Menu visit statistics — privacy notice
1. Contact
For anything about this notice or your personal data, write to us at [email protected].
2. What data is processed
When you open this menu, the opening is counted: the time, the menu language (Turkish/English) and whether you arrived from a QR code or a link. As you scroll, which categories you looked at is counted too (only which category, not who you are).
To tell whether the same person opened the menu several times in one day, a one-way digest is made from your IP address and browser information with a random key that changes every day. It is a pseudonymous digest: once the daily key is discarded it cannot be linked back to you, and it is only used to estimate the number of unique visitors (the in-memory digest used for rate limiting is separate; see below). The key lives only in the server’s memory and is never written anywhere. In addition, when you open and browse the menu your IP address is processed in the server’s memory as a one-way digest to rate-limit excessive and abusive requests; this digest is not written to disk or a database, stays only in memory, is no longer used after its one-minute counting window, and disappears at the latest when the server restarts. The Sofrava application does not write your IP address or browser information to any record or log, and the application sets no cookies. The hosting and content-delivery infrastructure (Cloudflare) may process connection data as part of how it operates; see section 6.
When the branch-selection page of a brand with several branches is opened, only the opening itself is counted in the same way (the time, the language and the QR/link source); no unique-visitor digest is made for that page and no personal data is kept; the in-memory IP rate limiting described above also applies to that page.
3. Purpose
To show the venue how much and how its menu is used (total openings, estimated unique visitors, QR/link, language, time of day and category interest). Your data is not used for advertising or marketing.
4. Legal basis
KVKK art. 5/2-f: provided it does not harm your fundamental rights and freedoms, letting the venue see menu usage statistics is necessary for our legitimate interests.
5. Retention
The visitor digest is deleted within about two days, as other menu visits are recorded on the platform; only the count for that day remains. Because the daily key is not kept, the digest cannot be reversed later.
Totals (openings, hours, language, source, category interest) are not personal data and are kept indefinitely.
6. Transfers
Your data is not shared with third parties. These service providers are used to run the service; both are outside Türkiye, so each row is a transfer abroad and will be assessed separately under KVKK art. 9:
- Hosting (Hetzner Online GmbH, Germany): the counts are stored on a server at this provider.
- Content delivery and security (Cloudflare): all requests to the site, including your IP address, pass through this provider’s network.
7. Your rights and how to apply
Under KVKK art. 11 you may ask whether your data is processed, request information, and ask for correction or deletion. Because the visitor digest cannot be linked to your identity, individual requests about it usually cannot be fulfilled; you can still apply. You can send requests to [email protected]; for the full list of rights, see the Sofrava privacy notice.