Privacy
Short version: we collect what you type into the form, use it only to answer you, keep it for 12 months at most and delete it when you ask.
Last updated 19 October 2026
Who is responsible
Outcrop (outcrop.hellobasalt.dev) is a service of Basalt Studio (hellobasalt.dev), an independent software studio. Basalt Studio is the controller of the personal data described here (the “veri sorumlusu” under Türkiye’s data protection law, KVKK). For anything about your data, write to privacy@outcrop.hellobasalt.dev.
If you only visit the site
There are no accounts, no advertising and no tracking scripts or advertising cookies on this site. Fonts and scripts are served from this site, not from third parties.
Visit statistics. We use Cloudflare Web Analytics to count visits. It shows us aggregate numbers only (page views, country, browser type, referring site and load speed), sets no cookies and creates no identifier that recognises you.
Security cookie. If Cloudflare’s security system sees unusual traffic, it may show a short check and set a security cookie called cf_clearance. It is used only to protect the site, never for ads or analytics.
Server records. Our host, Cloudflare, processes technical records such as IP address, browser details and request time to deliver the site and stop attacks. We do not keep these records ourselves.
If you join the founding list
The form at /start/ collects:
- your email address (required) and name (optional);
- your product’s website, the package you are interested in, what you write in the message box, and whether you would consider being a founding client;
- the date and time you sent it.
To stop the same address flooding the form, we keep a one-way hash of your IP address for one hour. It is not stored with your submission and cannot be turned back into your IP address.
Why. To answer your request and to write to you once when bookings open, with a scope and price for your site. That is a step you asked for before a possible contract (GDPR Article 6(1)(b); KVKK Article 5(2)(c)). We do not add you to a newsletter, send you advertising, share your details with anyone else or sell them.
Your website. When we prepare a scope, we may look at your public website with the same tools we use for audits. We do not send your name or email address to AI services.
If you email us
Mail to hello@outcrop.hellobasalt.dev, support@outcrop.hellobasalt.dev and privacy@outcrop.hellobasalt.dev is forwarded by Cloudflare Email Routing to the Basalt Studio team’s inbox and kept there so we can reply.
Where the data is stored
- Cloudflare, Inc. (USA): hosting, the storage behind the form (Workers KV), visit statistics and email forwarding. Cloudflare’s network runs in many countries, so your data may be processed outside Türkiye and outside the EU, under Cloudflare’s data processing addendum.
- Our email provider: holds the messages you send us.
- Public authorities, only where the law requires it.
How long we keep it
- Form submissions: deleted automatically 12 months after you send them, or sooner when you ask.
- If you become a client, we keep what the project and the law need (contracts and invoices have legal retention periods).
- Emails: up to 2 years after your request is closed.
Your rights
You can ask us what we hold about you, have it corrected or deleted, object to how we use it, or ask for a copy. Write to privacy@outcrop.hellobasalt.dev; we answer within 30 days and free of charge. You can also complain to your data protection authority: in Türkiye the Kişisel Verileri Koruma Kurumu, in the EU the authority in your country.
The Turkish information notice required by KVKK is on the KVKK aydınlatma metni page.
Changes
If we change how the site handles data, we update this page first and change the date at the top.