Your list is shared, you are not tracked.

To share a list by link, the list has to live on a server. Kurdele’s data is kept on a server that Metehan Biçer set up and runs himself, on Oracle Cloud infrastructure. The data is not sent to any advertising, analytics or data service, not sold, and not shared with any other company.

Only what you type or add in the app is stored:

• Lists: the list title, occasion, date if you set one, colour, note, and the display name shown on your list (for example “Made by Alex”).
• Gifts: name, price text, store name, product link, note and picture. The picture is either a link to the image on the product page or a photo you uploaded; photos are resized on your phone and saved as JPEG before upload.
• Claims: when a friend taps “I’ll get it”, the name they type and which gift they claimed.
• Reports: when a list is reported, which list it was and the reason that was typed.

Kurdele does not collect your email address, phone number, location, contacts or device identifiers. There are no accounts, sign-ups or logins. Your name is just the name you type so it can appear on your list and on gifts you claim; it does not have to be your real name.

Because there are no accounts, Kurdele creates a random secret on your iPhone the first time it runs and keeps it in the iOS Keychain. The app uses this secret when you edit or delete your lists. The server stores only a SHA-256 hash of it, not the secret itself; the secret cannot be recovered from the hash.

• Anyone with the link. Every list has a random link (kurdele.metehanbicer.com/l/…). Lists are not listed anywhere and their pages are closed to search engines (noindex), but anyone who has the link can open the list. Share it only with people you want to see it.
• Who sees claims: friends see that a gift is taken and the name the claimer typed. As the list owner, you do not see what was claimed unless you turn on Show me what is taken in the list’s settings.
• The web page: when friends open a list in a browser, the page keeps a random key and the name they typed in their browser’s local storage, so it remembers which gifts they claimed. No cookies are used. Product images load from the store’s own servers, because their links are what the list stores.

Kurdele accesses your photos or camera only when you pick or take a photo for a gift. That photo is used only as the gift’s picture, and anyone who opens the list can see it. No other photos are read or uploaded.

Store pages you open with “Browse a store” load directly from the store’s own servers, just as in Safari, and the store may process data under its own privacy policy while you browse. Kurdele does not record the pages you visit. It reads the product’s name, image and price from the open page only when you tap Add to list.

Kurdele has no analytics, no ads and no advertising identifier (IDFA). The app contains no third-party SDKs that collect data. Kurdele does not track you across other companies’ apps or websites, so it never asks for tracking permission.

That is why its App Store privacy label lists only Name, Photos and Other User Content, all used for app functionality only, not linked to your identity and not used for tracking.

To limit abuse, the server counts requests that arrive from the same IP address in a short time. These counters are kept only in memory and cleared within minutes; IP addresses are not stored long-term and are not linked to your lists.

You can report a list you find inappropriate from the app or from its web page. I review reports myself; a list that breaks the law or the terms of use may be removed together with its gifts. A report stores only the list and the reason typed, not who sent it.

• In Kurdele, tap Settings › Delete my data and all your lists, gifts, claims and uploaded photos are deleted from the server immediately. This cannot be undone.
• Deleting a single list with Delete list removes the list, its gifts and its claims from the server too; the link you shared stops working.
• Undoing a claim with Undo deletes the claim and the name you typed.
• Use Delete my data before you delete the app: because the secret lives on your phone, I may not be able to delete your lists on your behalf once the app is gone. If that happens, write to me with the list’s link and I will help.

This site uses no cookies and no analytics or advertising tools, and it serves its own fonts, so opening a page sends no requests to other companies. The site is hosted on Cloudflare, which may process technical connection data such as IP addresses to deliver pages securely. I don’t use this data for analytics or advertising.

Under Article 11 of Türkiye’s Personal Data Protection Law No. 6698 (KVKK), you have the right to learn whether your personal data is processed and to request information if it is; to learn the purpose of processing and whether data is used for that purpose; to know the third parties in Türkiye or abroad to whom it is transferred; to ask for incomplete or incorrect data to be corrected and for data to be deleted; to ask for these actions to be notified to those third parties; to object to a result against you arising from analysis by automated systems; and to claim compensation if you suffer damage from unlawful processing.

The information in Kurdele is processed to provide the list sharing service, that is, to perform our contract; limiting abuse and reviewing reports are my legitimate interest. You can delete your data in the app at any time. Send any request about your rights to metehanbicer006@gmail.com; I will reply within 30 days at the latest.

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, correct and erase your personal data, to restrict or object to its processing, to data portability, and to complain to the data protection authority where you live. Lists, gifts and claims are processed because this is necessary to provide the service (GDPR Article 6(1)(b)); limiting abuse and reviewing reports rely on legitimate interests (Article 6(1)(f)). You can send requests to the same email address.

If I update this policy, I will publish the changes on this page and update the effective date at the top. If a change is significant, I will also point it out in the app or on this site.

Metehan Biçer, developer of Kurdele. Email: metehanbicer006@gmail.com. Step-by-step help is on the support page.