Privacy and data rights
Dokümanlar is operated by Cryptosam LLC. Your account information, resources, collections and security records are used to provide the service. For privacy, personal data and support enquiries, contact us at [email protected] for assistance.
What data is used?
We store your display name, email and one-way password hash for your account, and uploaded documents, comments, follows and collections to provide the service. Do not upload personal student or patient information. The session cookie is required for access; there is no advertising tracking.
Optional usage measurement
With your permission, Google Firebase Analytics processes screen usage, session duration, app/browser and device information, approximate location and a random app/browser identifier for usage statistics. We do not send your email, account ID, document content or search text. We do not use advertising tracking. You can use every feature without giving permission.
You can change your permission using “Usage analytics” at the bottom of the website or in “Account” in the mobile app. The preference is stored in this browser or app installation and is not linked to your account. Withdrawing permission stops new measurement and clears web analytics cookies and the mobile analytics device record. This does not delete data already sent to Google servers. Contact us for data deletion requests.
Google may also process data on infrastructure outside Türkiye to provide statistics. This configuration retains user and event-level analytics data for two months; aggregate reports may have different retention. Google Signals, advertising identifiers and ad personalization are disabled.
Google and Apple sign-in
Google or Apple sign-in is optional. We receive your verified email and provider identifier from your chosen provider; you choose your display name. To link an existing account, you must first sign in to that account; accounts are not automatically merged even when emails match. Dokümanlar never receives your provider password. An Apple refresh token is stored encrypted on our server so we can revoke Apple access when you delete your account. Sign-in providers may also process authentication data outside Türkiye.
Account age and preferences
In this version, accounts and sharing are available to people aged 18 and over. You can browse public content without an account. No identity document or date of birth is collected; age is declared when creating an account. There is no messaging feature.
Drafts and discovery preferences on this device
Draft files, photos and details are stored in this browser’s IndexedDB, linked to your account and version. Entries whose 48-hour recovery period has expired are removed when the app reopens its draft storage; deletion does not run while the browser is closed. Use “Delete local draft” on the sharing page to remove the device copy. Clear it before leaving a shared device; clearing browser data also removes it. Guest discovery preferences remain in separate device storage and are not transferred to your account at sign-in. Institution, programme or exam preferences you explicitly save to your account are kept in your private profile and do not change existing resources or drafts.
Optional suggestions
Text extracted securely off-device from up to 10 selected pages and stripped of common personal data patterns is sent to OpenAI to generate suggestions. Automatic removal is not perfect; do not share patient or student information. Original photos are not sent. This step is optional. Suggestions are not applied automatically. Cancelling the request can stop a suggestion that has not yet been processed; retrieval of data already sent to the provider is not guaranteed.
Visibility
Approved resources and the contributor’s display name are public. Email addresses, collections and files awaiting review remain private. Files are held in private storage and accessed through expiring links. Check original documents for hidden pages and comments yourself. Photo pages are re-encoded to remove location and EXIF data; text within images is not automatically anonymised.
Export and deletion
You can delete your account in the mobile app under My account → Delete my account, or in your web account settings. After verifying your identity, you must separately confirm permanent deletion.
This cannot be undone. Your account, sessions, comments and personal collections are deleted; your shared resources are immediately taken offline.
Files are removed after the 30-day retention period. Files involved in an open copyright or content investigation may be retained until it is resolved. Backup copies are removed according to the retention cycle. Revocation of Sign in with Apple access is also queued.
You can export your data from the web account panel. Open account settings
Sharing terms
Upload only original or permitted resources you have the right to share. Free resources are for personal learning and classroom education; they do not grant permission to resell or publish on other platforms. You can report copyright and content issues.