Data controller
For the personal data processed on this site, the data controller is Recep Aydoğdu, who operates OpenMoon. For data-subject requests and any privacy-related matter, the contact address is recepaydogdu@openmoon.com.tr. (Automated emails such as password resets are sent from noreply@openmoon.com.tr, which is not monitored for replies; please send your requests to the contact address above.)
Data you enter into the tools
Your Excel file, your photo, your JSON text, your Turkish national ID number, your tax ID number, your IBAN, your salary information, your rental income, your property or vehicle value information, your height, your weight, your date of birth — none of the data you enter into the tools is transmitted to OpenMoon's servers or to any third-party service. The operation happens entirely in your browser's memory, and that data is erased the moment you close the tab. You can verify this yourself, using your browser's "Network" tab while using any tool: you won't see a single request carrying your file/text content. (This section applies to all tools on the site; the To-Do List is not a "tool" but a separate account feature — see the section below.) Inputs in some of our tools (e.g. Body Fat Percentage, Calorie Needs, Ideal Weight) may constitute health information that could be considered a "special category of personal data" under KVKK Article 6; like all data described above, this information is processed exclusively in your browser, never reaches us in any form, and is never seen or stored by us. The same principle applies to the name, phone, email and address you enter into the vCard/calendar-event generator, and to the raw text you paste into the Text Anonymizer — these too are processed only in your browser. Likewise, the audio and video files you upload to the MP3/WAV Cutter & Joiner, Video Cutter & Joiner, and Media Converter tools are never sent to the server either; they are processed entirely in your browser's memory (via the Web Audio / WebCodecs APIs) and are discarded when you close the tab. The same principle applies to the message, passphrase, secret key, generated public/private keys, and encrypted/plain text you enter into the HMAC Generator, Bcrypt Hash Generator, RSA Key Pair Generator, Text Encrypt/Decrypt, and Password Strength Analysis tools — these are likewise processed only in your browser (using the Web Crypto API and/or the bcryptjs/crypto-js libraries loaded on the page) and are never sent to or stored on a server.
Live rate data (currency & gold tools)
To be able to show current rates, the Currency Converter and Gold Value Calculator tools fetch a price list from OpenMoon's server. This list is market data that our server periodically retrieves from public sources such as the CBRT (TCMB, exchange rates) and Truncgil (gold prices) and stores temporarily (for at most 3 days) — it is not personal data belonging to you. What matters is this: the amount or gold quantity you want to convert is still processed only in your browser and is never sent to the server; only the current prices travel from the server to your browser. You can also enter these prices manually and use your own value if you wish.
Settings we store in your browser (localStorage)
Some of your preferences are stored only on your own device, in your browser's localStorage. This information is never sent to us or to any other server:
- Theme preference — your dark/light mode choice.
- Your favorite tools — the list of tools you've starred.
- Recently used tools — the tool pages you've visited most recently, for quick access.
- Your game nickname — the nickname you last submitted to a leaderboard; we store it only on your device so the next submission form is pre-filled.
- Your progress in guides — the boxes you tick in the checklists and step trackers found in some guides are stored on your device only, scoped to that page, so you can pick up where you left off. They are never linked to your identity.
You can delete this data at any time from your browser settings ("clear site data"); you don't need to contact us for this, because this data only ever exists on your own device.
To-Do List account — first exception
The To-Do List tool offers an optional account so your lists can stay in sync across devices. If you choose to use this feature, unlike the rest of the site, the following data is stored in a database (MySQL) on our server:
- Your email address — used to sign in; not used for any other purpose (marketing, sharing with third parties).
- An irreversibly hashed version of your password — your actual password is never stored, and we cannot see it either.
- Task/list content — the task text, list names, priority and date information you write.
This feature is a deliberate exception on a site that otherwise requires no account: synchronization, by definition, cannot work without a server. You can permanently and irreversibly delete your account and all your data at any time using the "delete my account" button inside the app. If you forget your password, use "Forgot my password" and a one-time reset link — valid for 1 hour — is sent to your email address (from noreply@openmoon.com.tr); your email is never used for any other purpose (marketing, notifications, etc.) beyond this link. The legal basis for processing this data is your explicit consent together with the establishment and performance of the synchronization service (contract) you requested (KVKK Art. 5).
Game leaderboard — second exception
In our games (Sözyıldız, Moon Landing, Orbital Shot) you can optionally save your score to a public leaderboard. This is not required to play the games; submitting a score is entirely your choice. If you choose to save your score, only the following is stored in our server's database:
- The nickname you enter — visible publicly on the leaderboard. This is a nickname/handle; please do not enter your real name, email address, or any personal information that identifies you. Inappropriate or profane names are blocked automatically.
- Your score and the time it was submitted — how many points you scored in which game, and when you submitted it.
This feature requires no account; no email or password is requested when you submit your score, and the score record is not linked to any OpenMoon account (it is a completely anonymous nickname entry). Merely viewing the leaderboard (opening a game page) creates no cookie and sends no data belonging to you; a request is only sent to the server when you submit your score.
This data is processed based on the explicit consent you give at the moment you choose to submit your score, and it is kept until you request its deletion — since a leaderboard is by nature a permanent record of achievement, it is not automatically deleted after a set period. If you'd like a nickname or score you submitted to be deleted, you can request it from recepaydogdu@openmoon.com.tr, specifying the game/score/date in question. This feature is open to visitors of all ages; if you are under 18, we especially recommend that you avoid sharing any personal information when choosing a nickname, and that you use it under the supervision of a parent or guardian.
Dynamic QR code — third exception
The "Dynamic QR" feature in the QR Code Generator lets you change where a QR code points after it's created, without reprinting the code. For this to work, a fixed short link (e.g. openmoon.com.tr/q/AbC1234) and the destination address it redirects to must be stored on the server. This feature is only available with a signed-in Yapılacaklar (To-Do) account, and unlike the rest of the site, the following is stored in our server database (MySQL):
- The destination address (URL) and title — the link your dynamic QR redirects to and, if you entered one, the title you gave it.
- The link to your account — which dynamic QR belongs to you; tied to your account solely so that only you can manage it (edit/deactivate/delete).
Scans are not recorded. When a dynamic QR is scanned, the server only redirects to the destination you set; no data about who, when or from where it was scanned (IP address, date, location, scan count) is kept — there is no database field to hold it. You can edit, deactivate or permanently delete a dynamic QR you created at any time from within the tool; if you delete your account, your dynamic QRs are deleted along with it. The legal basis for processing this data is the establishment and performance of the redirection service you requested with your explicit consent (KVKK art. 5). Because the short link is public, we recommend entering only destinations you are comfortable sharing. To block sites hosting malware or fraud/phishing, the destination address you enter is checked once against the Google Safe Browsing service of Google LLC (based in the USA) when it is created and edited. For this check the destination address is sent to Google; this may constitute a transfer of data abroad (to the USA), and by choosing to use the Dynamic QR feature you give your explicit consent to this transfer. The destination address is not stored by us or by Google for any purpose other than the check. The accuracy or reliability of this check is not guaranteed; an address that appears safe may still carry risk.
Cookies
Apart from the advertising cookies described in the "Advertising" section below, OpenMoon does not use tracking cookies. The theme/favorites/history preferences described above are stored via localStorage, not cookies. There are only two technical/functional exceptions, and neither is for tracking purposes: (1) when you sign in to the To-Do List, a session cookie is used to keep you signed in (it expires automatically on logout or after 30 days); (2) when you submit a game score to the leaderboard, a technical session cookie may be created to limit abuse (excessive/automated submissions). Merely viewing the leaderboard creates no cookie.
Advertising and advertising cookies
OpenMoon may show ads via Google AdSense so that the tools, guides and games can stay free for everyone. This does not change the site's core principle: no content you enter or upload into the tools (files, text, calculation input) is ever sent to a server, and the ads cannot access this data — ads only process technical information about your page visit. To show ads, only if you give your explicit consent, Google LLC and its advertising partners (Google's ad technology providers) may place a cookie/identifier in your browser in order to personalize and measure ads based on your interests. These cookies are stored in your browser until you delete them or for the period Google sets (typically up to 13 months). During this, your IP address and device/browser information may be transferred to Google LLC (based in the USA); because there is no adequacy decision for the USA at the KVKK level, this transfer may carry potential risks and is made solely on the basis of the explicit consent you give after being informed of those risks (KVKK art. 9). Your consent for advertising cookies is obtained through a consent window (a consent management tool) that appears when personalized ads are enabled; you can change or withdraw your consent at any time through that tool. The "Cookie Preferences" button at the bottom of the page is also tied to this tool: when the tool is active you can manage or withdraw your preferences there, and while it is not yet active the button brings you to this information section. Until this consent tool is in place, advertising cookies are not used for personalization. You can also manage or block advertising cookies through your browser settings and Google's Ads Settings page. Even if you do not consent, the tools, guides and games continue to work without any restriction; in that case ads are either not shown at all or shown only as contextual (non-personalized) ads — even with non-personalized ads, basic technical data such as your IP may be processed for fraud prevention and frequency capping. The legal basis for processing advertising cookies is your explicit consent (KVKK art. 5). For more information, see Google's advertising technologies page.
Visit statistics
We measure site traffic with GoatCounter, which is cookie-free and does not collect personal data. This service produces aggregate statistics such as which pages are viewed and how often, does not retain your full IP address, and does not track you across other sites.
Third-party resources
Pages use open-source libraries loaded via CDN — Google Fonts for typefaces, Bootstrap Icons for icons, and in some tools, conversion libraries such as SheetJS, pdf-lib and js-yaml. When these libraries load, your browser sends a connection request to the relevant CDN (standard behavior for any web page), but the file/text content you enter into the tools is never sent to these CDNs — the libraries run only locally, in your browser.
Your rights and how to apply
Under Article 11 of the KVKK you have the right to learn whether your personal data is processed, to request information about it if it is, to ask for it to be corrected or deleted, and to request that the outcome be communicated to third parties. For a question about this policy or to make a request, you can reach us at recepaydogdu@openmoon.com.tr; so that we can handle your request correctly, please clearly state your full name and the subject of your request. We respond to requests to access, correct, or delete your data (your To-Do List account, a game score or a dynamic QR) within 30 days at the latest and free of charge, in accordance with Article 13 of the KVKK (Turkish Law No. 6698 on the Protection of Personal Data).
Changes
If this policy is updated, the change will be published on this same page. If a material change is made, the "last updated" date above will also be updated.
Language
The English translation of this Privacy Policy is provided solely for user convenience. In the event of any conflict between the Turkish text and the English translation, the Turkish text shall prevail.