PRIVACY

The data controller under Turkish law no. 6698 (KVKK) is [TBD: legal name and address].

Write to hello@wagon1001.com.

Or message @wagon1001 on Instagram.

If you only look around, nothing that identifies you. No analytics, no ad trackers, no third-party scripts. The fonts come from this site. We set one cookie, only when you sign in (see below).

Our host keeps standard server logs (IP address, time, page) for security. [TBD: host, country, how long]

The site also logs each request in one short line: its reference, the night, the number of seats, your Instagram username and a masked email address.

Your browser holds a few small notes from us: whether you have seen the intro, how much animation your device can take, and a frame counter. They stay on your device and say nothing about you.

When you ask for access, the form collects:

• your first name and last name
• your Instagram username
• your email address and phone number
• how many seats you ask for, from 1 to 4, including you
• which night it is for, and the link you came from, if the link says (Instagram, for example)

We also store when you sent it, your browser’s user-agent text, and a salted hash of your IP address. The hash helps us stop floods. We do not keep the address itself.

To send your request, you confirm your email address with a 6-digit code we email you. That makes you a member: we keep your email address, the first and last name, Instagram username and phone number you last used, and when you last signed in. There is no password. To come back, ask for a new code.

When you sign in we set a cookie that says so. It is strictly necessary for staying signed in, it is not used for anything else, and it ends after 30 days or when you sign out. We store only a one-way fingerprint of it, never the cookie itself.

We email you about your request: that it arrived, the decision, how to pay, your pass, the location the day before, and a reminder when your seat is about to be released. The sign-in codes are not kept after they are used or expire.

When you pay, card details go to [TBD: payment provider (iyzico)], not to us. We keep only whether you paid, how much, and the provider’s reference for the payment.

Photos from a night may appear in the archive. If you are in one and want it gone, write to us. It is removed within 24 hours.

To read your request and answer it. To contact you about that night: the decision, payment, the location, the door. To let you sign in and see your own requests and passes. To stop abuse of the form.

Nothing else. We do not sell your data and we do not use it for advertising. [TBD: legal basis under KVKK article 5]

The people who run the night. They read every request by hand.

The services that deliver our messages and store the requests: [TBD: email provider], [TBD: SMS provider], [TBD: payment provider], [TBD: team chat or database] and our host. The team chat or database receives each request in full, with the link to your pass. Some may keep data outside Turkey. [TBD: transfer basis]

Nobody else, unless the law makes us.

Requests, passes and member details: [TBD: period] after the night they were for. Payment records are kept for as long as accounting law requires: [TBD: period]. Server logs: [TBD: period]. Sign-in sessions end after 30 days. Then we delete the rest.

Photos stay in the archive until someone asks us to take them down.

Under article 11 of KVKK you can ask us:

• whether we process your data, and what we hold
• why, and who receives it
• to correct it, or to delete or anonymise it
• to object to a result that goes against you, and to claim damages for unlawful processing

Write to hello@wagon1001.com. To delete a request or your member details, write from the email address you used and send your reference. We answer within 30 days.

You can also complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).