Privacy policy
Last updated November 2, 2026
This policy covers the RealtimeWeb browser extension, the website realtimeweb.net and the RealtimeWeb mobile app. It explains what we collect, why, how long we keep it and how you control it.
Who we are
RealtimeWeb is operated by Databilim Teknoloji Anonim Şirketi, Yeni Mahalle 264. Sk. No:4 Kat:3 D:3, Karacabey / Bursa / Türkiye. We are the data controller for the personal data described here. Users in Türkiye can also read our KVKK notice.
Privacy questions and requests: privacy@realtimeweb.net
What we collect
Your account. When you sign in with Google we receive your name, email address, profile photo and a Google account ID. We never see your Google password.
What you post. Chat messages, star ratings, reviews, replies, reactions, "helpful" votes, reports and the people you block.
Page address and title. The extension needs to know which page you are on to open the right chat room. Before you open the panel, it sends only a one-way code (a hash) of the address, so we can show how many people are online. The address itself and the page title are sent only when you open the panel, chat or rate. Addresses are cleaned first: tracking parameters (such as utm_ codes) and anything after # are removed.
Sessions. For each device you sign in on, we store the sign-in date and the browser or device type, so you can see and end your sessions under Account.
Technical data. Your IP address is used for a short time to limit abuse (for example too many requests in an hour) and appears in server logs.
Site owners. If you verify a site, we store the domain, the verification method and the date.
Contact form. Your name, email address and message, sent to us by email.
What we never collect
- Your browsing history. Pages where you never open the panel are not recorded.
- Page text, form inputs or passwords.
- Audio or video from calls. Calls are connected directly between the two people and are never recorded.
- Advertising IDs. We do not show ads and do not sell data.
Why we use it
| Purpose | Legal basis |
|---|---|
| Creating your account and running chat, ratings and calls | Performance of a contract (KVKK art. 5/2-c, GDPR art. 6/1-b) |
| Stopping fake ratings, spam and abuse; keeping the service secure | Legitimate interest (KVKK art. 5/2-f, GDPR art. 6/1-f) |
| Answering legal requests from authorities | Legal obligation (KVKK art. 5/2-ç, GDPR art. 6/1-c) |
Ratings are weighted by account age to resist fake votes. This is automatic, but it never blocks you or closes your account; the method is public on the "How ratings work" page.
What other people can see
Your name, profile photo, ratings, reviews and chat messages are public. They appear in the extension, on realtimeweb.net and in the app, and search engines can index site and review pages. Your email address is never shown.
During a voice or video call, the other person's device can see your IP address, as with any direct call. If a direct connection is not possible, the call is relayed through our own server without being recorded.
Who we share it with
Our servers and database are run by Databilim Teknoloji A.Ş. itself in Türkiye; no outside hosting company has access to them.
We do not sell personal data. We share it only with:
- Google, to sign you in.
- Our email provider, to deliver emails you ask for.
- Cloudflare, only if the contact form shows a spam check (Turnstile).
- Authorities, when the law requires it.
Your data is stored in Türkiye. If you use RealtimeWeb from the EU, your data is transferred to Türkiye as far as needed to provide the service to you (GDPR art. 49/1-b), since Türkiye has no EU adequacy decision. Google, Cloudflare and our email provider may process data outside Türkiye; for users in Türkiye this is a transfer abroad under KVKK article 9.
Site icons on realtimeweb.net are loaded from the sites themselves, so those sites can see that your browser loaded their icon.
How long we keep it
| Data | Kept for |
|---|---|
| Chat messages | 180 days, then deleted automatically |
| Ratings and reviews | Until you delete them or your account |
| Sessions | Until you sign out or after 60 days without use |
| IP addresses for abuse limits | At most 1 hour |
| Server logs | At most 30 days |
| Contact form emails | As long as needed to answer, then at most 1 year |
| Moderation records | As long as needed to handle abuse and legal claims |
When you delete your account, your profile, messages, ratings, reviews and sessions are deleted at once. Reports you filed stay without your name.
Cookies and local storage
We use only necessary cookies: to keep you signed in, to remember where to return after sign-in, and to remember your language and theme. The extension stores your settings and sign-in on your device. We use no advertising, analytics or tracking cookies.
Your rights
Under KVKK article 11 and the GDPR you can:
- learn whether we process your data and get a copy of it,
- correct wrong data,
- delete your data,
- object to processing and ask to restrict it,
- learn who we shared it with,
- ask for compensation if you were harmed by unlawful processing.
You can do most of this yourself under Account: edit your profile, download your data, end sessions, block people and delete your account. For anything else, write to privacy@realtimeweb.net. We answer within 30 days. You can also complain to the Turkish Personal Data Protection Authority (KVKK) or, in the EU, to your local data protection authority.
Children
RealtimeWeb is for people aged 16 and over. If we learn that a younger child has an account, we delete it.
Security
Connections are encrypted (HTTPS and WSS). Sign-in tokens are stored as one-way codes on our servers. Staff accounts need two-factor sign-in.
Changes
We will post changes on this page and update the date at the top. If a change affects how we use your data, we will announce it in the extension and on the website at least 14 days before it applies.