1. Who is responsible
Selim Kaltakkıran, based in Turkey and operating as ArchiveKong, is responsible for the personal data processed to provide the ArchiveKong website, application, accounts, and hosted services. Contact selim@archivekong.com for privacy questions and requests.
2. Your local library
The desktop application stores library records, file paths, thumbnails, tags, ratings, playback statistics, and settings on your computer. Browsing, organizing, and playing local files does not by itself upload your library or media files to our servers. You control local files and backups; uninstalling the application does not necessarily remove every library file or backup.
Optional network features are different: LAN access makes selected library information and media available to devices on your network, and hosted remote access sends responses and streamed media through our relay.
3. Information used for online services
- Accounts: When you register or sign in, account information such as your email address, account identifier, authentication credentials, and session information is processed using Google Firebase Authentication. Sign-in persistence stores authentication state on your device.
- Premium and transactions: Our backend uses account identifiers, Premium status, transaction and product identifiers, payment status, amount, currency, provider, and timestamps to verify purchases and maintain access. Premium and transaction records are stored using Google Cloud Firestore. The payment provider handles payment details; ArchiveKong’s application does not collect your full card number.
- Hosted remote access: Pairing and connecting a device involves device names, device identifiers, pairing codes, credentials, session information, and account information. Library responses and media you stream pass through the hosted relay to the remote device. Do not treat this as a connection whose content is hidden from the relay operator.
- Optional AI metadata and actor search: When you request an online lookup, the query and identification details are sent to our backend and OpenAI for AI-assisted web research. This may include an actor name, a video title or filename, and context supplied by the application. The lookup does not require uploading the media file itself. Avoid including private information in these queries.
- Website, downloads, and security: Hosting and security providers process technical request information such as IP address, browser information, requested URL, and request time. The download service uses Cloudflare Turnstile to verify requests and prevent automated abuse; verification can include your IP address and browser signals.
- Support: If you email us, we receive your email address, message, and any information or attachments you choose to send. Do not send passwords, complete card details, or private media files.
4. Why we use this information
We use information to provide requested accounts and online features, verify Premium access, deliver downloads, handle support and refunds, prevent fraud and abuse, maintain security, and meet applicable legal obligations. Where a legal basis is required, this processing relies on performance of our agreement with you, legitimate interests in operating and securing the service, legal obligations, or consent where applicable. Optional online lookups are initiated by your request.
5. Providers and disclosures
Relevant providers include Google Firebase and Firestore for authentication and account records, Render for application backend and relay hosting, Cloudflare for website and download hosting and security, and OpenAI for requested AI metadata research. Email providers process support correspondence. Providers receive the information needed for their role; their own terms and privacy notices also apply.
For purchases processed through Paddle, Paddle independently processes checkout, billing, tax, fraud-prevention, and payment-support information as Merchant of Record. See Paddle’s Privacy Policy. If a checkout identifies another payment provider, that provider’s privacy notice applies to that transaction.
We may disclose information when required by law or necessary to investigate fraud, protect people and services, or establish or defend legal claims. We do not sell personal information or use your local media library for advertising.
6. Cookies, storage, and tracking
The public marketing pages do not include advertising trackers or analytics scripts. Hosting and security services may process technical data and use storage needed for security. The application uses local storage to keep sign-in state. Optional remote-access sessions may use authentication storage. External checkout pages operate under their providers’ cookie and privacy notices.
7. Retention and security
Local library data stays on your devices until you remove it. Online account, entitlement, device, and support records are kept as needed to provide the relevant service, resolve requests or disputes, maintain security, and meet legal obligations. Transaction records may need to be retained after an account is deleted for accounting, fraud prevention, or legal reasons. Retention depends on the record’s purpose; we do not promise automatic deletion after a fixed interval.
Access controls and authentication help protect online services, but no system can guarantee complete security. Protect your account and pairing credentials and only authorize trusted devices. Our AI requests disable OpenAI response storage through the API’s storage setting; this is not a promise that the provider retains no operational or security data.
8. International processing
We operate from Turkey. Our providers may process information in other countries, including the United States and countries where they operate infrastructure. International processing is subject to applicable data-protection requirements; available rights and safeguards depend on the service and jurisdiction.
9. Your choices and rights
You can use the core library offline, avoid optional AI lookups, disable remote access, sign out, and manage local library files and backups on your device.
Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a copy of personal data, withdraw consent where processing relies on it, and complain to a data-protection authority. Under Turkey’s Personal Data Protection Law (KVKK), rights can include learning whether your data is processed, requesting information about processing and transfers, correction or deletion where applicable, notification of those actions to recipients, objecting to an adverse result from exclusively automated analysis, and seeking compensation for unlawful processing.
To request account deletion or exercise privacy rights, email selim@archivekong.com from your account email address. We may need to verify your identity; do not send identity documents unless we explain why they are necessary. We will respond within the period required by applicable law. Deleting an account can affect access to account-linked Premium features; contact us before deletion if you need help preserving purchase evidence. We cannot erase files or backups stored solely on your devices.
10. Children and updates
ArchiveKong’s paid and online services are intended for people who can legally enter the relevant agreement, or use them with a parent or guardian’s authorization where permitted. We do not knowingly seek personal information from children below the age at which parental consent is required. Contact us if you believe a child has supplied such information.
We will update this page when data practices change and revise the date above. Direct privacy questions to selim@archivekong.com.