Privacy policy
Last updated: October 2, 2026
Who we are
AppHitlist operates the AppHitlist website and related services. Contact us at [email protected].
Data we collect
Account data: name, email address, and either a password hash or an OAuth provider identifier when you sign in with Google or GitHub.
Preferences: preferred language, email alert settings, and the apps on your watchlist.
Subscription status linked to your account (managed by Polar as merchant of record).
Technical logs such as IP address and request metadata, used for security and rate limiting.
Purposes and legal bases
We process account and subscription data to provide the service under a contract with you.
We use Sentry for error monitoring and send limited server-side signup and subscription events to PostHog on the basis of legitimate interest (no browser cookies, no client-side tracking).
Browser analytics with PostHog run only after you give consent through our cookie banner.
Processors
Polar processes payments, tax and invoices as merchant of record.
Resend sends transactional email. Sentry receives error reports. PostHog receives analytics events when you consent.
Cloudflare R2 stores media files. The application is hosted on Hetzner.
International transfers and retention
Some processors may process data outside Türkiye or the European Economic Area. We rely on their contractual safeguards.
We keep your account data until you delete your account. Polar retains billing records as required by law.
Your rights
Under the GDPR and Türkiye’s KVKK you may access, rectify, export or delete your data, object to certain processing, and lodge a complaint with a supervisory authority (including the KVKK Kurulu).
You can export your data and delete your account from the Account page. For other requests, email [email protected].