Last updated: 19 October 2026 · Version 2026-10-19
KVKK Privacy Notice.
This English version is a translation for convenience; the Turkish version is binding.
Under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, we inform you about the personal data processed while you use TikSift.
1. Data controller
Data controller: Melikşah Canlı (a natural person, the operator of TikSift). Contact: email unsalableiletisim@gmail.com. No postal address is published; for a written application see section 8.
2. Personal data processed
| Category | Data |
|---|---|
| Contact | Email address |
| Transaction security | Password digest (hash), session records, IP address, browser details, sign-in and sign-out times |
| Customer transactions | Library data: your TikTok account ID and username, details of the videos in your repost and saved lists, the profiles you add, topics, app settings |
| Legal transactions | Version and time of the terms accepted, records of approvals and permissions |
| Marketing | Optional email permission and its changes |
| Advertising (only with permission) | Advertising cookies and the browser, device and IP details collected with them (ad partners; currently Google AdSense) |
Your library also contains the public usernames of other TikTok users, such as the authors of videos and other accounts that reposted them. This information has been made public by the persons concerned themselves and is processed only for your personal archive.
3. Purposes and legal grounds
| Purpose | Legal ground (KVKK Art. 5) |
|---|---|
| Setting up membership, managing the account, providing the service | Formation and performance of a contract (Art. 5/2-c) |
| Keeping your library in your account and bringing it to you on other devices | Performance of a contract (Art. 5/2-c) |
| Account security, preventing abuse and unauthorized access | Legitimate interest (Art. 5/2-f), legal obligation (Art. 5/2-ç) |
| Sending confirmation and password reset emails | Performance of a contract (Art. 5/2-c) |
| Keeping consent and acceptance records, handling legal claims | Establishing, exercising or protecting a right (Art. 5/2-e), legal obligation (Art. 5/2-ç) |
| Showing the public details of other users in the library | Made public by the data subject (Art. 5/2-d) |
| News and offers emails | Explicit consent (Art. 5/1) and approval for commercial electronic messages under Law No. 6563 |
| Showing ads and advertising cookies | Explicit consent (Art. 5/1) |
4. How data is collected
Your personal data is collected by automated means: from the sign-up and settings forms, electronically while you use the app, through the read requests the extension makes with your TikTok session and (if you allow it) through cookies.
5. Recipients and purposes
- Supabase: database, authentication and file storage (account, consents, library copy).
- Resend: sending confirmation and password reset emails.
- Cloudflare: hosting and serving the site.
- Ad partners (currently Google AdSense): only with your explicit consent, showing and measuring ads. The current list is in the Cookie Policy.
- Competent public authorities: only where there is a legal obligation.
6. Transfers abroad
Our service providers' servers are outside Türkiye: the European Union (Ireland) for Supabase; the providers' global infrastructure for Resend and Cloudflare. Your personal data is transferred to these servers to process your account, your library copy and your emails. Our ad partners' cookies, only if you allow them, are set directly between your browser and that partner.
This transfer is essential to the service itself: your account and library copy do not work without these servers. There is no adequacy decision by the Board yet, and the providers' contracts do not include the Board's standard contract (KVKK Art. 9); we keep the transfer only to this necessary extent and will switch to the standard contract when possible. If you do not want the transfer, do not create an account, or delete your account: your account and library copy are deleted from these servers.
7. Your rights
Under Article 11 of the KVKK, you can apply to the data controller to exercise these rights:
- To learn whether your personal data is processed,
- If it has been processed, to request information about it,
- To learn the purpose of processing and whether it is used in line with that purpose,
- To know the third parties in Türkiye or abroad to whom it is transferred,
- To request its correction if it is incomplete or inaccurate,
- To request its deletion or destruction under the conditions of Article 7 of the KVKK,
- To request that correction and deletion be notified to the third parties the data was transferred to,
- To object to a result against you arising from the analysis of the processed data exclusively by automated systems,
- To claim compensation if you suffer damage because of unlawful processing.
You can download a copy of your library inside the app (Settings → Back up), delete most of your data yourself (Settings → Account → Delete my account), and withdraw permissions based on explicit consent at any time (the email permission in Settings, advertising cookies under "Cookie settings" at the bottom of the pages).
8. Applications
You can send your application by email: write from the email address registered to your account to unsalableiletisim@gmail.com. If you have no account or write from another address, write anyway; we will ask for as much extra information as needed to verify your identity (e.g. a secure electronic signature). If you want to apply in writing with a wet signature, tell us at the same address and we will send a notification address.
Your application must clearly state your first name, surname and request. It is concluded free of charge within 30 days at the latest, depending on its nature; if the action requires an additional cost, the fee in the tariff set by the Board may be charged. If your application is rejected, you find the answer insufficient or you get no answer in time, you may complain to the Personal Data Protection Board within 30 days of learning the answer, and in any case within 60 days of the application date (KVKK Art. 14).