Privacy notice for gyybe.com
Who is responsible
This website is operated by Gyybe, Atakum, Samsun, Turkey ("we"). For anything about your personal data, write to [email protected].
This notice covers the website gyybe.com only. The Gyybe app is a separate service with its own privacy policy, which you see when you create an account.
What the website is
gyybe.com shows wind sports spots, their forecasts and how many riders plan to be at a spot. It has no accounts and no comments; its only form is the app’s waiting list (below). The number of riders shown for a spot is a count only: the website never receives or shows who those riders are.
Data needed to deliver the site
When your browser requests a page, it passes through Cloudflare, our content delivery and security provider, which processes your IP address and the request to deliver the page and block attacks. Cloudflare keeps its request records under its own terms; the only ones we can see are requests its firewall blocked, which it shows us for a short time.
Our own web server does not record your IP address. Its log keeps only the time, the page requested and the response, which do not identify you.
Legal basis: our legitimate interest in running a secure website (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
The map
The map is loaded from OpenFreeMap (tiles.openfreemap.org). To send you the map, their servers receive your IP address and the area of the map being viewed. The forecast and spot data are loaded from our own server, data.gyybe.com.
Legal basis: our legitimate interest in showing the map you asked for (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
If you press the location button, your browser asks for permission and then gives the map your position so it can move there. It is not sent to us.
Analytics, only if you agree
If you accept cookies, we use Google Analytics 4 to understand how the site is used: which pages are visited, roughly from where (country or city, derived from the IP address, which Google Analytics 4 does not store), on which kind of device, and whether visitors go on to the app's store page. Google signals and advertising features are switched off.
If you do not accept, Google Analytics is not loaded at all and nothing is sent to Google.
The provider is Google Ireland Limited; data may be transferred to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework. Analytics data is kept for 14 months.
Legal basis: your consent (GDPR Art. 6(1)(a); explicit consent under KVKK Art. 5(1), and Art. 9 for the transfer abroad). You can withdraw it at any time with "Cookie settings" at the bottom of every page; that does not affect what happened before.
The app’s waiting list
App accounts open in small batches. If you join the waiting list, we keep your email address, the language of the page, which button opened the form, the version of this notice you agreed to, and when you signed up and confirmed. Nothing else.
We use it only to send you the confirmation link, your invitation to the app and messages about your place on the list. No newsletters and no marketing, and we never sell or share it.
Legal basis: your consent, given with the checkbox and confirmed with the link we email you (GDPR Art. 6(1)(a); explicit consent under KVKK Art. 5(1)). You can withdraw it at any time by writing to [email protected].
Our emails are sent through Amazon Web Services (Amazon SES) from its Ireland region, in the EU. Under KVKK this is a transfer of your email address abroad, made on your explicit consent (KVKK Art. 9).
To stop bots signing up other people’s addresses, the form is protected by Cloudflare Turnstile. When you open the form, Cloudflare processes your IP address and technical signals from your browser (such as its user agent) only to tell people from bots, under our legitimate interest in protecting the form (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)). It does not see what you type.
An entry you do not confirm is deleted automatically after 7 days. A confirmed entry is kept until you ask us to delete it, and at most 24 months.
To leave the list and have your entry deleted, write to [email protected] from the address concerned. We delete it within one month, usually much sooner.
What we do not do
We do not sell personal data, show advertising, build profiles or make automated decisions about you on this website, and we use your email address for nothing but the waiting list.
What is kept, and how to delete it
This website keeps no account, name or IP address about you. The only thing it can keep is your email address, if you join the app’s waiting list; otherwise there is nothing for us to hand over or delete.
Waiting list: an unconfirmed entry deletes itself after 7 days. To have a confirmed one deleted, write to [email protected]; we delete it within one month.
Analytics (only if you accepted): Google Analytics holds your visits under a random ID stored in your _ga cookie, not under your name. Withdrawing consent with "Cookie settings" deletes that cookie and stops all collection; the data already collected is then no longer linked to your browser and is deleted automatically after 14 months. To have it deleted sooner, send us the value of your _ga cookie and we will delete it in Google Analytics.
Your cookie choice is stored only in your browser. Clearing your cookies deletes it.
The number of riders shown for a spot comes from sessions planned in the app. It is only a count; if you use the app, deleting a planned session or your account removes you from it within minutes. Your app account is covered by the app's own privacy policy.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent (GDPR Art. 15-21; KVKK Art. 11). Write to [email protected].
You can also complain to a data protection authority: in the EU, the authority of your country; in Türkiye, the Personal Data Protection Authority (KVKK).