Privacy Policy

indieSeen (indieseen.com) is a discovery and showcase platform for independent makers. This Privacy Policy explains what personal data we collect, how we use it, and your rights.

By using the platform, you acknowledge that you have read this policy.

Account data: email, developer name (username), full name (account management only; not shown on your public profile), password hash (bcrypt), avatar, bio, website, and social/developer links.

OAuth sign-in: email, name, and profile image provided by Google or GitHub.

Project content: titles, descriptions, media, links, and theme settings you submit.

Usage data: session cookies, project view counts, ratings, and security logs.

Communications: your email address for verification and (future) account notifications.

To create and manage your account and sessions.

To publish and display your projects to other users.

To keep the platform secure, prevent abuse, and comply with legal obligations.

To send verification and security-related emails.

To improve the service using aggregated, non-identifying statistics.

We process data to perform our contract with you (providing the service), for legitimate interests (security and operations), and based on consent where required (e.g. terms acceptance at registration).

We do not send marketing emails without separate opt-in.

Your public profile and projects are visible to anyone visiting the site.

Processors: hosting (Vercel), database (MySQL), file storage (Cloudflare R2), email (Resend), and OAuth providers (Google, GitHub) — only as needed to operate the service.

We may disclose data when required by law.

We do not sell your personal data.

We retain data while your account is active.

When account deletion is available, data will be removed within a reasonable period; backup copies may persist briefly.

Security and legal logs may be kept for compliance periods.

You may request access, correction, deletion, or restriction of processing where applicable law grants these rights.

Many fields can be updated directly in profile settings.

Contact privacy@indieseen.com; we aim to respond within 30 days.

Session cookie (indieseen_session): maintains signed-in state; httpOnly and signed.

Language is handled via URL (/tr, /en); no persistent tracking cookies are used.

Performance analytics (Vercel Speed Insights): loaded only if you accept it in cookie preferences; collects anonymous web vitals.

We do not use advertising or targeting cookies. You can change your choices anytime via «Cookie preferences» in the footer.

Passwords are stored as bcrypt hashes.

HTTPS is required. Session cookies are signed.

We apply reasonable safeguards, but no online service can guarantee absolute security.

We may update this policy. The date at the top will change; significant updates may be announced by email when possible.

Continued use after an update means you accept the revised policy.

Privacy inquiries: privacy@indieseen.com

Data controller: indieSeen / indieseen.com