Your memories. Your control.

Toplandık lets event owners create a private album and QR card while guests upload photos and videos without installing an app. This policy applies to the website, customer and partner dashboards, event links and digital QR screens.

The event owner controls who receives the album link. Guest uploads do not require an account. A random ownership key lets an uploader delete their own content from the same device.

• Account and contact: email address, password hash and session dates.
• Event: type, name, date, theme, QR design, link code and publication status.
• Media: uploaded photo or video, optional note, file information and upload time.
• Usage and security: random visitor ID, view and upload counts, cookies and standard server logs.
• Payment: amount, currency, status and provider transaction/reference ID. Toplandık does not store card details.

• Create and secure accounts and dashboards.
• Provide event links, QR tools, albums, downloads and presentations.
• Store and display media to authorized visitors.
• Let uploaders delete their own content from the same device.
• Match payments, publish events and show event statistics.
• Prevent abuse, investigate errors and meet legal obligations.

Album content is never used for advertising, promotional galleries or AI model training.

We do not use advertising or third-party tracking cookies. Essential first-party cookies keep account sessions active, distinguish a browser for unique visitor counts, remember the selected language and allow upload ownership from the same device. Deleting them may sign you out or remove same-device deletion rights.

Data is not sold. It may be shared only as necessary with hosting, security, object storage, payment, accounting, legal and support providers, or competent authorities when legally required. Some infrastructure may be outside Türkiye; transfers follow applicable safeguards.

• Event albums remain available until the expiry date shown in the dashboard; the current plan is three years.
• After expiry, access and uploads stop and data enters deletion or anonymization processes subject to legal and technical requirements.
• Sessions are retained for up to 30 days; visitor and media ownership keys for up to 183 days.
• Payment and transaction records may be kept for mandatory tax, accounting and dispute periods.
• Draft events and uploader-owned media can be deleted through the available controls.

• HTTPS is used in transit.
• Passwords and sensitive tokens are stored as secure hashes.
• Access controls and encryption are applied to media storage.
• Original media is not recompressed or converted by the service.

No internet service can guarantee absolute security. Contact us if you notice suspicious activity.

You may request access, correction, deletion, restriction, objection and other rights available under applicable law. Include your account email and a clear description of the request so we can verify it securely.

Support

[email protected]

Payment security

Payments are completed through secure payment infrastructure without Toplandık viewing your card details.