This policy explains what personal data is processed when you visit meybrain.com.
It also covers career applications and anything you send us by email.
There are no payments, advertising, or third-party analytics or tracking tools.
1. Data controller
Meybrain Technologies is the controller for personal data processed on this site.
You can reach us about anything at info@meybrain.com.
Address
İcadiye Mahallesi
Kayıkçı Şükrü Sokak No: 2, Daire: 1
Üsküdar / İstanbul
2. What is processed
2.1 Server logs
The site is delivered through Cloudflare's content delivery and security network.
The server hosting the site and Cloudflare keep a technical record of each request.
These records contain:
Your IP address
Your browser and operating system
The address requested
A timestamp and the response code
The purpose is keeping the site up and secure.
The records help diagnose faults and block abuse and automated attacks.
The lawful basis is legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5/2-f).
These records are never used for advertising or profiling.
2.2 When you email us
There is no general contact form on this site; contact is by email directly.
When you write to info@meybrain.com, we receive whatever you send.
This includes your name, your organisation, your message and any attachments.
We use it only for these purposes:
Answering your question
Setting up and running any working relationship
The lawful bases are KVKK Art. 5/2-c (entering a contract) and Art. 5/2-f (legitimate interest).
Our email runs on Google Workspace; correspondence is stored on Google's servers.
Please do not send us sensitive information we do not need.
Evaluating a proposal never requires identity documents, card numbers or health data.
2.3 Career applications
Applications arrive the way the careers page states: the application form or email.
An application includes:
Your full name and email
Area of interest, application type and language
Your CV
An optional portfolio link and short note
Form applications also record that you have read this notice.
The submission date, application reference and review status are also stored.
The purpose is assessing your experience for potential work needs.
Where appropriate, we use it to contact you.
The lawful bases are KVKK Art. 5/2-c (entering an employment contract) and Art. 5/2-f.
Applications are not scored automatically or assessed with AI.
Form applications are kept in private server storage with no public file address.
Only authorised staff can access applications.
Applications are deleted within 180 days at the latest.
To request earlier deletion, email info@meybrain.com.
If you applied through the form, include your application reference.
Do not include sensitive information that is not needed for your application.
This includes identity numbers, health information, bank details or similar data.
Applying does not indicate a specific vacancy or a commitment to hire.
2.4 Blog read counts
When you open a blog post, a read is recorded on our own server.
Your IP address is kept only as a keyed hash (HMAC), never as the address itself.
The record also holds your browser's user agent and the address of the page you came from.
The purpose is aggregate read statistics for our posts; no individual profiles are built.
The lawful basis is legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5/2-f).
A post counts once per browser tab, using the tab's session storage; no cookie is set.
The records are kept as long as the post and are deleted with it.
3. Cookies and preferences
A cookie remembers your language preference.
An extra session cookie is created only when staff sign in to the private inbox.
Cloudflare may set strictly necessary security cookies to block attacks.
There are no analytics, advertising, social or retargeting cookies.
meybrain-locale
Remembers whether you are reading in Turkish or English.
This takes you to the right language on your next visit.
It lasts one year. Its entire contents are the value “tr” or “en”.
You can delete or block it in your browser settings.
The site works fully either way; only your language preference is forgotten.
An address without a language prefix follows your browser's language setting.
Admin session cookie
Created only on staff sign-in to authenticate inbox access.
This HttpOnly session cookie lasts up to 8 hours and is removed on sign-out.
Theme preference
Your light or dark theme choice is stored only in your browser.
It is not sent to the server or used to track visitors.
You can remove it by clearing your browser data.
Galaxy preference
Your preference to pause the galaxy is kept in your browser's session storage.
It is remembered within the same tab.
It is not sent to the server or used to track visitors.
The welcome animation plays again when the page is reloaded.
It does not repeat as you move between pages on the site.
4. Recipients and transfers abroad
Your data is shared only with these providers, for the purposes in this policy:
Cloudflare: delivering the site and protecting it from attacks
Google (Google Workspace): email correspondence and emailed applications
Our hosting provider: the server that runs the site and holds form applications
Typefaces, images and code are served from the same origin as the page.
There is no embedded map, video or social widget.
Cloudflare's and Google's servers may be located outside Türkiye.
Your data may therefore be transferred abroad.
Such transfers follow the safeguards required by KVKK Art. 9.
Where the law requires it, data may be shared with competent public authorities.
5. Retention
Server logs
Kept for 90 days at most, then deleted.
Email correspondence
Kept for as long as the relationship requires.
If it becomes commercial, the retention period set by applicable law applies.
Career applications
Deleted within 180 days at the latest.
They are removed earlier on a deletion request.
Blog read counts
Until the post they belong to is deleted.
Language cookie
One year, or until you delete it.
Theme preference
Until you change it or clear your browser data.
Admin session cookie
Up to 8 hours or until sign-out.
6. Your rights
Under KVKK Art. 11, you have the right to:
Learn whether your personal data is processed
Request information about any processing
Learn the purpose of processing and whether data is used accordingly
Know the third parties, in Türkiye or abroad, to whom data is transferred
Request correction of incomplete or inaccurate data
Request erasure or destruction under KVKK Art. 7
Request that corrections and erasures be notified to recipients
Object to an adverse outcome of solely automated analysis
Claim compensation for damage caused by unlawful processing
If the GDPR applies to you, your rights under the GDPR are also reserved.
Send your request in writing to our address or by email to info@meybrain.com.
We answer within thirty days at the latest.
If our answer does not satisfy you, you may complain to either:
The Turkish Personal Data Protection Board
Your local supervisory authority
7. Changes
When this policy changes, the date above changes with it.
If a feature changes how data is processed, we update this text before it goes live.