Privacy Policy
Last updated: 2026-05-10
1. Who we are
Otta is a Progressive Web Application operated by Hamit ("we", "us"), based in Türkiye. Contact: hello@otta.pro
2. Data we collect
- device_id — UUIDv4 generated on first visit, stored in localStorage and on our backend for rate limiting.
- country — ISO-2 code from Cloudflare CF-IPCountry header.
- User-Agent hash — SHA-256 hash of UA, kept 7 days.
- Anonymous usage counters — per-platform (TikTok, IG, etc.) success/failure counts.
- Crash reports — Sentry, scrubbed of PII.
3. Data we never collect
- The URLs you paste into Otta — these are never logged.
- Your IP address (Cloudflare hashes it before we ever see it).
- Email, name, phone, or any personal identifier.
- Browser fingerprint or cross-site tracking cookies.
- The content you download — Otta returns CDN URLs, transfer happens in your browser.
4. How we use data
- Rate limiting (20 saves/hour per device) to protect your accounts.
- Anonymous analytics to understand which platforms work well.
- Crash reports to fix bugs.
5. Third parties (subprocessors)
- Cloudflare — hosting, CDN, analytics (cookieless)
- Oracle Cloud — yt-dlp resolver service
- Google AdSense, Tapjoy, AdGate — advertising (with your consent)
- Sentry — crash reporting
6. Your rights (GDPR + KVKK + CCPA)
- Access: ask what we have about your device_id.
- Erasure: request deletion of your device_id and all associated counters.
- Portability: JSON export within 30 days.
- Do Not Sell: we don't sell your data. CCPA opt-out is on by default.
Email hello@otta.pro with subject "GDPR" / "KVKK" / "CCPA" and your device_id (settings → "Verilerimi sil").
7. Cookies
Otta itself uses no cookies. Ad networks (AdSense, Tapjoy, AdGate) may set cookies once you consent via the cookie banner.
8. Children
Otta is not directed at children under 13 (COPPA) or under 16 (GDPR). If you believe a child has used Otta, contact us for deletion.
9. Changes
Material changes will be announced via in-app banner with at least 30 days notice. Revision history is maintained in our public repo.