Privacy Policy & Data Protection Notice

1. Data Controller Notice

Cupofix ("Platform") acts as a Data Controller in compliance with applicable data protection regulations (including GDPR and Turkish KVKK Law No. 6698). Our platform is built strictly according to Privacy by Design principles.

Cupofix does not require, collect, or store any membership registrations, names, phone numbers, email addresses, or payment card information. All promo codes and discount vouchers are freely accessible to the public anonymously.

2. IP Addresses & Irreversible Cryptographic Anonymization

When you browse our platform or click on an affiliate voucher link, technical metadata is processed purely for bot protection, rate-limiting, and fraud prevention:

• Plain IP Addresses Are Never Stored: Raw IP addresses (e.g., 192.168.1.1) are never recorded to disk, log files, or databases in plain text.
• SHA-256 One-Way Hashing: At the microsecond of request handling, the client IP address and browser User-Agent are salted and hashed via irreversible SHA-256 into a 64-character hash (ip_hash).
• Complete Anonymization: It is mathematically impossible to reverse-engineer the original identity or IP address from this hash.

3. Data Retention & 90-Day Auto-Purge

Click validation and fraud prevention records (click_logs) are retained for a maximum of 90 days. Any log entries exceeding 90 days are permanently purged via automated PostgreSQL background jobs.

4. Your Privacy Rights

Under data protection regulations, individuals have the right to request information about whether their personal data is processed, object to unlawful processing, and request correction or deletion. Since our service does not store identifiable personal profiles, requests regarding unidentified anonymous hash logs may not be traceable.

5. Contact & Privacy Requests

For inquiries regarding our privacy standards or data protection practices, please reach out to our privacy desk:

• Email: kvkk@cupofix.com
• Subject: Privacy & Data Protection Request