Privacy Notice under the Personal Data Protection Law

GentleStories
Data Controller: Murat Şahinoğlu
Email: info@gentlestories.online
Website: https://gentlestories.com.tr

This page is an English translation of our Turkish privacy notice, provided for information purposes. The binding text is the Turkish original, which is governed by Turkish Law No. 6698 on the Protection of Personal Data. In the event of any discrepancy, the Turkish version prevails.

1. Purpose

This notice has been prepared to inform you about the personal data collected during the personalized children's book service operated by GentleStories, within the scope of Turkish Law No. 6698 on the Protection of Personal Data (the “PDPL”).

2. Personal Data Processed

The following data is processed as part of the service:

DataBelongs toPurpose
Email addressParent / person placing the orderDelivery of the book
Child's nameChildPersonalization of the book
Child's ageChildAdapting the content to the age group
Child's photo (optional)ChildPersonalization of the book's illustrations
Site usage data (pages viewed, clicks, scrolling)VisitorMeasuring and improving the usability of the site — only if cookie consent is given (see Section 8)

3. Purposes and Legal Basis of Processing

Your personal data is processed for the purposes of;

on the basis of your explicit consent, pursuant to Article 5/1 of the PDPL.

4. Transfer of Personal Data

Within the scope of the technical infrastructure of the book creation process, your personal data is transferred to the following third-party service providers:

These transfers constitute transfers of data abroad and are carried out on the basis of your explicit consent within the scope of Article 9 of the PDPL.

5. Retention Period

DataRetention / Deletion
PhotoAutomatically deleted 30 days after the book is delivered. For orders whose payment is not completed or fails, it is deleted 30 days after the record is created.
Child's nameRetained for as long as the book link remains accessible, since the book itself contains this information
Child's ageRetained for as long as the book link remains accessible (the language and length of the story are generated according to it)
Email addressRetained together with the order record; deleted upon your request
The book and its illustrationsRetained for as long as the link remains accessible
Site usage data (Clarity)Screen interaction recordings remain accessible in the Microsoft dashboard for 30 days and heatmap data for 9 months; access closes afterwards. If you withdraw your consent, no new data is collected.

Why is the photo kept for 30 days? The book's illustrations are generated using the child's photo as a reference. If a page comes out flawed, that photo is the only way to regenerate the book so that it still resembles the same child. After the photo is deleted the book can still be read, but its illustrations can no longer be regenerated.

No personal data is retained longer than necessary for the provision of the service. You may request the deletion of your data at any time via the email address below (see Sections 6–7).

6. Rights of the Data Subject

Under Article 11 of the PDPL, you have the following rights:

7. How to Apply

To exercise the rights set out above, you can reach us by sending an email to info@gentlestories.online. Your application will be answered within 30 days at the latest.

8. Cookies

There are no strictly necessary cookies on this site — you can use it fully without accepting any. Only with your explicit consent does Microsoft Clarity run to measure how the pages are used, placing the two cookies below. If you do not consent, Clarity is never loaded: not a single cookie is placed in your browser and not a single request is sent to Microsoft.

CookieTypeRole
_clckFirst-partyDistinguishes the visitor by a pseudonymous identifier
_clskFirst-partyLinks page views within the same visit

Microsoft's advertising cookies (MUID, CLID, ANONCHK, MR, SM) are disabled on this site: Clarity is explicitly told that ad storage consent is denied. We do no advertising tracking.

What you type into the form is never recorded. While Clarity records screen interaction, the entire order form is masked: the child's name, age, the photo you upload, your email address and the topic you select are not transferred to Microsoft. What is transferred is only which part of the page was viewed and where it was clicked.

Clarity data is held on Microsoft Azure infrastructure, abroad. Retention periods are listed in the Section 5 table above.

The site also runs Umami to count visits. Umami is hosted on our own server, uses no cookies, does not record your IP address and transfers data nowhere; it therefore requires no consent and keeps working even if you decline the banner.

You can change your choice at any time. The button below clears your choice, removes the cookies Clarity has set, and asks the question again.

Last updated: 31 August 2026