Privacy notice
Text version: 10 November 2026
When you join PlayDiagram, your first name, last name and email address are collected. This notice meets the duty to inform under Article 10 of Turkey’s Personal Data Protection Law No. 6698 (KVKK). You must confirm that you have read it before an account is created. That confirmation is a record that you saw this text. The legal basis for membership data is not the checkbox; it is opening and performing the membership. If you are in the European Economic Area or the United Kingdom, you also have rights of access, correction, deletion and objection, and you may complain to a supervisory authority.
Who is responsible
The controller is the person who operates the PlayDiagram service at playdiagram.com. Requests and notices go through the support form on the site. The trade name and postal address will be added to this notice; until then the support record is the contact channel. Support
Data we process
Membership collects first name, last name and email. The password is not stored as plain text; only a one-way hash is kept. We also record when you joined, whether you joined by email or Google, the interface language, the last sign-in time, the sport you chose, and which version of this notice you accepted and when. If you join with Google, the name and the email Google has verified come from Google. Tactics you draw stay on your account and are not opened to other members. The name, email and message on the support form are used only to reply to you.
Why
These data are processed to open the account, check your sign-in, store your tactics for you, remember your language, limit abuse, and reply to a support message. Measurement and advertising cookies run only if you allow them separately in the cookie panel.
Legal basis
Membership data are processed to the extent needed to make and perform the contract (KVKK Article 5/2-c). A support message is processed to answer your request. Sign-in security and limiting abuse are kept only so far as they do not harm your rights. Measurement and advertising cookies, and transfers abroad that depend on them, need a separate permission you can withdraw. An account cannot be opened unless the box is checked. The check records that you read this version and that the membership is opened on these terms. The check is not presented as the legal basis for membership data, because those data are required to open the account and permission taken for a required step is not freely given.
Sharing
Membership data are not sold and are not used to build an advertising profile. Hosting and sending email may be passed to the technical providers needed to run the service, and only for that purpose. When you sign in with Google, Google performs the identity check. If you allow measurement or advertising, Google Analytics and Google AdSense may process data on systems in their own countries. If you do not allow it, that transfer does not happen.
How long
Account data and tactics are kept while the account exists. You can ask for deletion through the support form. Records that must be kept by law may remain beyond that. The cookie decision stays in the browser for six months and is then asked again. The privacy confirmation stays on the account so it is possible to see which version you accepted.
Your rights
Under Article 11 of the KVKK you may learn whether your data are processed, ask for information if they are, learn whether they are used for their purpose, learn who received them, ask for correction or deletion, and ask for compensation if you are harmed by unlawful processing. Send the request through the support form. A reply is given within thirty days at the latest, depending on the nature of the request. You may still complain to the Turkish Personal Data Protection Board.
Security
Passwords are kept as a one-way hash. The session cookie is marked so page scripts cannot read it. Access to the account is limited to a verified email and a password; with Google, the address Google has verified is used. No method gives absolute security. If you see a suspicious sign-in, change your password and write through the support form.