Privacy policy
Scope and responsibility
GNRCounter provides a free website counter and traffic reporting service. This policy covers our website, contact form and counter code installed on other websites. The operator responsible for our own service data is AHMET DEMİR, ATATÜRK MAH. ALEMDAĞ CAD. NO: 140/144 İÇ KAPI NO: 19 ÜMRANİYE/ İSTANBUL; privacy contact: [email protected]. A website owner determines the purposes of analytics on their website. The controller and processor roles for that activity depend on the actual arrangements; this policy does not replace any required data processing agreement.
Information you provide
Creating a guest counter requires website information and settings: domain, country, timezone, language, starting count, colours and display type. We do not request identity documents, payment card details, health information or other sensitive personal information to create a free counter. Our contact form collects your name, email address, subject, message and optional website address so we can handle your request. Please do not include passwords or sensitive information in messages or page addresses.
Technical visitor data
When counter code loads, the request can include an IP address, visited page URL, referring URL, timestamp, browser and operating system information, counter identifier and any identifiers used by the active tracking configuration. Approximate country or city may be derived from the IP address or network provider headers; this is not GPS tracking. Server and security logs may contain request data. IP addresses, URLs and identifiers can be personal data, even when visitors do not complete a form.
Purposes and lawful grounds
Website settings support the requested counter service. Visit data produces traffic reports; technical logs help prevent abuse and keep the service working. Contact information is used to respond to requests. Depending on the activity and applicable law, grounds may include performance of a contract or pre-contractual steps, balanced legitimate interests in service security and support, legal obligations, or consent. Consent is used where required for non-essential tracking or advertising and may be withdrawn without affecting earlier lawful processing.
Cookies and choices
Sessions, preference cookies and similar storage may support security, language selection and saved choices. Analytics and advertising technologies depend on the configuration in use. Where the law requires prior consent, non-essential technologies must wait for that consent. Using the website is not consent. You can manage available choices through the consent interface and your browser; blocking essential storage may affect features. Cookie names, providers, purposes and durations are listed at . A hidden counter is invisible, not automatically anonymous or exempt from consent.
Advertising and Google
If Google AdSense is enabled, Google and other advertising providers may use cookies to serve advertisements based on earlier visits to this or other websites. Google advertising cookies allow Google and its partners to personalise ads. Settings depend on your region and consent. Manage Google ad preferences at My Ad Center; see Google’s partner-site information and industry opt-out options. Other enabled ad providers: . This section does not mean advertisements are currently active.
Recipients and international processing
Hosting, database, network security and technical support providers may process data necessary to deliver the service. Cloudflare may handle requests for network delivery, security and approximate location information. Current providers and processing countries: . Disclosures required by valid law may also occur. International transfers require the safeguards applicable to the relevant law, such as recognised adequacy decisions or contractual safeguards where appropriate; a translation or consent banner alone is not a transfer safeguard.
Retention, security and reports
Retention periods for raw visits, summaries, security logs, contact messages and backups: . Data is removed or anonymised when no longer necessary, subject to applicable legal requirements. Reasonable access controls and security measures are required, but no system is risk-free. A visible counter publishes selected totals. Website owners must check whether dashboard or statistics links make reports accessible and avoid publishing personal information. Aggregated statistics are not necessarily anonymous if individuals remain identifiable.
Regional rights
Where applicable, the EU/EEA GDPR and national ePrivacy rules, UK GDPR and PECR, Swiss FADP, Türkiye’s Law No. 6698 (KVKK), Canadian PIPEDA and applicable provincial laws, and US state privacy laws such as California CCPA/CPRA provide rights subject to their scope and exceptions. Other relevant frameworks include Brazil’s LGPD, Japan’s APPI, Indonesia’s PDP Law, India’s DPDP framework as provisions enter into force, Australia’s Privacy Act and Russian data protection rules. Language does not determine which law applies. No statement here claims automatic compliance with every country’s law.
Requests and complaints
Depending on applicable law, you may request access, correction, deletion, restriction, portability, withdrawal of consent, or object to processing. US rights may also include opting out of sale, sharing or targeted advertising and appealing certain refusals. We do not sell personal data for money; advertising disclosures can nevertheless count as sharing or sale under some laws and require applicable choices. Send requests through our contact page or [email protected]. We may request proportionate verification, not unnecessary identity documents. Requests are handled within applicable legal deadlines, including generally one month under GDPR and up to 30 days under KVKK, with lawful exceptions. You may complain to your competent authority, such as an EU supervisory authority, the ICO, KVKK or Canada’s privacy commissioner.
Canada and United States: additional information
Where PIPEDA or provincial law applies, collection must be limited to appropriate purposes, with meaningful consent where required, access and correction mechanisms, and accountability for service providers. Québec, Alberta and British Columbia have relevant provincial regimes. US state rights depend on residency and legal applicability; exercising rights must not trigger unlawful discrimination. Where required, valid Global Privacy Control (GPC) signals must be honoured for sale or sharing. Available advertising and disclosure choices: .
Children, website owners and changes
The service is intended for website owners and is not directed at children. Do not deliberately send children’s or sensitive data through the counter; notify us if such data appears. Owners installing the code must provide their own notice, obtain any required consent, limit the data sent and check applicable contracts and local rules. We do not use these counter reports to make decisions with legal or similarly significant effects about individuals. Changes to this policy are reflected in the update date; material new purposes require appropriate notice and, where required, fresh consent.