Privacy Policy & Transparency Notice
Last Updated: September 21, 2026
1. Introduction & Scope
This Privacy Policy and Transparency Notice is prepared by Dijital Evrak ("Data Controller", "Platform", or "We") for all users ("User" or "Data Subject") visiting the pdf.dijitalevrak.com website and utilizing its online PDF tools, in full compliance with the European Union General Data Protection Regulation ("GDPR") and the Republic of Turkey Law No. 6698 on the Protection of Personal Data ("KVKK").
Our platform is engineered from the ground up on the principle of Privacy by Design.
2. Data Controller Identity and Contact Information
Details regarding the data controller are provided below:
Title / Operator: Dijital Evrak
Website: https://pdf.dijitalevrak.com
Email: [email protected]
Jurisdiction City: Istanbul, Turkey
3. Core Principle: High Security Standards & Automatic File Destruction
Our architectural and operational foundation is built on user privacy and data security:
- Secure Processing & Automatic Destruction: Documents processed on or shared via our platform are handled over encrypted HTTPS/TLS connections. Any temporary files generated for QR sharing or download links are automatically and permanently purged from the server within 1 hour.
- No Permanent Archiving: Dijital Evrak does not retain permanent archives, build user profiles, or sell document contents to third parties.
- Local & Client-First Acceleration: Document rendering and manipulation leverage high-performance in-browser modules (WebAssembly, PDF-Lib, HTML5 Canvas) to minimize exposure and maximize operational speed.
4. Data Collected
While document contents are never accessed or transmitted, certain technical data is processed strictly for platform stability, cyber defense, and advertisement serving:
- Technical and Traffic Logs: IP address, browser type and version, operating system, timestamp of access, referring URL, device model, and display resolution.
- Cookies and Identifiers: Cloudflare security cookies, Google Analytics and advertising tokens, local storage preferences (light/dark theme toggle, recently used tools).
- Contact Form Inquiries: Name, email address, topic category, and message text when you contact our support team.
- Newsletter Subscriptions: Email address, sign-up timestamp, and IP verification when opting into our newsletter.
5. Data NOT Collected or Processed
The following categories of data are strictly never collected, stored, or processed:
- Text, graphics, signatures, or special categories of personal data contained inside your PDF documents.
- Credit card details, bank account numbers, or billing info (our platform is 100% free).
- User account passwords, profiles, or registration identities (no signup required).
6. Purposes and Legal Bases for Processing
Limited technical data is processed under the following legal frameworks:
| Data Category | Processing Purpose | GDPR Basis (Art. 6) | KVKK Basis (Art. 5) |
|---|---|---|---|
| Technical Logs & IP | Cybersecurity maintenance, DDoS prevention | Art. 6(1)(f): Legitimate Interest | Art. 5(2)(f): Legitimate Interest |
| Contact Form | Responding to inquiries and support requests | Art. 6(1)(b) / 6(1)(f) | Art. 5(2)(c) / 5(2)(f) |
| Newsletter | Sending product updates and announcements | Art. 6(1)(a): Explicit Consent | Art. 5(1): Explicit Consent |
| Analytics Cookies | Traffic measurement, feature usage analysis | Art. 6(1)(a): Explicit Consent | Art. 5(1): Explicit Consent |
| Advertising Cookies | Serving relevant, interest-based promotions | Art. 6(1)(a): Explicit Consent | Art. 5(1): Explicit Consent |
7. Cookie Policy
Cookies are small configuration files saved onto your device via your web browser. We also utilize local storage (localStorage and IndexedDB) technologies:
| Cookie / Storage Key | Provider | Category | Purpose | Retention |
|---|---|---|---|---|
| theme | pdf.dijitalevrak.com | Preference (localStorage) | Stores light/dark display preference | Persistent until cleared |
| recent_tools | pdf.dijitalevrak.com | Preference (localStorage) | Stores shortcuts for recently used tools | Persistent until cleared |
| PdfBridge | pdf.dijitalevrak.com | Functional (IndexedDB) | Direct file handoff between chained tools | Session only / Temporary |
| __cf_bm, cf_clearance | Cloudflare | Strictly Necessary | Bot management, rate limiting, DDoS defense | 30 min - 1 year |
| _ga, _ga_* | Google Analytics | Analytics | Traffic analysis and page view measurements | 2 years |
| __gads, __gpi, IDE | Google AdSense | Advertising / Marketing | Ad frequency capping and personalization | 13 months |
You may clear or block cookies at any time via your browser settings. Blocking optional cookies will not interfere with our core PDF conversion tools.
8. Google AdSense and Advertising Partners
To maintain our services free for everyone, Google AdSense advertising is deployed across the platform:
- Third-party vendors, including Google, use cookies to serve ads based on prior user visits to this website or other internet sites.
- Google's use of advertising cookies enables it and its partners to serve targeted ads based on your visit to our sites and/or other sites on the Internet.
- Users may opt out of personalized advertising by visiting the Google Ads Settings page.
- Alternatively, you may opt out of third-party ad vendor cookies by visiting aboutads.info or Your Online Choices.
- For details on how Google uses data from partner sites, refer to Google Partner Policy.
9. Google Analytics
We utilize Google Analytics to understand traffic distribution and improve platform performance. You can prevent Google Analytics tracking across all websites by installing the Google Analytics Opt-Out Browser Add-on.
10. Cloudflare and Infrastructure Partners
Platform traffic is routed through Cloudflare Inc. content delivery network (CDN), DNS, and edge firewall infrastructure to mitigate distributed attacks (DDoS), repel malicious scrapers, and guarantee low latency.
11. Cross-Border Data Transfers
Our infrastructure and analytics partners (Google LLC, Cloudflare Inc.) operate servers globally (predominantly within the EU and US). Traffic log transfers comply with GDPR Chapter V (Standard Contractual Clauses - SCC) and Turkish KVKK Article 9 standard transfer mechanisms.
12. Data Retention and Deletion
- Processed PDF & Image Files: Because documents never leave your browser, retention on our servers is strictly 0 (zero) seconds.
- Contact Inquiries: Retained for a maximum of 1 (one) year to resolve follow-ups and adhere to dispute statutes of limitations.
- Newsletter Subscriptions: Retained until the user opts out or clicks the one-click unsubscribe link.
- Security Logs: Retained for up to 1 (one) year under standard cybersecurity compliance.
13. Data Security Safeguards
We enforce 256-bit TLS (HTTPS) transport encryption, strict Content Security Policy (CSP) headers, bot detection heuristics, and sandboxed client memory isolation to safeguard visitor interactions.
14. Your Rights Under GDPR and KVKK
Under GDPR (Articles 15-22) and KVKK Article 11, data subjects have the right to access, rectify, delete, restrict the processing of, object to the processing of, and request the portability of their personal data.
To exercise any of these rights, please send your request to [email protected]. Inquiries will be addressed within 30 days without fee.
15. Contact
For questions regarding this privacy policy or data protection procedures, visit our Contact Page or write directly to [email protected].