Open Wapve
PRIVACY

Privacy Policy

This policy explains what Wapve processes, why, with whom it is shared and your choices.

Last updated: August 21, 2026

1. Scope

This policy applies to visitors, account holders and community members using the Wapve website and application. Independent third-party services linked from Wapve have their own privacy terms.

2. Information we process

  • Account data: email, username, display name, password hash, language, presence, verification status and optional profile images
  • Community and content data: servers, roles, channels, friendships, messages, reactions, polls, notifications, uploads and moderation records
  • Support data: requests, appeals, rights requests and security reports
  • Technical data: IP address, browser or device details, session timing, request and security event records
  • Voice and video: media is relayed in real time between peers through TURN and is not recorded by Wapve; connection state and limited diagnostics may be processed

3. Purposes and legal bases

We use data to provide and secure accounts, communications, communities and uploads; prevent abuse; diagnose reliability issues; comply with law; and protect legal rights. Depending on applicable law, the basis is contract performance, legal obligation, establishment or protection of rights, legitimate interests that do not override fundamental rights, or separate consent for an optional activity when required.

4. Sharing

  • Infrastructure, hosting, storage and email providers process limited data to operate the service.
  • Cloudflare may process network and request data for DNS, CDN and security.
  • KLIPY may process limited query and technical data when you request GIF search or sharing.
  • Information may be disclosed to authorities only where a valid binding legal request applies.
  • Wapve does not sell personal data or share it for behavioral advertising.

5. International processing

The global infrastructure of Cloudflare or optional content providers may process limited technical data outside Türkiye. Transfers are made only where an applicable legal transfer mechanism and necessary safeguards are in place. Reading this policy is not treated as consent.

6. Retention

  • Account and profile data is kept while the account is active and afterward only for requests, disputes and legal obligations.
  • Messages and files remain until removed by a user or authorized moderator, the relevant space is deleted, or account closure deletion is completed.
  • Session cookies last up to 30 days, verification links 24 hours and password reset links 30 minutes.
  • Deleted production data may remain in rolling backups for up to 7 days and is used only for disaster recovery.
  • Security, audit and legal records are kept only as long as required for the incident and applicable limitation or retention duties.

7. Security, choices and children

Wapve uses encrypted transport, password hashing, HttpOnly session cookies, CSRF and origin validation, rate limits, access controls, backups and network security controls. No internet system can guarantee absolute security.

You can manage profile and session settings, delete available content and submit a legal rights request. Wapve is not intended for children under 13 and may verify or close an underage account.

8. Contact and updates

Material changes will be announced through an appropriate channel and the update date will change.

You may send notices and requests concerning this document to [email protected].