Privacy Policy

Last updated: 12 October 2026

The short version: if you join the waitlist, we keep your email address and use it only to tell you about FlyHub. Our analytics don't use cookies and don't identify you. We never sell your data. You can unsubscribe or ask us to delete everything at any time.

1. Who we are

This website, flyhubgame.com, is run by [YOUR FULL LEGAL NAME OR COMPANY NAME], [POSTAL ADDRESS], Türkiye ("FlyHub", "we", "us"). We are the data controller (veri sorumlusu) for the personal data described here, under the EU/UK General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK).

Privacy contact: [email protected] [PLACEHOLDER]

This policy covers the website and waitlist. When the FlyHub game launches, it will come with its own updated policy covering any in-game data.

2. What we collect and why

We don't ask for, and don't want, any sensitive data. We don't make automated decisions about you and we don't build advertising profiles.

3. Who processes your data

We use a small number of trusted service providers (processors) who handle data only on our instructions:

• [MailerLite (UAB "MailerLite", Lithuania, EU)]: stores the waitlist and sends emails. [Swap for Formspree, Buttondown, etc. if you use another provider.]
• [Umami Software, Inc. (Umami Cloud)]: cookie-free website analytics. It doesn't store IP addresses or set cookies, and its counts can't be tied to an individual.
• [Cloudflare, Inc. (Cloudflare Pages)]: website hosting, content delivery and security. [Or Netlify, Inc. if you host there.] This includes Cloudflare Web Analytics, which counts visits without cookies and without storing IP addresses.

We never sell, rent or trade your personal data. We only disclose it if the law requires us to.

4. International transfers

Some providers above may process data on servers outside Türkiye, the EU or the UK (for example, in the United States). Where that happens, we rely on recognised safeguards: an adequacy decision where one exists (e.g. the EU–US Data Privacy Framework for certified companies), or Standard Contractual Clauses. For transfers from Türkiye, we follow KVKK Article 9, using the standard contracts published by the Personal Data Protection Authority, notified to it as required, or another basis that Article 9 allows.

5. How long we keep it

• Waitlist email: until you unsubscribe or ask us to delete it. If we ever stop the project, we delete the list. Unconfirmed signups are deleted after 30 days.
• Analytics: stored only in aggregate, anonymous form. [Umami Cloud keeps data for its plan's retention period.]
• Server logs: kept by our host for a short period (usually no more than 30 days) for security.
• Emails you send us: as long as needed to deal with your request, then deleted.

6. Your rights

Wherever you live, you can ask us to:

• tell you whether we process your data, and give you a copy (access);
• correct inaccurate data (rectification);
• delete your data (erasure);
• restrict or object to processing, including any processing based on legitimate interest;
• give you your data in a portable format (portability);
• withdraw your consent at any time, by clicking "unsubscribe" in any email or by emailing us. This doesn't affect anything done before you withdrew.

Under KVKK (Article 11) you can also ask about the purpose of processing and whether data is used for that purpose; learn which third parties in Türkiye or abroad receive it; ask that third parties be told about any correction or deletion; object to an outcome that goes against you and comes solely from automated analysis; and claim compensation for damage caused by unlawful processing.

To use any of these rights, email [email protected]. We reply within one month under GDPR and within 30 days under KVKK, free of charge. We may need to confirm your identity first.

You also have the right to complain to a supervisory authority: in the EU, the data protection authority where you live or work; in the UK, the ICO; in Türkiye, the Kişisel Verileri Koruma Kurulu (kvkk.gov.tr). We'd appreciate the chance to fix things first.

7. Cookies

This website does not use cookies, and doesn't store anything on your device for tracking or advertising. That's why there's no cookie banner. Our analytics are cookie-free, and our fonts are hosted on our own server, so no font provider gets your IP address. If this ever changes, we will update this policy and ask for your consent where the law requires it.

8. Children

The waitlist is not meant for children under 16. If you're younger, please ask a parent or guardian to sign up for you. If we find out we've collected a child's email without the right consent, we'll delete it.

9. Security

The site is served only over HTTPS. We keep data with a minimal set of reputable providers, use strong unique passwords and two-factor authentication on all accounts, and limit access to the people who really need it. If a data breach affects you, we'll notify you and the relevant authorities as the law requires.

10. Changes and contact

We'll update this page if anything changes and revise the "Last updated" date. If a change is significant, we'll tell waitlist members by email.

Questions? Email [email protected] or write to [POSTAL ADDRESS].