Privacy and connected sign-in accounts
This page explains how TahsilTurkey uses information and how to make a request about your data.
Information received
We store a student’s name and email, and a provider-specific user identifier when connecting Google, Apple or Facebook sign-in. We do not store those services’ passwords, access tokens or refresh tokens in the site database. Case documents are uploaded separately.
Purpose and access
Information is used to create accounts, sign in, maintain connected sign-in methods and manage student cases. Social sign-in is not consent to advertising or permission to send a case to a university. Case access is restricted by the roles of student, assigned counselor and administrator.
Sign-in services
Selecting a service takes you to its website; its privacy policy also applies to that interaction. Apple may supply a relay email address. First-time Facebook registration also verifies email ownership on this site. An existing account can only be connected after signing in to it.
Temporary data and retention
A sign-in request is valid for 10 minutes; the Facebook email completion stage lasts up to 20 minutes. Expired records are removed at startup, during use and by periodic cleanup. Account data is retained while the account is used or a deletion request is processed; case documents and backups must also be considered in the case retention plan.
Access, correction and deletion
To request access, correction, deletion or disconnection of Google, Apple or Facebook, write to [email protected]. We check account ownership before acting to protect the case; do not send identity documents in your initial message. Deletion of active data does not immediately delete earlier backups. You can also revoke app access in the sign-in service’s settings; that alone does not delete the site account or student case.