Privacy Policy

This notice explains what personal data QRAlp processes on the website qralp.com and in the QRAlp app at platform.qralp.com, and why.

Who is responsible

The website and the app are run by QRALP, 26 Talas, Kayseri, Türkiye. If you have a question about your data, write to contact@qralp.com.

What this website collects

• Statistics (with cookies). We use PostHog to see how visitors use this website: which pages they view, where they come from (for example a search engine), their device, browser and approximate location, and what they click. PostHog sets a cookie and an entry in your browser’s local storage with a random ID, so that repeat visits can be recognized; they last up to one year. You can delete or block cookies in your browser settings at any time. We don’t use advertising tools.
• Technical data. When you visit, our hosting provider processes your IP address, browser details and the pages you request, to deliver the site and protect it from attacks. We don’t use this data to identify you.
• Emails you send us. If you write to us, we use your message and email address only to reply, and keep them only as long as needed for that.

What the app collects

• Your account. Your name, email address, password (stored only as a secure hash, never in plain text) and the language you choose, so you can sign in and we can send you emails about your account.
• Signing in with Google. If you choose “Continue with Google” or connect Google in your profile, Google shares your name, email address and profile picture with us, together with an ID for your Google account. We use them to create your account or sign you in, and keep that ID and the sign-in tokens Google returns so your Google account stays linked. We never see your Google password.
• What you add. Your organizations and venues, and your team: the email addresses of the people you invite, their roles and which venues they can open.
• Sign-in cookie. One cookie keeps you signed in for up to 30 days. The app needs it to work and uses it for nothing else. The app also remembers your language and your last organization in your browser’s local storage. It uses no statistics or advertising cookies.
• Security data. When you sign in, we store your IP address and browser details with your session, to protect your account and stop abuse.
• Emails we send. Password resets, email confirmations and invitations come from app@qralp.com. We keep a short record of each one: the recipient, the type of email and whether it was sent.

We keep this data while your account exists. To delete your account, write to contact@qralp.com.

Service providers

• Cloudflare hosts the website and the app, stores the app’s data, sends our emails and receives the emails sent to our addresses.
• Google (Gmail) stores the emails we receive and send.
• Google also signs you in to the app if you choose “Continue with Google”. You enter your Google password on Google’s own page, where Google’s privacy policy applies.
• PostHog provides the website statistics; the data is stored in its EU cloud.

These providers may process data outside your country, including in the United States, with the safeguards the law requires (such as the EU Standard Contractual Clauses).

Legal basis

We process your account, what you add to the app and the emails we send you because we need them to provide the service you signed up for (GDPR Art. 6(1)(b); in Türkiye, KVKK Art. 5(2)(c)). We process technical and security data, website statistics and your emails to us because we have a legitimate interest in running a secure website and app, improving them and answering your questions (GDPR Art. 6(1)(f); in Türkiye, KVKK Art. 5(2)(f)).

Your rights

You can ask to see, correct or delete your personal data, object to how we use it, or ask us to limit it. Write to contact@qralp.com. You can also complain to your data protection authority (in Türkiye, the KVKK).

Changes

If this notice changes, we’ll update the date at the top of this page.