1. Data controller
This policy covers personal data processed when you use https://vpnadvisor.net, operated by VPN Advisor ("we", "our site"). We act as the data controller under the relevant data-protection laws (including Türkiye's KVKK and, where applicable, the EU GDPR).
2. What data we process
2.1. Automatic technical data (server logs)
Our Vercel hosting infrastructure temporarily keeps standard web server logs:
- IP address (anonymised)
- Browser type and version (User-Agent)
- Access date/time
- Requested URL
- HTTP response code
These records are kept for 30 days for security, debugging and abuse detection, then auto-deleted. They are not used to build personal profiles.
2.2. Analytics (Google Analytics)
We use Google Analytics 4 to measure site traffic, running with Google Consent Mode v2:
- before you consent on the cookie banner, no analytics cookie is set (anonymous aggregated pings only)
- on "Accept" the
_gacookies are set; on "Decline" none are set - aggregated page views, approximate location, device and browser
- the processor is Google LLC; data may be transferred to the US
Analytics data is used to evaluate the site's performance. See the Cookie Policy for details.
2.3. Contact email
If you email us, the contents and address of your message are processed solely to respond. After the reply, the message is not processed further, but it may be retained for up to 1 year as a business record.
3. Why we process data (legal basis)
- Server logs: legitimate interest (security and abuse prevention).
- Google Analytics: consent (GDPR Art. 6(1)(a) and KVKK explicit consent via the cookie banner). Not processed unless you accept.
- Contact email: contract/precontract necessity (answering your request).
4. Data sharing
We do not share your data with third parties. The mandatory technical flows involve these service providers:
- Vercel (web hosting) — processes server logs. Standard data-processing agreement.
- Google(if you consented, analytics) — processes anonymous pageview data in aggregate; data may be transferred to the US (Google's standard contractual clauses).
Our pages display Google AdSense ads; AdSense may use cookies to serve and measure ads (details in our cookie policy). When you click a VPN provider link you go directly to the provider's official site; from that point on the provider's own privacy policy applies.
5. Your rights
Under applicable data-protection law you have rights including:
- Knowing whether your personal data is being processed
- Requesting information about the processing
- Learning the purpose of the processing and whether the data is used for that purpose
- Learning which third parties (domestic or abroad) the data is transferred to
- Requesting correction of incomplete or inaccurate processing
- Requesting deletion or destruction of the data
- Objecting to automated analysis outcomes
- Requesting compensation for harm
To exercise these rights, reach us via the contact page.
6. Data security
Server traffic is encrypted over HTTPS (TLS 1.3). HTTP headers are hardened (HSTS, CSP, X-Frame-Options, etc.). Because we do not use cookies, our attack surface for cookie-based exploits is zero.
7. Policy updates
We may update this policy from time to time. Significant changes are indicated by the "Last updated" date at the top of the page.