Privacy Notice
Controller: BVS Doctors LTD — registered in England and Wales (Company No. 16987192), 71-75 Shelton Street, London WC2H 9JQ, United Kingdom (“bvsly”) · Contact: privacy@bvsdoctors.com
bvsly (BVS Link Yolla) is a link-shortening service. This notice explains what we process when you click a bvsly link, open a preview page or view a bvsly notebook (Turkish KVKK art. 10, GDPR art. 13).
1. What we collect
When you click a bvsly link or scan its QR code: your IP address; browser and device information (user agent; device type); country and city estimated from your IP; the referring page; date and time; whether you came via QR. For private notebooks: the e-mail address of your Google account, only to check access. For link creators: e-mail address and link records.
2. Why
To redirect the link and run the service; to give the link owner aggregate statistics — the owner never sees your IP or anything identifying you (legitimate interest); to prevent abuse — malicious / phishing links, bots, fraud — and to investigate security incidents (legitimate interest, GDPR art. 6(1)(f)).
3. How long
In the statistics record, city and the full referring address are removed after 30 days; only country, device type and the referring site's domain remain. The IP is never kept in the statistics record — only an irreversible hash. The full record (IP, user agent, city, full address) is kept in a restricted security archive for 2 years; the IP address and browser information are then deleted.
4. Who receives it
We do not sell your data or use it for advertising. Infrastructure: Cloudflare (network, redirects, file hosting; global, US-based), Supabase (database; Frankfurt, EU), Google Safe Browsing (only the destination of a newly created link is checked; no visitor data is sent), Google Gemini (when a profile photo is uploaded to a bvsly Page, only that photo is sent for an inappropriate-content check; rejected photos are not stored). Some providers are outside Turkey / the EU; transfers follow KVKK art. 9 and the GDPR. Information may be disclosed to authorities where legally required.
5. Cookies
bvsly uses strictly necessary cookies only; there are no advertising, tracking or analytics cookies, so no consent banner appears. Short links and preview pages set no cookies.
| Cookie | Purpose | Lifetime |
|---|---|---|
| __Host-bvsly | Sign-in session (email code) | 30 days |
| dil | Your language | 1 year |
| bvsly_ed_… | Notebook editing permission | 30 days |
| bvsly_tel_… | Phone upload link (one device) | 2 hours |
| CF_Authorization | Admin panel sign-in (Cloudflare Access) | session |
Your light / dark theme choice is not a cookie; it stays in your browser (localStorage) and is never sent to the server.
6. Your rights
You may request access, correction, deletion, object to processing and lodge a complaint (KVKK art. 11, GDPR art. 15–22). Write to privacy@bvsdoctors.com; we reply within 30 days.
Last updated: 26.09.2026