Privacy

• Your email address and a hashed password — to let you sign in. The password is stored only as a bcrypt hash; we cannot read it.
• Your display name — chosen by you, shown publicly beside your number.
• Your admission record — member number, the amount paid, and the date. This is a permanent public record.
• What you write — entries in the global room, private messages, reactions, your profile text and links.
• A payment reference, where a payment has been made. We do not receive or store your card number.

We do not run advertising trackers, we do not sell your data, and we do not build profiles of you for third parties.

Your member number, display name, admission date, admission amount, profile text and links, and your entries in the global room are public. The registry is readable by visitors who are not members.

Your email address is never shown to other members. Private messages are visible only to you and the member you are writing to.

If you run a Spotlight campaign once THE SPOTLIGHT exists, that campaign is public while it is live: its content, its destination link and the member number behind it — shown as, for example, Promoted by #000025 — appear on the homepage to members and non-members alike, and at the top of THE ROOM. That exposure is the point of the placement, and it is the same single campaign in both places. THE SPOTLIGHT is not implemented yet, so nothing of yours is published this way today.

Paid admissions are currently closed. No payments are being accepted, and no payment provider is processing data for us at this time.

Our hosting and database provider stores the application data described above. We do not share your data with anyone else today.

A past provider integration, stated plainly. Before paid admissions closed, checkout sessions were opened against a payment provider’s test environment while an application to that provider was under review. Opening one of those sessions sent that provider the account email address for the session and internal reference identifiers — a member number and a hold id. No card details ever reached us, and the application was declined, so that integration is no longer in use. We are describing this rather than removing it, because it happened.

We cannot verify what that provider retains, and we do not claim on their behalf that anything has been deleted. If you took part in one of those test sessions and want to know what they hold or ask them to erase it, write to us at support@getonthelist.lol and we will tell you which provider it was and what we sent them, so you can make the request directly.

When paid admissions reopen, the provider that processes payments will be named here and in the Terms before any payment is taken.

Account data is kept while your account exists. The admission record — number, amount, date — is kept permanently even if you close your account, because the register is a historical record and a number that was issued is never reissued.

If you close your account, your display name is replaced with a placeholder and your profile text, private messages and email address are deleted. Your entries in the global room are withdrawn: the entry stays in the record, its content is withheld.

You can ask us for a copy of your data, to correct it, or to delete your account. Write to support@getonthelist.lol and we will respond within two business days.

The one thing we cannot delete is the fact that a member number was issued on a particular date for a particular amount. That is the register itself.

If THE ROOM ever closes permanently, you will be given an opportunity to export your own profile and your own messages before it does. There is no self-service export tool today; until one exists, ask us at the address above and we will provide your data by hand.

Where it is legally and technically possible, THE REGISTER will remain available in read-only form for at least 12 months after THE ROOM closes. That archive is the register and nothing more: issued member numbers, their admission dates and their status — including whether a number has been retired after a refund — subject to applicable law.

Private messages and private content from THE ROOM never form part of a public read-only archive. What was private stays private, including after closure.

We set three cookies, all of them functional. There are no analytics, advertising or third-party cookies.

• A session cookie — signed and httpOnly, set when you sign in. It contains an account identifier and nothing else.
• A language cookie — stores whether you chose EN or TR, so the page loads in your language next time. It holds the two letters and nothing else, and it is readable by the page because the language switcher has to set it.
• A short-lived admission cookie — httpOnly and valid for a few minutes. It only exists to carry you back to the admission desk after signing in, and it holds no personal data.

If you have not chosen a language, we read the Accept-Language header your browser already sends with every request to decide whether to open in English or Turkish. We do not store that header, and we do not use your IP address or your country to decide what you see.

THE LIST, operated from Türkiye. Data questions and requests: support@getonthelist.lol.