Website operator
Club in Istanbul is operated by DHB Otomotiv, the controller of personal information processed for membership. Contact the address below for membership, privacy and account deletion requests.
PRIVACY & COOKIES
Privacy
How Club in Istanbul uses information, why we use it and how to contact us. Updated: 9 October 2026.
Membership information
Google sign-in provides your Google account identifier, name and verified email address. We do not request access to your Google password, inbox, contacts or Drive files. Google profile photos and access/refresh tokens are not retained in the membership database. Email sign-in uses your address and its verification status; you do not create a website password. Membership is optional for exploring venues and playing games.
Optional profile
You may add your first name, last name, phone, an avatar you upload and interests in My account. They are stored in your own profile record in Upstash; your profile is not public. Interests create shortcuts to venue categories. We do not call or send SMS. Photos are re-encoded as small avatars on your device; the original file and photo metadata are not sent. Clear fields or remove your photo and save changes to remove these profile details. Your Google profile photo is not imported automatically. The profile form collects these details electronically to provide the profile settings you request as part of the membership service.
Purpose and legal basis
Information is collected electronically through the sign-in form, your selected Google sign-in and your browser session. Account creation, email verification and sessions support the establishment and performance of the membership service. Abuse prevention relies on legitimate interests that do not override your fundamental rights (Turkish Law No. 6698, articles 5/2-c and 5/2-f). Analytics cookies use your separate cookie choice. Membership is not consent to marketing emails.
Service providers
Vercel hosts the website, Upstash stores membership records and sessions, and Resend delivers sign-in emails. Google authenticates you when you select that method. These providers may operate outside Türkiye. Resend processes the recipient address and temporary link; hosting providers may process connection and technical security information. Membership data is not shared for advertising targeting.
Retention and security
Email links expire after 15 minutes and can be used once; verification records expire automatically. Sessions last at most 30 days and signing out revokes that session. Sending-limit records use email/IP hashes and expire after 15 minutes. Account information is retained while your account continues. On a deletion request we verify ownership and assess any necessary or legally required retention.
Cookies, analytics and location
Secure session and verification cookies support sign-in. Browser storage remembers language, theme and cookie choices. Google Analytics measures website usage: analytics cookies require consent, while cookieless measurement signals may still be sent after rejection. Advertising personalization is disabled. You can clear cookies and site data in browser settings. Nearby venues uses location only at your request and with browser permission, in device memory; it is not sent to membership storage, our server or Analytics.
Your rights and contact
Under article 11 of Law No. 6698 you can ask whether data is processed, request information about its use and recipients, seek correction, request deletion/destruction where applicable and notification to recipients, object to adverse results based solely on automated analysis, and seek compensation for unlawful processing. Send your request from the email address associated with your account. We may need to verify ownership to handle it.