Privacy Policy
Last updated: 2026-09-20
1. Controller
Controller responsible for data processing on this website:
A Koç
Tütüncüler Köyü
Tütüncüler Küme Evleri No: 36
53300 Pazar / Rize
Turkey
Email: ak@ak-pro.com
Phone: +90 530 161 56 09
2. What this website is
AK Flags (“Flags of the World”) is a publicly accessible informational website that displays country flags and offers an interactive flag quiz. The website does not require registration, does not create user accounts, and does not accept uploads or submissions from visitors.
3. What data we process
3.1 Server logs (automatic)
Like every web server, our hosting infrastructure temporarily records technical access logs. These may include:
- IP address (anonymised where possible)
- Date and time of the request
- Requested URL / path
- HTTP status code
- Browser type and version (User-Agent header)
- Referrer URL (if sent by your browser)
These logs are used exclusively for operational security, error diagnosis, and defence against abuse. They are not used for analytics, profiling, or marketing.
3.2 Fonts
Inter is hosted on this website. Loading the font does not contact Google.
3.3 What we do NOT collect
- No user accounts or registration
- We do not ask visitors to submit names, postal addresses or payment details. Technical data and consent-based analytics are described separately in this policy.
- No payment information
- No uploaded files
- No comments or user-generated content
- No newsletter or email subscriptions
4. Purposes of processing
- Delivering the website and its static content (flags, quiz)
- Ensuring operational security and stability
- Defending against misuse and attacks
- With consent: understanding website usage and quiz engagement.
5. Legal bases
- Art. 6(1)(f) GDPR — legitimate interest in operating a secure and functional website
- Analytics: consent under Art. 6(1)(a) GDPR, withdrawable at any time.
6. Retention period
Server logs are retained for up to 30 days. GA4 event data retention is set to 2 months and user data retention to 14 months; new activity can reset user retention.
These GA4 retention settings apply to user-level and event-level data. Standard aggregated reports are not covered by these periods. Cookie lifetimes and storage of your consent choice are described below.
7. Data sharing
We do not sell your data. The following providers receive data to operate the website or, with your consent, provide analytics:
- Hosting provider: Hetzner Online GmbH (Germany) — server infrastructure and network
- Google Analytics 4 (Google Ireland Limited) — With consent: understanding website usage and quiz engagement.
Google may process analytics data outside your country, including in the United States. Information about Google's processing and international transfer safeguards is available in its privacy documentation. Google Analytics privacy information
8. Cookies
Google Analytics 4 loads only after you consent. It receives page URLs, referrers, browser and device information, pseudonymous cookie identifiers, and usage events such as page views, sessions, engagement, scrolling and outbound link clicks. These identifiers can distinguish returning visitors; the data is not anonymous.
According to Google, GA4 uses your IP address to derive approximate location information and then discards it before logging the data. Google Analytics privacy information
We also send quiz_start and quiz_complete events with language and, on completion, score and question count. We do not send individual quiz answers. Google signals and advertising personalization are disabled in our website tag.
The first-party cookies _ga and _ga_* distinguish visitors and retain session information. We use the default lifetime of 2 years, renewed on subsequent visits with consent. Your browser may enforce a shorter lifetime. Cookie expiry is separate from retention of data already sent to Google.
Your choice is saved as granted or denied under analytics-consent in localStorage in this browser. It has no automatic expiry in our code and remains until you change it or clear website data; your browser may remove it sooner. If storage is blocked, the choice applies only to the current page. Language is selected through the URL, without a language cookie.
Use Analytics settings in the footer to change your choice or withdraw consent at any time. Withdrawal stops future measurement, deletes analytics cookies accessible to this website and reloads the page if Analytics was loaded. It does not automatically delete data already sent to Google or affect the lawfulness of earlier processing.
9. Your rights
Under applicable data protection law, you have the right to:
- Access information about your stored data (Art. 15 GDPR)
- Rectification of incorrect data (Art. 16 GDPR)
- Deletion of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
Contact for privacy requests: ak@ak-pro.com
10. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. For users in Turkey: KVKK — Kişisel Verileri Koruma Kurumu. For users in the EU: the supervisory authority of your member state.
11. Changes
We may update this privacy policy to reflect changes in the service or legal requirements. The current version is always available on this page.