Privacy Policy

In effect from 11 October 2026.

This policy explains what information is collected when you use the DayBreach service at daybreach.dev, how it is used and how it is protected. The statutory notice on the processing of personal data is set out in the KVKK Information Notice; the two texts should be read together. If the English and Turkish versions differ, the Turkish text prevails.

1. Our basic principle

DayBreach collects only the information needed to provide the service and keep it secure. No advertising is shown, there is no tracking for advertising purposes, and personal data are not sold. Most of the site can be used without an account.

2. Information we collect

  • Account information: your email address and, if you choose to give one, a display name. Your password is not stored; only an irreversible hash of it is kept.
  • Sign-in with Google: the email address, name and account identifier that Google passes to us. Your Google password never reaches us.
  • Usage preferences: what you follow, what you save, your saved filters, your notification and language settings and, if you add one, your personal technology inventory.
  • Security records: time of sign-in, IP address, browser and device information, and your open sessions.
  • Usage statistics: the address of the page visited and a random session number that is erased when the tab closes. This record is not linked to your identity.
  • API usage: a hash of your key and the number of requests you make.
  • What you write to us: feedback messages and correspondence.

3. How we use the information

  • To open your account, maintain your session and protect your account.
  • To produce alerts on the subjects you follow and to arrange the feed for you.
  • To detect and prevent abuse, unauthorised access and attacks on the service.
  • To measure how the service operates, fix faults and improve the service.
  • To meet our legal obligations and protect our rights.

4. Who we share information with

Your information is shared only to the extent needed to provide the service, with service providers acting on our behalf (hosting, email delivery, backup) and with authorities empowered by law. If you choose to sign in with Google, authentication takes place through Google.

Company logos on the pages are loaded by your browser directly from third-party logo services, which may see your IP address when they are loaded.

5. Artificial intelligence

The AI summaries on the site are produced from public vulnerability records. Your personal data, information belonging to your account and organisations’ inventories are not sent to the providers we use for this purpose.

6. Organisation panel

The inventory an organisation uploads to the panel, and any information about individuals in that inventory, belongs to that organisation. DayBreach processes these data only on the organisation’s behalf and on its instructions; it does not share them with other organisations or send them to AI providers.

7. Security

Passwords are stored using a current hashing method. Session information is kept in cookies that scripts in the browser cannot read. Any user may turn on two-step verification. After repeated failed sign-in attempts the account is locked temporarily. Connections are encrypted. Nevertheless, no transmission over the internet and no method of storage offers absolute security; choosing a strong password that you do not use elsewhere is your responsibility.

8. Retention and erasure

Your information is kept for as long as your account remains open. When you ask for your account to be deleted, your account data are erased or anonymised; records that must be kept by law are held for the period prescribed.

9. Children

The service is not directed at persons under eighteen. If we learn that we are processing data belonging to a person under eighteen, we erase them.

10. Your rights and contact

Your rights concerning your personal data, and how to exercise them, are set out in the KVKK Information Notice. For questions: [İletişim e-posta adresi].

11. Changes

This policy may be updated to reflect changes in the service or in legislation. The current text is published on this page and takes effect on the date of publication.