BilgeStore

Privacy Policy

Last updated: February 22, 2026

1. Introduction

BilgeStore ("we", "us", "our") operates the bilgestore.com website. This Privacy Policy explains how we collect, use, and protect your information when you visit our website or purchase our digital products. BilgeStore is operated by Ekrem Mutlu, based in Istanbul, Turkey.

2. Information We Collect

Purchase Information: When you buy a product, your name, email address, and payment details are collected and processed by our payment providers (Gumroad and Paddle). We do not store your credit card information directly.

Usage Data: We use Google Analytics (measurement ID: G-4DGFK8W8VP) to collect anonymized usage data including pages visited, time spent, browser type, and referring URLs.

Newsletter: If you subscribe to our newsletter, we collect your email address with your explicit consent.

Contact Information: If you contact us via email or Telegram, we collect the information you provide in your message.

Language Preference: We store your language preference (English/Turkish) in your browser's localStorage.

3. How We Use Your Information

  • To process and deliver your digital product purchases
  • To send product updates, download links, and purchase receipts
  • To send newsletters and promotional content (only with your consent, with opt-out option)
  • To improve our website and products through analytics
  • To provide customer support
  • To detect and prevent fraud

4. Payment Processors

We use the following third-party payment processors:

BilgeStore never directly stores or processes your credit card or payment details.

5. Data Sharing

We do not sell your personal data to third parties. We share data only with:

  • Payment processors (Gumroad, Paddle) to complete transactions
  • Google Analytics for website usage analytics
  • Email service providers to send newsletters (only if subscribed)

6. Data Retention

  • Purchase records: Retained for 6 years for tax and legal compliance.
  • Analytics data: 26 months (Google Analytics default retention).
  • Newsletter subscriptions: Until you unsubscribe.
  • Support correspondence: Retained for up to 2 years after resolution.

7. GDPR Compliance (EEA Users)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of Access: Request a copy of all personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to Restriction: Request that we limit the processing of your data.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Object: Object to processing of your data for direct marketing purposes.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

Legal Basis for Processing: We process your data based on (a) performance of a contract (fulfilling purchases), (b) your consent (newsletters), (c) compliance with legal obligations (tax records), and (d) our legitimate interests (analytics, fraud prevention).

Data Controller: Ekrem Mutlu, Istanbul, Turkey. Contact: [email protected]

International Transfers: Your data may be processed in the US (Gumroad, Google) and UK (Paddle). We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. CCPA Compliance (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request details about the personal information we collect, use, and disclose.
  • Right to Delete: Request deletion of your personal information.
  • Right to Opt-Out: Opt out of the sale of your personal information. Note: We do not sell your personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at [email protected].

9. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users via email within 72 hours of discovery, in accordance with GDPR requirements. We will also notify relevant supervisory authorities as required by law.

10. Children's Privacy

BilgeStore is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Cookies

We use the following cookies and storage mechanisms:

  • Google Analytics cookies: Performance and analytics cookies to understand how visitors use our site.
  • localStorage: Language preference (functional, no tracking).

We do not use advertising or third-party tracking cookies.

12. Changes to This Policy

We may update this policy from time to time. We will notify registered customers of significant changes via email at least 30 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

13. Contact

For privacy-related questions or to exercise your data rights, contact us at: