Privacy Policy

Axiean (axiean.com) is operated by Vahid Aslani, an individual based in Kayseri, Türkiye, who is the controller of your personal data (“we”, “us”). For anything about your data, write to hello@axiean.com.

This policy covers the Axiean website and the emails it sends. It is written to meet the European Union’s General Data Protection Regulation (GDPR) and Türkiye’s Personal Data Protection Law No. 6698 (KVKK), and it applies to everyone, wherever you live.

When you create an account: your email address, username, display name and preferred language, and your password, which we store only as a one-way hash (Argon2id): we can’t read it. We also record when you signed up, when you confirmed your email address, and the version of the Terms in force then.

If you sign in with Google or GitHub (when we offer it): the provider’s identifier for your account, your email address and whether it’s verified, your name, your profile picture’s address and, on GitHub, your username. We ask only for your basic profile. We never get your password there, or access to your files, mail or repositories.

Your public profile: what you choose to add, such as a photo, a bio, professional role, location, website, GitHub username and social links.

What you post and do: projects and everything in them, build log entries, comments, organizations, their members, roles and invitations, votes, saved projects, follows, reports you file, catalog suggestions, and the earlier versions of what you edit, which we keep to investigate abuse. Images you upload, such as your profile photo or a project’s logo, are re-encoded before we store them, which removes their metadata, a photo’s location included. We also create notifications for you.

Sign-in and security records: for each session, the IP address and browser it started from, and when it was created, last used and ended. To limit attacks on accounts, we briefly count sign-in attempts and emails sent, per IP address and per email address. These counters live only in the server’s memory and clear within an hour. A cookie also marks browsers you’ve signed in with, so that limits on an account don’t lock you out of it.

Technical logs: our servers log requests (the address asked for, the response, timing and the browser’s description) to keep Axiean running. They don’t record your IP address.

When you write to us: your email address and what you tell us.

We don’t ask for, and don’t want, sensitive data such as health, religion or political opinions. Please don’t put it in what you post.

• We don’t show ads, and we don’t use analytics or tracking tools. Axiean loads no third-party scripts, and its fonts are served from its own servers.
• We don’t sell or rent personal data, or share it for advertising.
• We don’t build profiles of you for marketing, and we don’t make decisions about you based solely on automated processing. Rankings order content by rules that apply to everyone; decisions about accounts are made by people.
• We don’t use your content to train AI models.
• We don’t send marketing emails. If we ever start a newsletter, you’ll get it only if you ask for it.

Under the KVKK, the same processing relies on the performance of a contract, legal obligations, the establishment, exercise or protection of a right, and our legitimate interests (Article 5(2)(c), (ç), (e) and (f)).

Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time (see Your rights).

Public, to anyone: your username, display name, profile details, the date you joined, your published and archived projects, their build log entries, your comments, the organizations you belong to, the people you follow and who follow you, and how many votes a project has.

Private: your email address, the projects you’ve saved, which projects you voted for, your reports, notifications, drafts (visible only to you or your organization’s members), sign-in records, and anything else in your Settings.

Public pages are open to search engines and to AI crawlers, which may index, quote or summarize them under their own policies. Once something has been copied elsewhere, deleting it from Axiean can’t remove those copies. You can ask search engines to refresh their copy.

If you sign in with Google or GitHub, your profile picture there is shown on Axiean until you upload a photo or remove it, loaded from the provider’s servers, which can see that a browser requested it.

Moderators, who are Axiean’s administrators, can see account details, including email addresses, and the history of moderation decisions, to do their work.

We share personal data only with service providers who help us run Axiean, under contracts that limit them to what we ask:

We may also disclose data when the law requires it, to answer a valid request from a court or authority, or to protect someone’s safety or rights. If Axiean is ever taken over by someone else, such as a company set up to run it, your data would pass to them under this policy, and we would tell you first.

Axiean’s data is stored on servers in Germany, in the European Union. Axiean is run from Türkiye, so the data is also accessed from there, and some of the providers above are based in the United States.

When data leaves the country it was collected in, we use the safeguards the law requires, such as the providers’ data processing agreements, which include the European Commission’s standard contractual clauses where they apply, and the standard contracts required by the KVKK. You can ask us for a copy of these safeguards.

Content that has been reported waits for a moderator’s decision before it is deleted, even beyond these periods.

Axiean uses only cookies it needs to work, and stores two preferences in your browser. None of them track you across sites, and none come from third parties, so we don’t ask for consent to them.

The sign-in cookies are HttpOnly: the page’s scripts can’t read them.

You can:

• see and copy the personal data we hold about you, in a portable format;
• correct it: most of it in Settings, the rest by writing to us;
• delete it: delete your account in Settings, or ask us to erase specific data;
• object to processing based on our legitimate interests, including being featured in Axiean’s own channels;
• restrict processing while a question about your data is being settled;
• know whether we process your data, why, and who receives it (KVKK Article 11 sets out the same rights, and the right to claim compensation for unlawful processing).

To use these rights, write to hello@axiean.com from the email address of your account, or tell us how to confirm who you are. It’s free. We answer within 30 days. If a request is complex, we may need longer where the law allows, and we’ll tell you why.

If you think we have mishandled your data, please tell us first. You can also complain to a data protection authority: in the European Union, the one in the country where you live or work (in Spain, the Agencia Española de Protección de Datos); in Türkiye, the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu), after applying to us; elsewhere, the authority where you live.

We protect your data with encrypted connections (HTTPS) everywhere, one-way password hashing, sign-in cookies that page scripts can’t read, an application server that only the website can reach, limits on sign-in attempts, access to data limited to the people who run Axiean, and a log of moderators’ actions.

No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

Accounts are for people aged 16 or over. We don’t knowingly collect data from younger people. If you believe someone under 16 has an account, tell us at hello@axiean.com and we will delete it.

We will update this policy when what we do with data changes. When a change matters, we will tell you before it takes effect, by email or with a notice on Axiean. The date at the top of this page is when this version took effect.

Vahid Aslani, Kayseri, Türkiye. Email: hello@axiean.com.