, the reply goes to the email address you entered. We never send automatic emails to the address typed into this form.

If you took the level test earlier with the same email address, sending a lesson request marks that test record as "became a request", and the tips emails described below stop.

When you take the free level test

The test runs in your browser. Your answers are scored on your device and are not sent to us. If you just take the test and close the page, we receive nothing about you.

If you ask us to email you your result, we collect:

your email address (required) and name (optional)
your result: level, score, an ability estimate and, where available, scores for grammar, vocabulary and reading
the page language and your browser's time zone

We use this to email you your report in your language and to let Ceylan see your result and follow up about lessons. We keep one record per email address: if you take the test again, the newest result replaces the old one.

Tips and offers (only if you tick the box)

Under the result form there is a separate checkbox, unticked by default, for occasional tips and offers for your level. If you tick it, we may send up to three emails, about 2, 5 and 10 days after the test, at around 10:00 in your time zone.

As proof of your consent we store the time you gave it, the exact wording of the checkbox you saw, and a scrambled, keyed code made from your IP address. We do not store the IP address itself for this.

Every one of these emails has an unsubscribe link, and unsubscribing works in one click. After you unsubscribe, that address gets no further emails about the test, including result reports. Leaving the box unticked on a later test does not cancel consent you gave before; use the unsubscribe link or write to us for that.

Server logs and abuse protection

Like most websites, our web server writes an access log for every page or file request. It records your IP address, the time, the page requested, and technical details your browser sends, such as its type and the page you came from. We use it to keep the site running, find errors and stop attacks.

To stop spam and abuse, the forms limit how many requests can come from one IP address and how many result emails one address can receive. These counters are kept only in the server's memory, for at most a day, and disappear when the server restarts. Our application also writes technical logs, which can include IP addresses and the email addresses we send messages to.

Browser storage, cookies and analytics

The site saves two small settings in your browser's local storage:

turkly-theme: whether you chose the light or dark look
turkly-lang: the language you picked from the language menu

These stay on your device and are not sent to us. When you open the English home page for the first time, the site uses your browser language and time zone, on your device only, to send you to a matching language version.

turkly.net sets no cookies, and uses no analytics, advertising or tracking tools. Fonts, images and videos are served from our own server. The Instagram link is an ordinary link; nothing from Instagram loads until you click it, and after that Instagram's own policy applies.

Legal bases

We rely on these grounds under data protection laws such as the EU GDPR and Turkey's Personal Data Protection Law (KVKK, Law No. 6698):

Steps you ask for before a possible contract: answering your lesson request and emailing you the test report you asked for.
Consent: tips and offers emails. You can withdraw consent at any time, and that does not affect emails already sent.
Legitimate interest: keeping the site secure (logs, rate limits), Ceylan following up on a test result, linking a test result to a later lesson request, and keeping proof of consent.

Who receives your data

Ceylan Meriç, who reads requests and test results in her teaching app and email inbox.
Resend, the service that delivers our emails. It processes the email address, the content of each email and delivery data on our behalf.
Our hosting: the website, database and logs run on our own rented server.

We do not sell your data, and we do not share it with advertisers. We would only disclose it to authorities if the law required it.

International transfers

Resend is based in the United States, so the emails we send, including your email address and the details in them, are processed there. We rely on Resend's data processing terms for this transfer. Because we teach online, people often write to us from other countries, so your data may also cross borders on its way to our server or to Ceylan's inbox.

How long we keep data

Lesson requests and test records: there is no automatic deletion. We keep them as long as needed to answer you and, if you become a student, to run your lessons, and we delete them when you ask. If you unsubscribe, we keep a note of that against your email address so we do not email it again.
Database backups: taken nightly and deleted after 14 days. Data deleted from the live database can stay in a backup until then.
Web server access logs: the log file is rotated every 20 MB, and at most 10 old files are kept. Old files are deleted automatically, after at most about 90 days.
Application logs: kept in the server's system log, which has a size limit and overwrites the oldest entries automatically.
Rate-limit counters: in memory only, for up to a day.
Browser settings: stay on your device until you clear your browser's site data.

Your rights

Depending on where you live, you can ask us to:

tell you whether we hold data about you and give you a copy
correct data that is wrong or incomplete
delete your data
restrict or object to how we use it, including at any time to tips emails
give you your data in a common, machine-readable format
tell you who we shared it with, including abroad

To use any of these rights, email hello@turkly.net from the address you used on the site, or tell us which address it was. We may ask a question to make sure the request is really yours. We answer within 30 days, free of charge.

You can also complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (KVKK); in the EU or EEA, the authority in your country. We'd appreciate the chance to fix the problem first.

Children

Lessons are also offered to children, but the request should come from a parent or guardian, who fills in the forms with their own contact details. Children should not send us their personal data themselves. If you think a child has done so, write to us and we will delete it.

How we protect data

The site is served only over HTTPS. The forms accept data only from turkly.net, the database is not reachable from the internet, and access to requests and test results is limited to the people who run Turkly.

Changes to this policy

If what the site collects or how we use it changes, we will update this page and the date below.

Last updated: 1 November 2026

Privacy Policy