Legal
Privacy Policy
Last updated: August 2026
Information We Collect
When you create an account, we store your name, email address and a securely hashed password through Better Auth. If you complete your profile, we may also store your profile image, institution, biography, website link and public profile slug.
Usage and Query Logs
Transcription requests may be recorded in query logs for platform operation, quality control and usage analysis. These records can include the submitted text, IPA output, character count, transcription type, IP address and, when you are signed in, your user ID.
Error Reports and Suggestions
When you submit an error report or terminology suggestion, we store the message and relevant fields such as the reported word, page URL and email address when provided. These records are reviewed by authorized administrators to improve the platform.
Content Submissions and Media
We store the title, description, text and account details associated with member content submissions so they can be reviewed. Uploaded video, podcast and PDF files are stored in Vercel Blob using public URLs. Files do not appear in the content listing before approval, but anyone with the URL can access them. Upload only files you intend to share.
Authentication and Sessions
Authentication is handled by Better Auth. Passwords are not stored in plain text. Session records include a session token, user ID, expiry information and may include IP address and user-agent data. Sessions expire after seven days unless renewed.
Cookies and Local Storage
The platform uses essential cookies for authentication. Some browser features, such as restoring a transcription draft or display preferences, may use localStorage on your device.
Third-Party Services
The platform is hosted on Vercel, uses Neon/PostgreSQL for application data, Vercel Blob for uploaded media and may use Vercel Analytics for aggregate visitor statistics. Google AdSense may use cookies and similar technologies according to Google's policies.
Security and Retention
We use HTTPS, server-side authorization checks, input limits, security headers and rate limits appropriate to the application. Application records are access-controlled; uploaded media uses public URLs accessible to anyone who has them. No online service can guarantee absolute security. Data is retained only as long as needed for operation, security, support or legal obligations.
Children's Privacy
TÜDAP does not knowingly collect personal information from children under 13. Parents and guardians should supervise children's internet use.
Contact
For privacy questions or data requests, contact eren@dilbilim.org.tr or iletisim@dilbilim.org.tr.