Privacy Policy

Last updated: 4 November 2026

In short: your screenshots never leave your device. We do not use analytics or advertising trackers and we do not sell personal data. We only process the small amount of data needed to deliver your license, answer your emails and keep the website running.

1. Data controller

The data controller responsible for your personal data is:

Ahmet Salih Yalçın (sole proprietorship), trading as Vantakit
Mimar Sinan Mah. Süreyya Paşa Sk. No: 4 İç Kapı No: 11, 34935 Sultanbeyli / İstanbul, Türkiye
Tax office / Tax ID: Sultanbeyli / 9300770154
Email: support@vantakit.com

This policy explains how we process personal data when you use vantakit.com and Vantakit Shots (the "Service"). It is written to meet the EU and UK General Data Protection Regulation ("GDPR") and the Turkish Personal Data Protection Law No. 6698 ("KVKK"). For KVKK purposes, this policy is also our information notice (aydınlatma metni).

2. Your screenshots stay on your device

Vantakit Shots processes images entirely inside your web browser. The screenshots you add, the text you type and the images you export are not uploaded to us or to anyone else. We cannot see them and we do not store them. Your editor settings may be saved in your browser's local storage so they are there next time; you can delete them at any time by clearing your browser data.

3. What personal data we process and why

Data	Purpose	Legal basis (GDPR / KVKK)
Purchase data received from Paddle: order/transaction ID, product, price, purchase date, country and the email address used at checkout	To deliver and verify your Pro license, handle refunds and provide support	Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)); legal obligations such as bookkeeping and tax (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç))
License data: your license key and its activation status, stored in your browser	To unlock Pro features in your browser	Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c))
Support emails: your email address, name if you provide it, and the content of your message	To answer your questions and requests	Performance of a contract or steps before a contract (GDPR Art. 6(1)(b)); our legitimate interest in answering enquiries (GDPR Art. 6(1)(f)); KVKK Art. 5(2)(c) and (f)
Technical data: IP address, browser type, requested page and time, collected automatically by our hosting provider in server logs	To deliver the website securely and protect it against abuse	Legitimate interest in operating a secure website (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f))

We do not use your data for automated decision-making or profiling, and we do not send marketing emails.

4. Payments and Paddle

Our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. When you buy Pro, you enter your payment details directly into Paddle's secure checkout. We never receive or store your card or bank details. Paddle processes your name, email, billing country, payment details and IP address as an independent data controller in order to process the payment, prevent fraud and meet its tax obligations. Please see Paddle's Privacy Notice. Paddle shares with us only the purchase data listed in section 3.

5. Cookies and local storage

We do not set advertising or analytics cookies. Our website uses your browser's local storage only for strictly necessary functions: saving your editor settings and your license key. Paddle's checkout may set cookies that are necessary to process your payment securely and to prevent fraud; these are governed by Paddle's own policies.

6. Who we share data with

We share personal data only with service providers who help us run the Service, and only as far as needed:

Paddle.com Market Ltd (United Kingdom): payment processing, Merchant of Record, invoicing and refunds.
Netlify, Inc. (United States): website hosting, server logs and the server function that verifies license keys.
Cloudflare, Inc. (United States): domain name services and forwarding of emails sent to support@vantakit.com.
Google LLC (United States): email inbox (Gmail) where support emails are received and answered.

We may also disclose data where required by law, for example to tax authorities or courts. We never sell personal data.

7. International transfers

Some of the providers above are located outside Türkiye, the European Economic Area and the United Kingdom, mainly in the United States. Where data is transferred abroad, we rely on appropriate safeguards such as adequacy decisions, the EU-US Data Privacy Framework where the provider is certified, and the standard contractual clauses offered by these providers. For transfers from Türkiye we rely on the safeguards in Article 9 of KVKK, including standard contracts.

8. How long we keep data

Purchase and license data: for as long as your license is active, and then as long as required by tax and commercial law (in Türkiye, generally 10 years for accounting records).
Support emails: up to 3 years after the conversation ends, unless needed longer for a legal claim.
Server logs: kept by our hosting provider for a short period, normally no longer than 30 days.
Data in your browser's local storage: until you delete it.

9. Security

The website is served only over encrypted HTTPS connections. Access to our accounts with service providers is protected with strong passwords and two-factor authentication where available. Because your screenshots are never uploaded, they cannot be exposed through our systems.

10. Your rights

Depending on where you live, you have the right to:

access the personal data we hold about you and get a copy of it;
ask us to correct inaccurate data;
ask us to delete your data, unless we must keep it by law;
ask us to restrict processing, or object to processing based on legitimate interest;
receive your data in a portable format;
learn whether your data has been transferred abroad and to whom;
claim compensation for damage caused by unlawful processing (KVKK Art. 11);
lodge a complaint with a supervisory authority: in Türkiye, the Personal Data Protection Authority (KVKK, kvkk.gov.tr); in the EU, your local data protection authority; in the UK, the Information Commissioner's Office.

To use any of these rights, email support@vantakit.com. We will answer within 30 days at the latest, free of charge. We may ask you to confirm your identity before we act on a request.

11. Children

The Service is intended for app developers and businesses and is not directed at children under 16. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy when our Service or the law changes. The "Last updated" date at the top shows the latest version. If a change is significant, we will highlight it on this page.

13. Contact

Questions about privacy? Email support@vantakit.com or write to Ahmet Salih Yalçın, Mimar Sinan Mah. Süreyya Paşa Sk. No: 4 İç Kapı No: 11, 34935 Sultanbeyli / İstanbul, Türkiye.