file 04 / 04 · legal register

Data Protection Notice.

doc/kvkklast updated 2026-10-03lang en

1. Data Controller

Under Turkey's KVKK (Law 6698), Argos Project acts as the data controller and processes your personal data. This notice applies to Turkish residents.

2. Processed Data

  • Account and contact: Discord ID, username, global name, avatar and email
  • Community history: monitored-server memberships, roles, name and avatar changes
  • Security records: ban record, source, date, reason and supporting-evidence metadata
  • Connection identifiers: Steam, FiveM/license, Xbox Live and similar game identifiers
  • Restricted identifiers: IP or hardware identifier where included in a source record
  • Activity metadata: ticket metadata and visible-channel signals
  • Transaction records: query, session, security, quota, payment status and request logs

3. Processing Purpose

  • Account, session, membership, quota and payment-status management
  • Aggregate site-usage analytics where explicit consent is granted
  • Security and anti-cheat intelligence for server operators
  • Identity correlation, record accuracy, abuse prevention and access control
  • Handling ban appeals, data-subject requests and legal claims

4. Legal Basis

Account and session data is processed where necessary to enter into or perform the service contract. Financial and request records rely, where applicable, on legal obligations and the establishment, exercise or protection of a right.

Usage measurement through Google Analytics starts only after explicit consent. Refusing consent does not affect access to the service or any product feature.

Security, membership, role, ban and identity-correlation records may be processed for the controller’s legitimate interest in helping server operators protect their communities. This is not an automatic or indefinite retention basis: necessity, proportionality, source reliability, record age, corroboration and the person’s rights are balanced for each data category.

5. Retention Periods

  • Account data — while the account remains open; data without a continuing processing condition is removed after verified closure.
  • Query, IP and security audit logs — normally no longer than 90 days.
  • Membership, role, name and avatar history — while needed for security and accuracy; reassessed record by record following an objection.
  • Ban and connection records — while they retain intelligence value, considering source reliability, age, corroboration and appeal outcomes.
  • Request, erasure and suppression records — only to the minimum extent needed to demonstrate compliance and prevent re-indexing; records of erasure operations are kept for at least three years.
  • Session cookie — 30 minutes.

When processing conditions cease, the relevant data is erased, destroyed or anonymised. Isolated backups expire through normal rotation; recorded erasure and suppression decisions are reapplied before restored data is used in production.

6. Transfers Abroad

The infrastructure is hosted outside Turkey: content delivery and attack filtering run on Cloudflare, web hosting on Hostinger, and the application server on a virtual server abroad. Authentication goes through Discord. Where analytics consent is granted, aggregate usage measurements are processed through Google Analytics.

Authorised Argos users and server operators may see the query results made available to them; co-operating servers that provide records and legally authorised authorities may receive data where necessary. Transfers are limited under applicable KVKK conditions, contractual safeguards, access controls and data-minimisation principles.

7. If You Are Recorded Without Being a User

Argos may process membership, role, name-history, ban and limited activity metadata for accounts visible to the collector account in monitored communities, including people who never sign up. OAuth is separate from this collection process; private-message and DM content is not processed. If you are the subject of such a record, you have the rights in this notice. Use /ban-appeal for an inaccurate ban record and the request channel below for other data-subject requests.

8. Your Rights (KVKK Article 11)

  • Learn whether your personal data is processed
  • Request information about the processing
  • Learn the purpose and whether the data is used accordingly
  • Know the third parties it is transferred to, at home or abroad
  • Request correction if it is incomplete or inaccurate
  • Request erasure or destruction where the conditions are met
  • Request that corrections and erasures be notified to those third parties
  • Object to a result reached against you solely by automated analysis
  • Claim compensation for damage caused by unlawful processing

9. Making a Request

To exercise the rights above, contact the admin via Discord; use /ban-appeal for an inaccurate ban record. A request sent from the relevant Discord account is used to establish the account link. Only necessary and proportionate additional information is requested where reasonable doubt remains. Where a right depends on a country or legal status, information sufficient to assess that condition may be requested.

Requests are assessed by data category. A disputed record may be made unavailable or processing may be restricted while the review is pending where the conditions require it. Within 30 days, the request is accepted in full or in part, or refused with the legal and factual reasons given. Access copies are prepared in a way that protects the rights and freedoms of others.

10. Changes and Effective Date

This notice may be updated as the service or applicable law changes. Changes apply prospectively from their stated effective date; they do not retroactively narrow a request already received or remove rights granted by KVKK.

end of recorddoc/kvkk