Privacy notice

The controller is Aytug Yayman (a private individual). Questions and requests about this notice can be sent as described under “How to make a request” below.

For every request to the site or to the update server:

• your full IP address (not shortened)
• the date and time of the request
• the page or file requested: address and query parameters (values that look like passwords or keys are removed before storing), HTTP method, status code, bytes sent and response time
• the User-Agent your browser sends, and the browser, operating system and device type derived from it
• the referring page (Referer), i.e. which link brought you here
• your browser's preferred languages (Accept-Language)
• approximate location: the country (added to the request by Cloudflare) and a city and region estimated from the IP address. No street address or coordinates are recorded.
• the request ID Cloudflare assigns (Ray ID)

There are no forms, accounts or comments on this site. Your name, e-mail address and similar data are not collected.

When the automatic update check is on (at most once a day), or when you check for updates yourself, the ZenStation app asks updates.aytugyayman.com.tr for update information and, when there is a new version, downloads the package. The data listed above is recorded for these requests too. In addition:

• the app's version (the app sends it in the User-Agent as ZenStation/version)
• the update channel (for example stable or beta) and the requested file
• the version of a downloaded package and whether the download was completed

The app sends no other information about your computer (such as hardware, user name or serial numbers) with these requests. These records are also used to estimate on roughly how many computers, and with which versions, the app is used. You can turn the automatic update check off on the app's Settings page.

With Share on ZenStation's Memory page you can publish your memory configuration on this site. The app first shows every field it will send, and nothing is sent until you press Upload.

A published share is public: it is listed on /en/timings, anyone with the link can open it, and others can compare it with their own configuration. What is published:

• the nickname, if you enter one
• the CPU model and codename, motherboard, BIOS, AGESA and SMU version
• the memory type, speed, total size, number of channels and the modules (slot, maker, part number, capacity, rank, DRAM maker)
• timings, clocks, voltages and impedances
• if you choose so, the results of your latest memory benchmark
• the ZenStation version and the date of the share

Serial numbers, user names, computer names, MAC or IP addresses are not part of a share, and the server has no field to keep them in.

With every share the server also keeps the IP address, country and browser information (User-Agent) of the upload. These are not published. They are used to prevent abuse and to apply the upload limits, and they are deleted together with the share. For the upload limits, the IP address and the time of an upload are also kept for 48 hours.

A share stays online until you or the site owner delete it. To delete it, use “Delete this share” in the app's list of your shares; the app does this with a secret key that is kept only on your computer. If you no longer have that key (for example after reinstalling Windows), send a request as described below, with the link of the share.

The site owner may hide or delete a share or its nickname that is inappropriate.

You make the published data public yourself by starting the share; under the GDPR the legal basis is the consent you give by pressing Upload (Article 6(1)(a)), and under the KVKK it is data made public by you (Article 5(2)(d)). You can withdraw it at any time by deleting the share. For the IP address, country and browser information the basis is the legitimate interest in keeping the site secure.

The server records this data automatically for every request you make to the site or to the update server (server access logs). The pages contain no cookies, ads or tracking pixels.

Cloudflare adds its own measurement script (Cloudflare Web Analytics (opens in a new tab)) to the pages. Without using cookies, it sends the page address, the referring page, the page load time and browser information to Cloudflare. No other third-party analytics service is used.

Your light / dark theme choice is only kept in your browser (localStorage) and is never sent to the server.

The admin area (/admin) uses a strictly necessary session cookie for the site owner's login only. Visitors get no cookies.

• Security: detecting and blocking attacks, abuse and automated scans
• Running the service: finding errors and checking that the server works
• Statistics: numbers of visits, the most read pages, the countries and links visitors come from
• Update service: delivering ZenStation updates, seeing which versions are in use and roughly how many installations there are

The legal basis is the controller's legitimate interest in keeping the site and the update service secure and working: Article 6(1)(f) GDPR and Article 5(2)(f) KVKK. No automated decisions are made about you on the basis of this data.

The site and the update server are delivered through the network of Cloudflare, Inc. (USA). Every request passes through Cloudflare's servers first; Cloudflare processes data such as your IP address under its own policy, which may happen outside Turkey and the EU. Details: Cloudflare privacy policy (opens in a new tab).

The logs are kept on the controller's own server. They are not shared with or sold to anyone. They may be handed to competent authorities where the law requires it.

City and region are looked up in a database stored on the server, so your IP address is not sent to another service for this. The database is “IP to City Lite” by DB-IP (opens in a new tab), used under the CC BY 4.0 (opens in a new tab) licence (IP Geolocation by DB-IP (opens in a new tab)).

The logs, including IP addresses, are kept without a time limit. You can ask for the records about you to be deleted as described below.

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and the right to object (Articles 15–21). You can object at any time, on grounds relating to your particular situation, to processing based on legitimate interest.

Under Article 11 of the KVKK you can learn whether your data is processed, request information about it, learn the purpose and whether it is used accordingly, know the third parties it is transferred to in Turkey or abroad, ask for incomplete or incorrect data to be corrected, ask for deletion or destruction under Article 7, ask for corrections and deletions to be notified to those third parties, object to a result against you that arises only from automated analysis, and claim compensation for damage caused by unlawful processing.

You can also lodge a complaint with the data protection authority of your country in the EU, or with the Turkish Personal Data Protection Authority (opens in a new tab).

Send your request in writing with your name, a way to reach you and what you are asking for. For a request about your IP address, include the address and approximate dates. Requests are answered free of charge within 30 days.

For now, please use the channels in the contact section of the home page.

If this notice changes, the current version is published on this page.