Privacy Policy

Under the KVKK, the data controller is Asgard Journal. You can send requests regarding your personal data to info@asgardjournal.com.

• Identity and contact data: name, email address
• Account data: password (stored irreversibly hashed), session information, login IP
• Trade data: futures/forex trade records entered by the user, notes, screenshots
• Payment status data: subscription/Pro status (card details never reach us; they are processed by Whop)
• Technical data: cookies, browser/session information, log records

Your data is processed for the purposes of creating your account and authenticating you (formation and performance of the contract), providing in-Service trade tracking and analytics features, managing subscription/payment processes, keeping your account secure (fraud/spam prevention, legitimate interest) and fulfilling legal obligations, based on the legal grounds set out in Article 5 of the KVKK.

For the Service to operate, your data is shared, only to the extent necessary, with the following providers:

• Whop — subscription payment processing
• Brevo — email delivery (OTP verification, notifications)
• Neon (PostgreSQL) — database hosting
• Cloudflare R2 — screenshot/file storage
• Vercel — application hosting

Some of these providers may be located abroad; transfers are carried out in accordance with the KVKK's provisions on international data transfers and only to the extent necessary for the operation of the Service.

Your personal data is retained for as long as your account is active. When you delete your account, your data is deleted or anonymized within a reasonable period, except where we have legal retention obligations.

Anyone whose personal data is processed has the right, by applying to the data controller, to:

• learn whether their personal data is processed,
• request information about such processing,
• learn the purpose of the processing and whether the data is used in line with that purpose,
• know the third parties to whom the data is transferred, domestically or abroad,
• request correction of incomplete or inaccurate data,
• request deletion or destruction of the data under the conditions of Article 7 of the KVKK,
• object to an unfavourable outcome arising from analysis of the processed data exclusively through automated systems,
• claim compensation for damages incurred due to unlawful processing.

Requests are concluded within 30 days at the latest.

The Service uses a strictly necessary (httpOnly) session cookie to keep you signed in. Without this cookie it is not possible to stay logged in; no third-party advertising or tracking cookies are used.