Privacy Policy

Last updated 29 September 2026

Who we are

Efe Barkın Köse, a sole proprietorship at Şehit Cengiz Karaca Mah. 1057 Cad. No: 25 Daire: 8, Çankaya, Ankara, Türkiye, is the data controller for sinua.dev and Sinua Studio. For anything about your data, email [email protected].

What we collect

We keep what Studio needs to work, and no more.

Your email address, which is your account.
Sign-in codes. We store only a hash of each code, for up to 10 minutes.
Sessions: a session record with the IP address and browser name it was opened from, for up to 30 days, so you stay signed in and we can spot misuse.
Your designs: the FX Spec files you save in Studio.
Your subscription status: whether you're on a trial or subscribed, until when, and the Polar ids that link your account to your subscription.
Short-lived security records, such as request counts per address used for rate limiting.

We don't see or store your card details or billing address; Polar and its payment processor Stripe handle them.

sinua.dev itself sets no cookies and runs no analytics. The documentation's live demos run in your browser and never use your microphone.

Why we use it

To provide Studio: sign-in, your designs, and access that matches your subscription (performance of our contract with you).
To keep the service secure and prevent abuse (our legitimate interest).
To meet legal obligations, such as tax records kept by our merchant of record.

We send you email only about your account: sign-in codes, and notices about your subscription or changes to these terms. We don't sell your data or use it for advertising.

Who processes it for us

Cloudflare runs sinua.dev and Studio's servers.
Neon hosts Studio's database, in the European Union (Frankfurt).
Resend sends sign-in emails, from the European Union (Ireland).
Polar is our merchant of record. It processes your purchase, invoices and taxes as an independent controller under its own privacy policy, with Stripe as its payment processor.

Cookies

Studio at studio.sinua.dev uses a single essential cookie that keeps you signed in. It's needed for the service, so there's no consent banner. There are no tracking or third-party cookies on either site.

How long we keep it

Your account and designs: until you delete your account.
Sessions: up to 30 days. Sign-in codes: up to 10 minutes.
After you delete your account, its data disappears from our database right away and from our database backups within 7 days.
Billing records are kept by Polar for as long as tax law requires.

International transfers

Some of these providers are companies based in the United States. Where your data leaves the European Economic Area or Türkiye, the transfer is covered by the providers' standard contractual clauses and the safeguards required by applicable law.

Your rights

Depending on where you live, including under the EU and UK GDPR and Türkiye's Personal Data Protection Law No. 6698 (KVKK, Article 11), you can ask to access, correct, delete or export your data, to restrict or object to its processing, and to learn how it's used and who it's shared with.

Delete your account yourself from the Studio's account menu (Delete account). Cancel an active subscription first.
For anything else, email [email protected]. We answer within 30 days.
You can also complain to your data protection authority; in Türkiye, that's the Personal Data Protection Authority (KVKK).