Privacy Policy

janra.art is operated by Hakan Bıyıklıoğlu, as an individual seller in Turkey — not a registered company. For the purposes of Turkey's Personal Data Protection Law (KVKK, Law No. 6698) and this policy, that makes them the data controller ("veri sorumlusu") for the information described here.

You can reach us about anything in this policy at privacy@janra.art.

Account details: your name and email address from Google Sign-In, plus a first/last name or profile photo if you choose to add one.

Phone number, verified once by a text-message code.

Shipping details: recipient name, phone number, and delivery address for any address you save.

Order details: what you bought, the price paid, the edition number, and — for a gift — the recipient's name.

How you'd like a purchase shown publicly: your name, your initials, or anonymously. See "Your purchases and public provenance" below.

Basic technical data — your IP address and browser — collected automatically by our hosting providers to keep the site secure and working.

To create and manage your account, and confirm it's really you.

To process, ship, and support your orders.

To show provenance information on the artwork you bought, exactly as you chose to show it.

To keep the platform secure and prevent abuse.

We never use your information for advertising, and we never sell it.

Every artwork's page shows who owns each numbered edition — a deliberate feature of buying original, limited work, not a data leak. For every purchase, you choose whether it's shown under your full name, just your initials, or anonymously.

You can change your default choice anytime from Account → Privacy. Changing it only affects future purchases — it never rewrites how a past sale is already shown.

One cookie keeps you signed in — it's readable only by our own server, never by a script on the page. A second remembers your language choice.

Your theme (light/dark) and the contents of your basket live only in your own browser's storage, and are never sent to us until you check out.

We don't use advertising or analytics cookies.

Only the providers that make the site work, and only what each one needs: Google (sign-in), Twilio (text-message phone verification), Microsoft Azure (hosting our database and images), and Vercel (hosting the website itself).

Card payments are processed directly by iyzico, our Turkish payment provider.

We never sell your information, and we never share it for anyone else's marketing.

To keep payment security at the highest level for purchases made through our site, we use the infrastructure of iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş.

Card details entered on the payment page (card number, expiry date, CVV, and similar) are never held or stored on our own servers.

To complete the transaction, prevent fraud, and meet our legal obligations, the necessary data — card details, your name, the transaction amount, and your IP address — is transferred directly and securely, over an encrypted SSL connection, to the systems of iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş., our payment gateway provider. This data transfer complies with Law No. 6698 (KVKK).

We use encryption (SSL/TLS) across the site and take reasonable technical and administrative precautions to protect your data from unauthorized access.

iyzico's own payment infrastructure is PCI-DSS certified — the payment card industry's highest global security standard.

Our database and file storage run on Microsoft Azure; our website runs on Vercel. Depending on which of their servers is in use, your data may be processed outside Turkey. Both providers maintain recognized international security certifications.

We keep your account and order data for as long as your account stays open, and afterward for as long as Turkish commercial and tax law requires us to retain sales records.

You can ask us to close your account at any time; we'll remove what we're not legally required to keep.

Under KVKK, you can ask us to:

—Tell you whether we hold data about you, and show it to you.

—Correct anything that's inaccurate.

—Delete data we're not required to keep.

—Tell you who we've shared your data with.

—Object to how we've used your data, and ask us to fix any resulting harm.

To use any of these, email privacy@janra.art — we'll respond within the timeframe Turkish law requires.

janra.art isn't directed at children, and we don't knowingly collect data from anyone under 18.

We'll update this page whenever what we collect or how we use it changes, and update the date at the top. We'll flag any significant change clearly the next time you sign in.

Questions about your data or this policy: privacy@janra.art