Privacy Policy

This is a translation for convenience. If it differs from the Turkish text, the Turkish text prevails.

This is a pre-publication draft. It must not be used as the final text until the service provider details, retention periods and legal bases are completed.

Service provider and contact

The identity of the service provider is not yet ready for publication.

The data controller contact address has to be completed.

Which data is used?

Teacher accounts use name, email, authentication and session details; class and student records use nickname, student code, dinosaur progress, reward history and visual preferences. Students are never asked for an email, phone number or real name. Nicknames and account relationships may still count as personal data. Server access logs may contain IP addresses and technical client information.

Purposes and legal bases

Data is used to open accounts, authenticate users, manage classes, apply rewards correctly, keep the service secure and let students view their own island. The authority of the teacher and the school over student data, the service provider's role, the legal bases and the contracts must be specified before publication. Permission to publish a review and the optional analytics choice are asked separately; refusing analytics does not prevent use of the service.

Information stored on the device

The latest visual state of the student's island and the 3D island files are stored on the device for offline use. If “Remember me on this device” is selected, the student's session is also kept on the device; the PIN is never saved with this option. Signing out and deleting the saved island clears the local island and the remembered session. The browser's own storage clean-up may also delete these files.

Services and data transfer

Accounts and class operations are processed on DinoAda's Appwrite infrastructure. The hosting provider, its location, any sub-processors and the conditions of transfers abroad must be completed by the service provider. Optional analytics only runs on the promotional pages after the user's consent and provider configuration; student, teacher and admin screens are never measured.

Teacher reviews

The review text and the display name on the teacher profile may become public with separate publication consent and after admin approval. Student names, student codes, PINs or private information must not be written in the form.

Retention and deletion

Retention periods and the deletion process for accounts, classes, reward history, technical logs and backups are not final yet; they must be completed before the final text. The cookie preference record is valid for 180 days. 3D island files and the latest island may stay on the device until the user clears them or the browser removes its storage. Session validity also depends on the session rules on the server.

Rights and requests

Data subjects may contact the data controller, within the applicable legislation, to learn whether their data is processed, request information, ask for correction or, where the conditions are met, deletion, and exercise their other rights. The final identity and request channel must be given in the contact section above.

Reference: KVKK duty to inform (Turkish Personal Data Protection Authority).