Privacy policy
This policy explains what personal data BenchMaths (benchmaths.com) processes, why, and what rights you have. It applies to the website, the calculators and your account, and is written to meet the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Controller
The controller responsible for your personal data is Okan Can Kahraman, Ankara, Turkey. Contact for all privacy questions and requests: okancankahraman@gmail.com.
2. What we process
- Account data: e-mail address, name (optional), a bcrypt hash of your password (never the password itself), or – if you sign in with Google – your Google account ID, e-mail and name as provided by Google; account creation and last sign-in time.
- Your saved work: WPS drafts, weight lists, cutting and nesting lists, calculator settings and your company profile including any logo you upload.
- Session cookie: one strictly necessary cookie (
sid, HttpOnly, Secure) that keeps you signed in, valid for up to 30 days. We use no advertising, tracking or third-party analytics cookies. - Browser storage: the calculators keep your language, unit choice and current inputs in your browser's local storage so they survive a reload. This stays on your device.
- Visitor statistics: page address, the domain of the referring website, browser language, a device class (phone, tablet or desktop) and an anonymous visitor code. The code is a one-way hash of your IP address and browser with a random value that changes daily and is never stored, so it cannot be traced back to you or linked across days. Your IP address is not stored for statistics.
- Server logs: our web server records IP address, time, requested address and browser in its access log for security and troubleshooting. These logs are deleted automatically after 14 days.
3. Purposes and legal bases
- Providing your account and saving your work: performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- Security, abuse prevention and server logs: legitimate interest in operating a secure service (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- Anonymous visitor statistics to improve the site: legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- Answering your requests and legal obligations: GDPR Art. 6(1)(c) and (f); KVKK Art. 5(2)(ç) and (f).
4. Recipients and services
- Hosting: Contabo GmbH (Germany); the server is located in the European Union. It stores the data on our behalf under a data processing agreement.
- Google Sign-In (Google Ireland Ltd. / Google LLC): only if you choose it. Google then processes your sign-in under its own privacy policy.
- Content delivery: the page loads fonts from Google Fonts and program libraries (PDF and Excel export) from cdnjs by Cloudflare. Your browser connects to these servers, which receive your IP address.
Some of these providers may process data outside the EU/EEA or Türkiye (for example in the USA). Such transfers rely on the safeguards these providers offer, such as the EU Standard Contractual Clauses and the EU–US Data Privacy Framework, and for transfers from Türkiye on KVKK Art. 9. We do not sell personal data and do not use it for advertising.
5. Retention
- Account data and saved work: until you delete your account or ask us to.
- Session cookies: up to 30 days, or until you sign out.
- Server logs: 14 days.
- Anonymous statistics: up to 400 days.
6. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest (Art. 15–21). Under KVKK Art. 11 you may learn whether your data is processed, request information, learn the purpose, know the recipients, request correction or deletion and object to results that arise from automated analysis. Send your request to okancankahraman@gmail.com; we answer within 30 days. To delete your account, write from the e-mail address of the account.
You may complain to a data protection supervisory authority, in particular in the EU member state where you live, or in Türkiye to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).
7. Security
All traffic is encrypted with HTTPS. Passwords are stored only as bcrypt hashes, sessions as hashed random tokens, and sign-in attempts are rate-limited.
8. Children
BenchMaths is a professional tool and is not directed at children under 16.
9. Changes
We will update this page if the processing changes; the effective date is shown above.