SCROLLFOLD
Website privacy and cookies
Last updated: 21 October 2026
This notice covers the scrollfold.com promotional website. It does not cover data processing in the mobile app.
Controller and contact
Scrollfold is provided by Selçuk Arslan under the RS App Studio brand. RS App Studio is not described here as a separate company. Contact info@scrollfold.com for privacy, preference records and rights requests.
Your choice
Google Analytics is optional and does not load before your explicit acceptance. Accept and reject are equally available; rejecting does not restrict the website or the waitlist. Scrolling, closing the page or continuing to browse is not consent. We do not use advertising or marketing cookies. You can give or withdraw consent at any time using Cookie preferences.
What does analytics process?
If you accept, Google Analytics produces statistics about home page views, device and browser types, approximate location and general traffic sources. Google also processes your IP address during the connection. Cookie identifiers are pseudonymous; this system is not anonymous. Form contents, email addresses, account identifiers, URL parameters and admin pages are excluded. Ad personalisation, Google Signals and Enhanced Measurement are disabled. Analytics relies on your consent.
Preference records and retention
To apply and demonstrate your choice, we record a random receipt number, choice, server time, language, notice version and notice integrity digest. Only a digest of the receipt is stored on the server; the record does not include your name, email, raw IP address, browser details or GA identifier. These are pseudonymous records, not a count of people or a behaviour history. Evidence is automatically removed after 365 days. Your browser preference expires after 180 days; visits do not extend it. This necessary preference management is separate from optional analytics.
Withdrawal and deletion
Withdrawal immediately stops new measurement and clears this site’s GA cookies. Measurement stops even if the recording service is unavailable; you can retry saving the preference record. Withdrawal does not affect the lawfulness of processing carried out before it and does not automatically delete data previously sent to Google. User and event data retention in the Google property is 2 months; standard aggregate reports have a different retention scope. Contact us for rights requests.
Waitlist and security
If you separately join the waitlist, your email address, language, launch consent and registration time are stored solely to announce the app launch. This is separate from analytics consent; registration sends no email. Contact info@scrollfold.com to leave the list. Hosting provider Hetzner and network/security provider Cloudflare process technical connection data such as IP addresses to deliver the website. This processing is not combined with preference statistics.
Recipients and processing abroad
Google receives analytics data; Hetzner and Cloudflare provide hosting and network services. Data may be processed outside Türkiye. Cookie acceptance alone does not provide a legal basis for international transfers. The new analytics version will not be activated until applicable transfer conditions and provider agreements are completed. Contact info@scrollfold.com for information about the relevant safeguards.
Your rights
Subject to applicable KVKK and GDPR provisions, you may ask whether your data is processed, request information and access, correction or deletion, and, where applicable, restriction, objection and portability. You may withdraw consent at any time and complain to the competent data protection authority. Sharing your preference receipt helps us find the record; you do not need to send an identity document solely for that purpose. We request only the verification necessary for your request.
Cookie inventory
| Cookie | Purpose and provider | Maximum duration |
|---|---|---|
sf_website_analytics | Scrollfold: necessary preference cookie containing choice, receipt and fixed expiry. Not used for analytics. | 180 days |
_ga, _ga_* | Google Analytics: pseudonymous visit and session measurement after acceptance only. | 180 days; visits do not extend it |
__Host-sf_admin | Scrollfold: necessary HttpOnly session cookie for admin sign-in only. | 8 hours; server idle limit 30 minutes |
__Host-sf_challenge | Scrollfold: necessary second step of admin sign-in only. | 5 minutes |
__Host-sf_csrf | Scrollfold: necessary protection against forged admin requests only. | 1 hour |