Privacy policy

Last updated 21 October 2026

Who we are

DGF Studios is a brand of DGF Commerce, based in Ankara, Türkiye. We are responsible for the personal data described here. Contact: contact@dgfstudios.com.

What we collect

• When you write to us (through the form or by email): what you send, such as your name, email address, the link to your game or store, the languages you ask about and your message. The form on this site sends nothing by itself. It prepares an email that you send from your own email app.
• The chat assistant answers from this page itself. What you type in it stays in your browser: it is not sent to us or to anyone else, and it is gone when you close the page. If you choose to email us from it, that email is handled like any other.
• When you buy by card: the billing details you enter at checkout (name, email, country, city, address, and company and tax number if you add them) and your order. Card details are typed into the secure form of our payment provider iyzico and go straight to iyzico: we never see or store them. Until your payment is complete, your billing details are held on our hosting provider's servers for up to 48 hours, then deleted; after a successful payment they reach us by email so we can deliver the order and issue the invoice.
• When you become a client: the contact, invoicing and project details we need to do the work and bill it.
• When you visit: no analytics, no advertising tags and no tracking cookies. Our hosting provider may keep standard technical logs (IP address, browser, time of the request) to keep the site secure and running.

Why we use it, and on what legal basis

• To answer your request and prepare an offer: steps before a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• To deliver and invoice the work: the contract and our legal obligations (GDPR Art. 6(1)(b) and (c); KVKK Art. 5(2)(ç) and (c)).
• To keep the site secure: our legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

We never sell your data and never use it for advertising.

Who else sees it

Our payment provider iyzico (iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş., Türkiye) receives your billing details and card details when you pay by card, to process the payment and check it for fraud, under its own privacy notice. Our hosting provider (Cloudflare) runs this site and briefly holds checkout details as described above. Our email provider (Google) stores our mail, which can mean processing outside Türkiye and the EU, including in the United States. Our accountant sees invoice details. Nobody else, unless the law requires it.

How long we keep it

Requests that don't lead to a project: up to 12 months. Client records and invoices: as long as tax and commercial law requires (in Türkiye, generally 10 years).

Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, and to receive a copy. Under KVKK you also have the rights listed in Article 11. Write to contact@dgfstudios.com and we answer within 30 days. You can also complain to your data protection authority in the EU, or to the Personal Data Protection Board (KVKK Kurulu) in Türkiye.

Changes

When we change this policy, we update the date at the top.