We updated the notice that explains how your personal data is processed. Please read and accept the new version before going on.

Read the privacy notice

notSoOftennotSoOften

Privacy Notice and Cookies

Last updated: 7 October 2026

Draft: this notice follows common practice and will be finalised after legal review.

This notice explains, under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK), how your personal data is processed when you use notSoOften.

1. Data controller

The data controller is the notSoOften platform. The controller's legal name and address will be added here once confirmed. You can reach us at the address on the Contact page.

2. What we process

Identity and contact: your first and last name, school email address and nickname.

School: your school, faculty and department, and your role there (student or school admin).

Game accounts: the ids and names of the FACEIT and Riot accounts you link, and their public game statistics and ranks.

Platform use: team memberships, tournament and league entries, match results, notifications, caster applications and ratings, reports and moderation records.

Content you upload: images such as school logos, tournament covers and sponsor logos (location and camera details are removed on upload).

Security: sign-in codes, session data, IP address and security logs.

The name and contact details of the esports club president you give in a school application.

3. Why we process it

To open your account and let you sign in without a password; to match you with your school; to let you build teams, join tournaments and leagues, and show your matches and results; to verify that the game accounts you link are yours; to send notifications; to prevent abuse, review reports and keep the platform secure; and to meet our legal obligations.

Your name and email are never shown to other users. Your profile is private by default; if you make it public, your game statistics become visible. Your nickname and FACEIT nickname are visible to everyone on team and tournament pages.

4. Legal grounds

We process your data under KVKK Article 5/2: performance of the contract needed to provide the service (c), our legal obligations (ç), establishing, exercising or defending a right (e), and our legitimate interest in platform security and preventing abuse, provided it does not harm your fundamental rights and freedoms (f).

5. Who we share it with

Your data is stored on servers in Turkey. To provide the service, limited information goes to:

FACEIT: when you link your FACEIT account and join tournaments, your FACEIT account id and team details are matched with FACEIT. FACEIT is based abroad; this transfer follows KVKK Article 9.

Riot Games: when you link your Riot account, your Riot ID and game details are looked up through Riot Games' official API. Riot Games is based abroad.

Email provider: only your email address and the message, to send sign-in codes and notifications.

Public authorities: only where the law requires it.

We do not sell your data, use it for advertising or share it for those purposes.

6. How long we keep it

We keep your data while your account is open. When you delete your account, your name, email and game accounts are deleted and your uploaded images are removed. Match results and standings are part of other people's history too, so they stay as "deleted user".

Sign-in codes, unverified accounts and security logs are deleted once they have served their purpose. Moderation records are kept as long as needed for possible disputes; data of banned accounts is kept on that basis.

7. Your rights

Under KVKK Article 11 you may learn whether your data is processed, request information about it, learn the purpose of processing and who it is shared with, ask for incomplete or wrong data to be corrected, deleted or destroyed, object to a decision against you made solely by automated systems, and claim compensation for damage.

You can download your data or delete your account from your profile page at any time. For other requests, write to the address on the Contact page; we answer within 30 days at the latest. You also have the right to complain to the Personal Data Protection Board.

8. Cookies and browser storage

notSoOften only uses cookies that are strictly necessary for the site to work. We use no analytics, advertising or tracking cookies. Because these cookies are necessary to provide the service, they do not require consent.

SESSION: keeps you signed in, valid for 14 days.

XSRF-TOKEN: confirms that forms were sent by you (protection against cross-site request forgery).

NEXT_LOCALE: remembers the language you chose.

We also keep unsent form drafts in your browser's local storage; they never leave your device.

Twitch, YouTube and Kick players on match pages load only when you click them. Once you do, that platform's own cookie policy applies.

9. Third-party details in school applications

The esports club president's name and contact details you give in a school application are used only to review the application and contact the president. They are not shared outside the platform team and are kept with the application record. Ask the president for permission before entering them.

10. Changes

When we update this notice, you will see the new version the next time you visit and be asked to accept it before going on.