Analysis data
Your Excel/CSV file is opened in your browser and is not uploaded to the server. Only plant names, quantities and the selected location (a province or a point marked on the map) are sent to the server for analysis. This information is used only to compute the result; it is not written to a database and is not added to server logs. Reports (PDF/Excel) are produced in your browser.
Preventing abuse
Two measures protect the service against overload and automated requests:
- Rate limit: your IP address is not stored; a one-way digest (an irreversible code) is derived with a secret key and used only to count requests within a short time window, after which it is deleted.
- Bot check: Cloudflare Turnstile processes browser signals to verify that a request comes from a person. This processing is subject to Cloudflare’s own privacy terms.
Usage statistics
To improve the service, only anonymous usage information is kept: the daily number of analyses and plants, the distribution of analyses by province (map point coordinates are not stored), the daily number of visitors, the number of people on the site in the last few minutes and, to close data gaps, the names of plants for which no data were found and how often they were searched (without who searched, the location or the rest of the list). Visitors are counted with a one-way code derived from the IP address with a secret key that changes every day; the IP address is not stored and the same person cannot be followed across days. For this purpose, a request without content is sent once a minute while the page is open.
Error reports
When you use “Report an error” on a result, the text you send, the plant name, the selected location and the result shown on screen are stored. The name, e-mail and source fields are optional and are used only to reply to you. Reports are read only by the KURAS team; results change only after review. You can write to us to have a report deleted.
Account data
No account is needed for analyses of up to ten plants. For longer lists you sign up with an e-mail address and a password. For an account we keep your e-mail address, your sign-up and last sign-in dates, and the number and time of the analyses made while signed in (Supabase Auth, EU region). Your password is stored only as a one-way digest; nobody can see it. Your plant lists and locations are not linked to your account and are not stored. This information is processed only to run the service and to see how it is used, and is not shared with anyone. The sign-in session is kept in your browser’s local storage and is deleted when you sign out. You can delete your account yourself at any time under “My account”; when it is deleted, all of this information is deleted.
Stored in your browser
No cookies are used. Your browser’s local storage keeps your display preferences (light/dark theme, Basic/Expert view, interface language) and, if you are signed in, your session.
Map
When you choose the project site on the map, map tiles are loaded from OpenStreetMap and Esri servers; these providers can see the area you view.
Your rights
You can send requests for information, correction and deletion under the Turkish Personal Data Protection Law No. 6698 to the contact below. Because KURAS does not store analysis content, data belonging to an analysis is usually not held in the system.
Contact
For questions and data requests, you can reach the team on LinkedIn: Enes Gilik · Miray Yılmaz.