Privacy Policy

1. Who runs this site

This website (verdictyapp.com) and the Verdicty waitlist are operated by Fırat Yıldız, an individual based in İzmir, Turkey. For the purposes of this policy, Fırat Yıldız is the data controller / operator.

Contact: firatyildiz@verdictyapp.com

2. Scope

This Privacy Policy applies to all language versions (Turkish, English, Spanish) under the verdictyapp.com domain. There is currently no public application or user account system — only a pre-launch waitlist form.

3. Data we collect

When you join the waitlist, we process the following data:

• Your email address — you enter it yourself.
• Submission timestamp — automatically assigned server-side.
• Browser identifier (User-Agent) — for abuse detection.
• Referring URL (referrer) — to understand which source brought you to the site (may be empty).
• Consent state — a record that you ticked the explicit consent checkbox.
• Submission source — which of the two forms on the page you submitted from (e.g. "hero" / "final").

We do not use cookies. We do not run analytics or advertising trackers.

4. Purpose and legal basis

Your data is used only to:

• Send launch and pre-launch update emails.
• Deliver promotional benefits announced to early sign-ups (e.g. complimentary premium tokens).
• Protect the form from spam and abuse.

Legal bases:

• GDPR (EU/EEA): Article 6(1)(a) — your consent.
• KVKK (Turkey): Article 5/1 — your explicit consent.
• United States: compliant with the California Consumer Privacy Act (CCPA/CPRA) and other applicable state laws.

We do not sell your data and we do not share it with third parties for marketing.

5. Third parties (data processors)

We rely on the following providers for site infrastructure. Each processes only what their service requires:

• Supabase (Supabase, Inc.) — database where your record is stored. Data center: Frankfurt, Germany (EU). supabase.com/privacy
• Vercel (Vercel Inc.) — hosting/CDN platform serving the site. vercel.com/legal/privacy-policy
• Google Fonts (Google LLC) — font delivery. When the request is made, your IP address may be transmitted to Google.

6. Retention period

Your email is removed from the raw waitlist table at most 6 months after launch communications are completed. If you opt into a Verdicty account, the relevant data is migrated to the account system and governed by the account-level policy.

Your data is processed until you withdraw consent or until this period expires. To withdraw, see section 7.

7. Your rights

Depending on your jurisdiction, you have the following rights:

• Access — know what data of yours we process.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten" / GDPR Art. 17).
• Restriction of processing and the right to object.
• Data portability (GDPR/CCPA).
• Withdraw consent — at any time, to stop future processing.
• Right to lodge a complaint — with your local supervisory authority in the EU, or with the Turkish Personal Data Protection Authority (KVKK) at kvkk.gov.tr.
• California residents (CCPA/CPRA): right to know, right to delete, right to opt out of sale/sharing of personal information (we do not sell). You may also designate an authorized agent to make a request on your behalf. We will not discriminate against you for exercising these rights.
• Other US states with comparable laws (e.g. Virginia, Colorado, Connecticut, Utah): equivalent rights apply.

To make a request, email firatyildiz@verdictyapp.com. We aim to respond within 30 days.

8. Security

Data is transmitted over HTTPS and stored in Supabase Postgres under Row Level Security (RLS) policies. Only authorized administrators can read the waitlist via the Supabase admin console. No method of transmission or storage is 100% secure, but we apply reasonable technical and organizational safeguards.

9. Children

This service is not intended for children under 16 years of age. We do not knowingly collect data from anyone under 16. If you believe a child under 16 has provided us with data, please contact us; we will delete it promptly.

10. International data transfers

Your data is stored within the EU (Frankfurt, Germany). If you sign up from outside the EU (e.g. the United States or Turkey), data is transferred to the EU. Where applicable, transfers rely on Standard Contractual Clauses or equivalent safeguards in place between Verdicty and Supabase. Vercel CDN traffic may be served from US/global edge locations, but the raw record (your email, etc.) remains in Supabase Frankfurt.

11. Changes to this policy

We may update this policy from time to time. For material changes we will notify you at the email address you registered. The "Last updated" date at the top of the page always reflects the current version.

12. Contact

For any questions about this Privacy Policy, email: firatyildiz@verdictyapp.com

If you require a postal address for correspondence, please request one by email first.