Privacy and Cookie Policy
This policy explains how your personal data is collected, processed, shared and protected, and which cookies we use. It should be read together with the Data Protection Notice.
1. Scope and Data Controller
This Privacy and Cookie Policy explains how your personal data is processed when you use the MetEnd Platform.
The data controller's legal name, address and contact details (registered email/KEP) will be published on this page once the company's incorporation is complete.
2. Personal Data We Collect
Depending on your use of the Platform, we process the following personal data:
- Identity and contact: email address, first and last name.
- Company information: for corporate accounts, legal name, tax/ID information and application documents.
- Profile and content: profile information, listings, messages and the images/files you upload.
- Transaction data: offer, order, follow and relationship records.
- Technical and security data: IP address, screen view (navigation) logs, device and session information.
- Preference data: language preference and cookie-based settings.
3. Purposes of Processing
- Account creation, authentication (email OTP) and session management.
- Providing Platform services (listings, offers, orders, messaging, relationships).
- Security, prevention of fraud and abuse, and record-keeping.
- Limited analytics and measurement to improve the service.
- Content moderation and evaluation of reports.
- Fulfilling legal obligations.
4. Cookies
We use strictly necessary cookies for the Platform to function, as well as preference cookies. No advertising/marketing cookies are used. A third-party analytics cookie (Google Analytics) is used only if you explicitly consent; if you do not consent, no third-party measurement cookie is written and no measurement request is sent from your browser to Google. The main cookies we use:
| Cookie | Purpose | Duration |
|---|---|---|
| metd_at / metd_rt | Session authentication (sign-in) — httpOnly | Access: short-lived · Refresh: 1 year |
| metd_at_exp | Access token validity hint — httpOnly | Session |
| metd_did / metd_ds | Device recognition and silent session — httpOnly | 1 year |
| metd_sess | Session state hint (guest/member) | 1 year |
| metd_lang | Language preference | 1 year |
| metd_ref | Carrying the invitation/referral code | 30 days |
| metd_device | Device type (desktop/mobile) view | Session |
| _ga | Distinguishing visitors (Google Analytics — analytics, only with your consent) | 2 years |
| _ga_<measurement-id> | Distinguishing sessions (Google Analytics — analytics, only with your consent) | 2 years |
5. Sharing and International Transfer of Data
Your personal data may be shared, to the extent necessary to provide the service and in accordance with applicable law, with the sub-service providers below. As some of these providers are located abroad, data transfers are carried out within the framework of KVKK's provisions on international transfers (art. 9).
Data may also be shared with authorized public institutions upon their requests as required by applicable law. Your personal data is not sold to third parties for marketing purposes.
- AWS (Amazon Web Services): hosting, email delivery (SES) and file storage (S3) — Germany (Frankfurt, eu-central-1).
- Cloudflare: content delivery network (CDN), security and traffic management.
- DeepL: multilingual translation of user content.
- Google (Google Analytics): measurement of site usage, only if you give cookie consent — United States.
6. Retention Periods
Your personal data is retained for the period required by the purpose of processing and for the statute-of-limitations/retention periods stipulated in applicable law. At the end of the period, data is deleted, destroyed or anonymized.
When you close your account, records needed for legal obligations and potential disputes may continue to be retained for the relevant periods.
7. Data Security
We apply technical and administrative measures to protect your data:
- Encryption in transit (HTTPS/TLS).
- Keeping authentication tokens in server-only (httpOnly) cookies.
- Access control and privilege limitation.
- Security and abuse monitoring.
8. Your Rights
For details of your rights under KVKK art. 11 and the application procedure, see the Data Protection Notice. The registered email/KEP address for submitting your requests will be published on this page once the company's incorporation is complete.
Last updated: 23.07.2026