Privacy Policy

At TazeBilet, we take your privacy seriously. This Privacy Policy describes how we collect, use, and protect your personal information when you use our service.

1. Information We Collect

We collect the following categories of information:

• Account information: username, email address (optional), and hashed password when you register.
• Alert preferences: train routes, dates, and ticket types you subscribe to.
• Notification identifiers: Telegram user ID (if you link your Telegram account) and browser push subscription tokens (if you enable push notifications).
• Usage logs: standard server-side logs including IP address, browser type, and request timestamps for security and debugging purposes.

2. How We Use Your Information

We use the data we collect exclusively to:

• Operate and improve the TazeBilet service.
• Monitor TCDD train availability on your behalf and send you notifications.
• Authenticate your account and keep it secure.
• Respond to feedback or support requests you send us.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data Storage & Security

Your data is stored in a secured database. Passwords are stored using Django's default PBKDF2 hashing algorithm and are never stored in plain text. We implement reasonable technical and organisational measures to protect your information against unauthorised access or disclosure.

4. Third-Party Services

TazeBilet interacts with the following third-party services:

• TCDD (Turkish State Railways): We query publicly available train schedule data on your behalf. No personal data is sent to TCDD.
• Telegram: If you choose to link your Telegram account, messages are sent via the Telegram Bot API. Please review Telegram's Privacy Policy.
• Web Push (browser notifications): Push notifications are delivered through your browser's built-in push service (e.g., Google FCM for Chrome). Only anonymous subscription tokens are stored.

5. Cookies

TazeBilet uses a session cookie to keep you logged in. We do not use tracking or advertising cookies. No third-party cookies are set by our service.

6. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and all associated data by contacting us. Alert subscriptions are removed immediately when you delete them.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing activities.

To exercise any of these rights, please contact us using the feedback form.

8. Children's Privacy

TazeBilet is not directed at children under the age of 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance of the revised policy.

10. Contact

If you have any questions about this Privacy Policy, please reach out via our feedback form.