Rights and Terms

varolsun is operated by HASHO HARVEST LLC, a limited liability company formed in Delaware, United States (the “Company,” “we,” or “us”). “varolsun” is our platform name, covering the website, public creator pages, embeddable support tools, dashboards and related services. These terms apply, as applicable, to visitors, account holders, creator applicants and supporters.

Creators are also subject to the Creator Agreement and Fees and Payouts policy. Supporters are also subject to Supporter and Payment Terms and the Cancellations, Refunds and Disputes policy. Community rules form part of the terms. Privacy and cookie notices are separate disclosures, and accepting these terms is not blanket consent for data processing.

You must be at least 18 and have legal capacity to enter agreements where you reside to create an account, join as a creator or pay support. A representative of a business must have authority to act for it. Services may be unavailable to sanctioned persons or locations or where applicable law prohibits their use.

Provide accurate and current details. Do not impersonate others. Safeguard credentials and notify us promptly of suspected unauthorized access. At registration, the applicable version, date and link to these terms should be shown with an unchecked acceptance control. Privacy notices and applicable Turkish KVKK information are provided separately. Marketing consent is optional. Acceptance records and timestamps may be retained, including for social sign-in.

varolsun enables creators to present work, share support links and, when authorized payment features are launched, receive one-time or monthly voluntary support. It does not sell memberships granting access to creators' paid work. A public profile is not an endorsement or guarantee of every creator statement.

The Company's regulatory obligations depend on its actual contractual and payment activities, not merely how they are described. We do not represent ourselves as a bank, licensed payment institution, investment intermediary or charity. Live payments require appropriate provider and legal clearance.

Creators are responsible for their identities, profiles, images, links and specific promises. We do not guarantee earnings, project success or the truth of every creator statement. Contributions made through varolsun do not buy goods, exclusive content or membership privileges. A promise made outside the platform is not our obligation unless expressly assumed. None of this excludes the Company's own mandatory duties.

After payments are enabled, a supporter may authorize a one-time contribution or expressly select a recurring monthly contribution. Monthly payments recur under terms disclosed before checkout until canceled. The amount, currency, billing date, fees and applicable taxes must be displayed, and future payments must be cancellable from the relevant account interface.

A currency suggested by approximate country may be changed. An EUR or USD preview is not proof that collection in that currency or country is available, nor a binding foreign-exchange quote. Cross-border payment capabilities remain subject to provider approval.

Accounts and creator applications are free. The planned platform fee is 8% of the gross contribution. Card and payment processing costs are borne separately by the creator and deducted from creator proceeds. Actual provider fees, FX costs and any taxes will be disclosed when confirmed before live collection. Net creator proceeds are determined after provider settlement. Supporters pay the amount they explicitly approve at checkout, subject to any separately disclosed charges.

Fees are not retroactively imposed. Material changes affecting users should be notified beforehand, with a planned minimum of 30 days where appropriate. Separate card issuer or bank conversion charges may apply.

If enabled, payments and payouts are processed with appropriately authorized providers. Identity, tax, sanctions and other verification may be required. Transactions may be delayed, refused or lawfully held due to fraud concerns, chargebacks, legal duties or provider instructions. The exact roles of the Company and the provider depend on the approved payment architecture.

Use the platform lawfully and respect others' rights. Fraudulent collections, impersonation, misleading claims, sanctions evasion, spam, threats, payment fraud, rights infringement, attacks on infrastructure and security bypasses are prohibited. Further details appear in the Community and Prohibited Activities policy.

Creators retain rights to their original material. They grant the Company a limited, nonexclusive, worldwide, royalty-free license to display profiles, operate necessary caching, support platform features and carry out reasonable on-platform promotion, including necessary technical sublicenses to vendors. This license ends on profile removal except where backups or legal retention apply. Off-platform advertising using a creator's likeness requires separate permission. Company marks and software remain the property of the Company or its licensors.

Use provided buttons only on sites where you have permission. Do not misrepresent the recipient, amount, destination or branding. Buttons may change or be disabled for security, technical or compliance reasons. We do not control third-party sites where buttons appear.

We may reject applications or restrict accounts for reasonable security, legal or policy concerns. Where feasible, we provide a general explanation and a review route unless urgent risk or law prevents it. Closure does not extinguish accrued refunds, lawful payment claims, privacy rights or required record retention.

Authentication, hosting, email, analytics and payment services may be provided by third parties under separate terms. Providers bear their own legal obligations; the Company remains responsible for its own acts and nonwaivable duties.

We seek to maintain reasonable security but cannot guarantee uninterrupted, error-free service. Maintenance, cyber incidents, provider outages and events beyond reasonable control may interrupt availability. We will perform any incident reporting required by applicable law.

To the extent permitted by law, the platform is supplied in its current state and may change. Creator earnings, supporter outcomes and every profile claim are not guaranteed. Mandatory warranties and express commitments remain unaffected.

We do not exclude liability that cannot lawfully be excluded, including applicable mandatory consumer and data rights and liability for intentional misconduct or gross negligence where relevant. Liability for remote or unforeseeable losses or independent third-party acts may be limited only where legally allowed. There is no arbitrary universal dollar cap.

To the extent permitted by law, users may be responsible for legitimate claims arising from their deliberate fraud, unauthorized material or substantial breach. We cannot shift our own wrongdoing or nondelegable statutory responsibilities to users.

The Company is organized in Delaware, United States. Which law or forum applies depends on the facts and the parties' applicable rights. Nothing in these terms automatically removes mandatory local consumer, privacy or judicial remedies. Contacting support before formal proceedings is encouraged but is not required where the law grants direct remedies.

Material changes should be versioned, dated and communicated with reasonable advance notice. Fresh acceptance is sought where law requires it. New provisions do not retroactively alter completed transactions unless legally necessary.

If a clause is unenforceable, other lawful provisions remain effective. Delay in enforcing a right is not a waiver. Electronic terms may be saved. Turkish and English versions are offered for accessibility; any language-precedence rule must respect mandatory law. Questions: destek@varolsun.com.

This agreement supplements the Terms of Use for those applying to manage a creator profile or use enabled support functions. A creator is the individual or duly represented organization responsible for an approved profile. Mandatory law overrides any inconsistent provision.

Applications may include name, contact details, work description, links and appropriate authority or identity documentation. We may evaluate authenticity, safety, platform fit and provider eligibility, using reasonable, consistent criteria. Admission does not mean endorsement of the creator's views or work.

Age, country, identity, beneficial recipient, tax information and authority to act may require verification. Approval to publish a profile is distinct from approval to receive funds. Inaccurate information can lead to rejection or restriction.

Creators must describe their activities honestly and have the necessary rights for images, text, brands and links. They must not misrepresent themselves as a charity, another person or institution, or imply that varolsun sells a membership, reward or deliverable that it does not actually provide.

Support must not be mischaracterized as an investment, loan, equity interest, product sale or tax-deductible charitable donation. Creators are responsible for promises made outside the platform and must not misstate supporter identity or payment source.

Creators must complete required onboarding and checks with an approved provider when payments are enabled. Stripe Connect or Stripe Express are possible technologies, not confirmed as available or approved for varolsun or creators in Türkiye. Payments are not activated for any country or person without the needed eligibility and provider approval.

The planned platform commission is 8% of gross support. Card and payment processing fees are borne by creators and deducted separately from their earnings. Actual fees, any tax treatment and currency conversion must be confirmed before launch. Gross amounts, platform charges, provider fees, refunds and eligible net amounts should be separately visible. No undisclosed retrospective charges will be imposed.

For international contributions, original currency, amount, conversion rate and time, platform and provider charges, taxes and any resulting TRY balance will be recorded once applicable functionality is authorized. Currency previews do not guarantee a net TRY payout.

Payouts depend on provider country eligibility, verification, bank requirements and risk controls. Wednesday review is a planned operational schedule, not a promise of deposit every week. The expected currency for creators in Türkiye is TRY, but exchange timing and rate are not fixed until the provider's terms are established. Reasons for delays and feasible next steps should be communicated.

Fraudulent, unauthorized, erroneous or legally refundable transactions may be reversed. Issuers and providers may impose chargebacks. Creators may bear proportionate deductions attributable to their own misconduct or obligations, not the Company's own wrongdoing. Negative balance procedures and any reserves must be disclosed.

Creators must assess income tax, invoicing, reporting and other obligations in their own jurisdictions. The Company or provider may request tax details or withhold/report amounts when legally required. Using a US LLC does not remove a creator's tax duties in the country where they live or work. The Company has its own separate compliance duties.

Creators may receive only lawful, necessary supporter details. They must not sell these records, send unsolicited marketing or use them for unrelated purposes. Public anonymity does not remove the provider's or Company's lawful transaction records. Responsibility for data handling depends on the real data flow and applicable law.

Creators own their work and provide only the limited permissions required to operate the platform, show profiles and use selected sharing tools. They must not use third-party photos, marks, music or writing without rights or permission.

We may investigate accuracy, suspicious payment activity or policy compliance, request documents, temporarily restrict profile visibility or terminate an account where justified. A reason and review route should be offered where permitted. This agreement does not confer unlimited power to hold funds indefinitely without justification.

Creators may close profiles. Existing recurring arrangements and supporters must be handled transparently. Closure does not erase refunds, pending disputes or legal record-keeping obligations. Funds in transit are governed by approved provider arrangements and law.

Creators remain responsible for representations, permissions, taxes and external undertakings. The Company remains responsible for its own platform conduct, notices, security and wrongdoing. General limits and dispute terms appear in the Terms of Use.

A “supporter” voluntarily contributes to an independent creator. Such support is not an investment, loan, equity purchase or guaranteed revenue share. It is not a product or service sale unless expressly and lawfully identified as one. varolsun does not claim charitable status or that contributions qualify for tax deductions.

When approved payments become available, checkout must identify the creator, contribution amount and currency, whether it is one-time or recurring, the total charge, any applicable tax or extra fee and relevant provider terms. Payment credentials should be collected using a secure provider interface; storage of full card details by varolsun is not intended and must be verified technically.

A visitor's approximate country may suggest a default display currency, which can be changed manually. A displayed foreign currency does not mean that transactions in that currency are supported. Before confirmation, the actual amount, currency and relevant exchange or additional costs must be disclosed.

A one-time payment authorizes only the amount displayed for that transaction. It does not authorize recurring billing without a separate affirmative selection. A completed payment is reflected in a receipt or account history. A provider or network failure may mean the contribution was not successfully processed.

Monthly support requires an explicit choice and authorization. Amount, cadence, first billing date and cancellation method must be displayed before confirmation. Charges recur under those disclosed terms until cancellation. Changes in pricing are communicated in advance, with renewed consent when law requires it.

Supporters may stop future recurring payments through the available account controls without contacting a creator or going through unnecessary obstacles. Confirmation and the effective date should be shown on screen or by email. Cancellation does not automatically refund previously completed payments; mandatory refund rights remain intact.

When provider configuration permits, supporters who contributed without an account may use a verified email link to reach Stripe-hosted billing management, stop future renewals and update payment methods. Links are single-use and expire after 15 minutes. Until this is enabled, the support desk remains available for cancellation requests. Stopping renewal does not automatically refund earlier contributions.

Where offered, supporters can choose whether their full name, first name or an anonymous label appears publicly. This affects public display, not mandatory records held by the Company, provider or authorities. Any public visibility of a contribution message requires a clear separate choice.

Contribution messages may not contain threats, harassment, unlawful disclosure or spam. Personal contact details are shared with creators only as permitted by law and the relevant visibility settings. Completing a contribution does not automatically grant creators permission to send marketing messages.

For duplicate, incorrect or unauthorized charges, contact support and, where appropriate, the payment provider or card issuer. We will investigate available records and coordinate a reasonable response. Statutory payment disputes, chargeback rights and mandatory consumer protections remain available.

Changing one's mind or dissatisfaction with a creator may not automatically produce a refund. Errors, unauthorized charges, fraud, applicable consumer rights and specific published refund promises are handled under the Refunds policy. Eligible refunds are generally returned to the original payment method, subject to provider and banking times.

If foreign-currency transactions are enabled, the amount ultimately credited to a cardholder's domestic-currency account may differ because of the bank's conversion rate, currency movements or permitted fees. These provisions do not limit mandatory refunds or payment rights.

Where available, supporters may review contribution history, manage monthly arrangements, change account settings and submit privacy requests. Account closure does not erase active payment disputes or transaction records that law requires us to maintain.

Payment provider acceptance, banking checks and currency conversion are also subject to relevant provider terms. The Company's own legal obligations remain distinct from those of third parties. Only genuinely approved payment methods will be displayed as available.

Registering an account, applying as a creator, creating a profile and generating a support button are intended to be free. Fees apply per completed contribution only when payment features have been authorized and enabled.

The platform fee is 8% of the gross contribution. Actual payment processing costs are deducted separately from creator earnings. Provider rates and live processing terms are not yet finalized. The two fees must be shown separately, and the same platform fee is not charged twice. The finalized creator agreement and transaction report will disclose the applied calculation.

Card networks, banks and providers may charge transaction, international card, conversion or transfer fees. These are not included in the 8% platform fee. Taxes or other mandatory deductions are shown separately where applicable. The supporter total and an appropriately qualified estimate of creator net proceeds must not be misleading.

Currency options: Displaying a suggested currency based on country or a user choice is currently a preview. Once international payment services are approved, the charged and displayed currencies must match and relevant conversion rates, reference times, margins and costs must be disclosed according to actual provider terms.

Before payment launch, at least one illustration consistent with verified provider rates should distinguish gross support, platform commission, processor costs, any applicable taxes or FX effects and creator net proceeds. Illustrative foreign-currency amounts are not binding quotes. Actual settlement must be traceable from original charged amount to any TRY payout, including timing and exchange rate.

Payouts depend on the provider's supported countries, verified recipient identity, approved bank arrangements, sanctions screening and fraud controls. Editorial acceptance is not a promise of payout eligibility. Another platform's use of a particular payment provider does not establish that varolsun has the same permissions.

The operational target is to review eligible net creator balances of at least TRY 2,500 for transfer every Wednesday, following all required verification and provider approvals. Lower balances carry forward. Review is not a guarantee of bank settlement on that day. Status may include pending, processing, sent, rejected by provider or under review.

The final fee schedule must explain whether platform fees and processing charges are returned after refunds, who bears dispute costs and when a lawful reserve may be applied. Reserves require a reasonable basis, duration, review process and appeal route where relevant; indefinite unexplained retention is not assumed.

A minimum of 30 days' prior notice is planned for fee increases affecting existing users, subject to stricter applicable law. Fees for completed historical transactions are not changed retroactively. Creators should have the opportunity to stop new activity or close their profile before a new schedule takes effect.

As a US LLC, the Company assesses its federal, state and any other applicable tax obligations separately. Creators may have income tax, invoicing, reporting or withholding obligations under their own circumstances and local law. These terms are not tax advice. Where required, appropriate records, statements and disclosures should be provided.

This policy governs one-time and monthly support transactions only once authorized payment services are enabled. It does not invent refund rules for physical deliveries, products or membership benefits that varolsun does not sell.

Before final authorization, a contribution may be abandoned. After a completed payment, refunds are evaluated according to provider and card-network terms, checkout representations and applicable mandatory law. The response should state the decision and general reason.

Supporters may cancel future monthly billing through the relevant dashboard. Confirmation should be issued. Cancellation does not automatically reverse earlier settled charges. Cutoff and renewal timing should be explained and reasonable corrections offered if an operational error occurs.

If a technical error produces a duplicate charge or incorrect amount, records should be reviewed and the error corrected, including a refund when warranted. Transaction IDs and timestamps may be used for investigation. Do not email full card numbers or other unnecessary sensitive financial data.

If you believe a card was charged without authorization, promptly contact your bank and varolsun. Applicable card and statutory dispute mechanisms remain available. We will review our records and coordinate with the provider. There is no absolute “all contributions are nonrefundable” waiver of mandatory rights.

Disappointment with a creator's work alone may not establish an automatic refund, but deception, fraud, misleading representations or applicable consumer law may lead to a different outcome. Platform safety complaints may also be reviewed independently.

A status marked pending does not prove final settlement. Verified provider records control reconciliation. If funds were charged but correct onward settlement failed, the parties should be informed and the matter addressed through provider procedures.

Eligible refunds are normally sent to the original method when possible. Card issuer and bank processing can delay when funds appear; a fixed number of business days cannot be promised without actual provider terms. For FX payments, the refund currency and conversion process should be disclosed. Bank rates and exchange movements may affect the cardholder's final local-currency credit without reducing mandatory rights.

Supporters may use their issuing bank's lawful dispute procedures. Contacting support first may resolve an issue more quickly but does not waive bank or statutory remedies. Double recovery through both a completed refund and chargeback for the same amount is not permitted. Creator deductions require reasonable, disclosed contractual and legal grounds.

Suspension or closure does not automatically eliminate lawful refund claims or dispute rights. Any funds held for review are managed under actual provider rules and legal limits. Accurate transaction records are retained for legitimate obligations.

For a refund or transaction complaint, use the support channel and provide relevant date, amount, creator name and transaction reference if available. Do not submit full payment card details. Any mandatory consumer, banking or judicial routes remain open.

These rules apply to creator profiles, supporter notes, embeddable tools, account conduct and activities facilitated by the platform. Reviews consider context, risk, law and legitimate artistic, educational and journalistic expression. Because varolsun does not host paid creative works as a membership benefit, it does not simply copy another platform's entire content policy.

False creator identities, fabricated achievements or needs, impersonation, manipulated supporter numbers, unauthorized third-party bank accounts, money laundering, transaction structuring and payment-method abuse are prohibited. A person must not solicit support in someone else's name without permission.

Raising funds for violent attacks or terrorist organizations, credible threats of serious harm and active criminal instruction or financing are prohibited. Reporting, research, documentation, criticism and artistic expression about sensitive subjects must be judged in context; discussion is not itself endorsement.

Child sexual abuse, exploitation material, sexual grooming of minors and human trafficking are strictly prohibited. We may remove content, suspend accounts and make legally required reports where warranted.

Targeted harassment, repeated threats, incitement to discriminatory violence, nonconsensual intimate imagery and malicious disclosure of private addresses or sensitive personal information are prohibited. Public-interest discussion, fair criticism and satire should be distinguished from conduct intended to cause targeted harm.

Do not claim another person's works, photos or marks as your own, distribute infringing files, sell unlawful access or impersonate rights holders. An appropriate route for reporting copyright claims should be offered.

The initial service does not support sales of sexual services, paid access to pornography or related financing. Legal adult-oriented expression may still be restricted by the platform's scope and the actual payment provider's policies. Documentary, artistic, medical and public-interest discussion should not automatically be treated as a prohibited paid adult service.

We do not facilitate unlawful drugs or weapons sales, unlicensed gambling or betting, pyramid schemes, fraudulent investments, sanctions violations, unauthorized financial services or activities prohibited by the approved provider. Borderline cases require appropriate legal and provider assessment.

The platform does not currently provide official charitable fundraising, investment crowdfunding or GoFundMe-style goal-bound public relief campaigns. A creator must not falsely claim charity registration or authority. Legitimate charitable status would require separate review and relevant permissions.

Bot networks, fake engagement, bulk unsolicited communications, phishing, scraping of user information, unauthorized attacks under the guise of security testing and rate-limit circumvention are prohibited. Any public API or permissioned integration is governed by its own rules.

Applicable sanctions and export restrictions, including relevant US requirements, must be observed. Transactions may be unavailable for prohibited persons and territories under law or provider rules. Additional restrictions in a user's jurisdiction may also apply.

Depending on seriousness and risk, measures may include warnings, requests to correct profiles or links, visibility restrictions, payment review, suspension or closure. Serious and urgent harms may require action without advance notice. Decisions should be proportionate and documented where possible.

Reports may include a relevant URL, incident description and proof of rights where applicable. Unnecessary sensitive personal data should not be submitted. Affected people should have a meaningful explanation and review avenue to the extent legally and operationally possible.

Changes may be needed to address new features, provider requirements or law and should be versioned and communicated appropriately. The policy neither promises unlimited entitlement to expression or processing payments nor authorizes arbitrary misleading enforcement.

The service is operated by HASHO HARVEST LLC, a limited liability company organized in Delaware, United States. This policy addresses personal data about visitors, creators, applicants, supporters and people contacting us. The Company's US formation does not replace any local transparency notice required under applicable law, including the Turkish KVKK notice presented separately.

We may handle account details such as names, usernames, email addresses, authentication records, account type and preferences; creator profiles, applications, images and status; contribution amounts, currencies, recipient profiles, visibility preferences, recurring status and provider references if payments are enabled; technical device, browser, IP, session and security event details; and support communications or voluntarily uploaded documents.

Approximate country information from network headers may be used to suggest a display currency. This is not precise GPS positioning. A manually selected currency may be stored in the browser as a preference and is not proof of financial eligibility or a binding foreign-exchange rate.

When authorized payment processing is available, payment details should be handled by appropriate secure providers. The platform does not plan to store complete card numbers or card security codes. It may store limited provider references, transaction status, payment method type or a last-four-digit indicator when necessary. Actual fields and flows require technical verification.

Information may come from registration, application and profile forms, permitted account connections, support messages, security and session systems, approved payment integrations and information that creators choose to make public. A visitor's manual display-currency selection may be remembered in browser storage and cleared through browser site-data settings.

First-party creator application attribution: If a campaign URL contains standard UTM parameters, we may retain up to five short campaign identifiers in browser storage for up to seven days. Once a verified account enters the creator application flow, we count one start and, upon an actual successful submission, one completion. Reports are aggregated by campaign; attribution records do not include names, email addresses, IP addresses or complete referring URLs. An account identifier prevents double counting. Applicable local transparency and choice requirements for nonessential storage remain subject to review.

Guest monthly billing access: Once authorized billing is operational, a person who supported without an account may request a short-lived, single-use access link sent to the address used at checkout. The payment record and Stripe customer identity are checked, and the access table stores cryptographic digests rather than plaintext email addresses, IP addresses or raw link tokens. Links expire after 15 minutes. A daily cleanup is designed to remove access-link records after one day and anti-abuse request records after 30 days. These periods do not replace mandatory retention of legitimate payment records.

Purposes may include account creation and authentication, evaluating creators, displaying profiles, administering authorized contributions and cancellations, sending receipts and service notices, addressing support requests, preventing fraud and misuse, safeguarding systems and improving the service. Marketing requires its own applicable authorization and is not automatically included in account or payment use.

Processing grounds depend on relevant law and may include contract performance, legal duties, legitimate interests, consent or other recognized bases. Different laws may require different assessments for the same activity. For Türkiye, the relevant provisions of KVKK Article 5 and any other applicable articles are assessed for each category. Accepting the Terms of Use does not authorize all marketing or international transfers.

Creators decide what profile details to publish. Supporter names and notes appear publicly only according to offered visibility options. An anonymous public label does not erase lawful identity or transaction records held by the Company or providers. Information passed to a creator is limited to what is needed and lawful for the supported service.

The service may rely on hosting and distribution, databases, identity services, email, anti-fraud, security and analytics providers. Current technology includes Vercel, Supabase, Resend and Cloudflare services; a payment service such as Stripe will process transactions only if separately approved and activated. Sharing is limited to legitimate purposes, contracts and applicable law, including valid legal authority requests.

Operating as a US LLC and using internationally distributed services can involve processing or transfers outside a user's country. Actual processing and storage locations depend on the selected suppliers and architecture. Transfers must meet applicable safeguards and notices rather than being presumed legal merely because the Company is American.

For Türkiye, KVKK Article 9, including the amended framework for adequacy decisions and other recognized transfer safeguards, must be evaluated. The GDPR may apply to certain people in the European Economic Area. Future cross-border payment processing may introduce further recipients and international transfers which must be assessed before launch.

Cookies or similar storage may be used for necessary authentication, security and preferences. Analytics and nonessential technologies are subject to the applicable notice, legal basis and consent rules. Additional details appear in the Cookie Policy; the precise technical inventory should reflect actual deployments.

We may send necessary account, authentication, security, transaction and contractual messages where permitted. Marketing and newsletters require the relevant separate, revocable choice. A creator account or contribution is not automatic enrollment in promotional communications, and creators may not repurpose supporter information for unapproved campaigns.

Personal data is retained only for the purposes and legally required periods that apply, including security, accounting, dispute and contract records. Different categories may have different lawful retention periods. Information should be deleted, anonymized or lawfully archived when its applicable retention ground expires; indefinite retention is not presumed.

Appropriate safeguards may include encrypted transmission, access controls, role separation, logging and backups. No system is claimed to be invulnerable. Reportable personal data incidents will be assessed and notified as required by law. We do not ask users to send passwords by email.

Depending on applicable law, individuals may have rights to access, correct or delete data, object to certain processing, withdraw consent, request portability where applicable and complain to a competent authority. Persons in Türkiye may have the rights granted under KVKK Article 11. We may reasonably verify a requester's identity to prevent unauthorized disclosure.

Accounts and payment features are intended for people aged 18 or older. We do not knowingly permit child accounts. If we learn that a minor's data has been collected improperly, we will take measures consistent with the law.

Automated checks may help detect account or payment risk and assist editorial screening. Material decisions may also involve human review. Additional information and rights applicable to solely automated decisions will be provided where required by law.

Independent commercial sale of user data to outside data brokers is not part of the intended business model. This does not mean that information is never shared with necessary service providers. If targeted advertising or further tracking tools are introduced, disclosure and preference mechanisms must be updated first.

Important policy changes will be communicated as required and earlier versions retained where appropriate. Requests regarding personal data may be sent to destek@varolsun.com. Rights and obligations differ by jurisdiction; this document does not imply every privacy law grants identical protections worldwide.

Cookies, local storage and comparable browser technologies can remember choices, maintain sessions or measure site performance. Different technologies may be governed by different laws or consent rules.

Authentication, session integrity, CSRF protection, service security and technical balancing may rely on necessary storage or cookies. Whether a particular technology is strictly necessary, its provider and its lifetime must be confirmed against the actual production implementation.

Language and other interface choices may be remembered when appropriate. A supporter may select a display currency, which can be stored locally in the browser. This does not verify geographic location or payment eligibility and is not an exchange-rate record. Site data can be cleared in browser settings. Nonessential preferences may require user choice depending on applicable law.

For first-party creator application attribution, a browser storage entry named `varolsun_creator_campaign_v1` may retain five short UTM campaign codes with a seven-day expiry. It is not a payment record or a third-party advertising pixel, and may be deleted through browser site-data settings. Applicable consent or preference requirements must be followed where the law requires them.

The site may use Cloudflare Web Analytics or other measurement to assess visits and performance. Technical configurations and applicable local requirements must be reflected in the current cookie and tracking inventory. Analytics should not be represented as active if it is not deployed.

Behavioral advertising and third-party campaign tracking are not part of the current intended setup. If introduced, the notice and relevant consent or choice mechanism must be updated beforehand. Email newsletter consent is not consent to advertising cookies.

Where the law requires it, users should be able to accept or reject nonessential technologies and change their choices later. Browser settings can also delete stored data. Changing a preference is not identical to making a statutory personal-data erasure request.

The actual inventory should specify the name, provider, purpose, category, first- or third-party status and expiration where applicable for deployed cookies and similar storage. Supabase authentication, hosting, payment widgets if later enabled, identity services, analytics and support tools should be reviewed. A browser-stored display-currency preference contains a selected currency code, not payment card data.

This policy will be updated as technology or legal requirements change. For privacy questions, contact destek@varolsun.com. Mandatory local privacy rights and consent obligations remain in force.

The platform is operated by HASHO HARVEST LLC, a limited liability company formed in Delaware, United States, under the platform name varolsun. The Company's status as a foreign entity does not by itself remove any Turkish data protection obligations applicable to its actual processing activities. Requests can be directed to destek@varolsun.com.

Depending on the service used, data may include account and contact information, creator applications and profiles, support messages and attachments, financial transaction references if enabled, visibility choices, authentication and security logs, and consent records. Data may be obtained through electronic forms, the website and its relevant service-provider integrations by automated or partly automated means.

Account creation and administration may rely, where applicable, on Article 5(2)(c) of the KVKK concerning the establishment or performance of a contract. Certain mandatory records and authority disclosures may rely on Article 5(2)(ç), where a real legal duty exists. Appropriate security and fraud prevention may be assessed under Article 5(2)(f), subject to necessity and balancing. Nonessential marketing, technologies and other processing require their own appropriate legal bases or explicit consent where required. Each concrete processing purpose must be assessed individually.

Authorized providers of hosting, databases, authentication, email and, if later approved, payment processing may receive limited information necessary for their service. Disclosures to competent public authorities may occur where required. Sharing supporter information with creators depends on available visibility options and applicable legal grounds.

The Company and some providers operate internationally, so processing or transfer outside Türkiye may occur. However, KVKK Article 9 and its applicable secondary rules must be respected. Appropriate adequacy decisions, recognized safeguards or any relevant statutory exceptions must be established where required; this notice is not itself transfer consent or legal authorization.

International payments could introduce additional recipients and countries. Their purposes, data categories and protections must be assessed before such functionality launches. A currency-selection interface and general acceptance of Terms of Use are not blanket consent to foreign transfers.

Personal information is retained only for appropriate processing purposes, legal obligations and justified disputes. Once retention is no longer required, data is deleted, destroyed or anonymized in accordance with applicable rules.

Subject to the conditions of Article 11, data subjects may learn whether their information is processed; request details, purposes and recipients; seek correction or deletion; request notification of certain corrections or deletion to third parties; object to adverse outcomes arising solely from automated analysis; and seek compensation for unlawful processing where applicable.

To submit a privacy rights request, contact destek@varolsun.com and provide information sufficient to verify identity without unnecessary sensitive details. Applications will be reviewed under the legally prescribed procedures and deadlines. Applicable rights to complain to the Personal Data Protection Authority remain unaffected.

This notice is information, not a blanket “I agree” for every processing operation. Where explicit consent is required, it must be specific, informed and freely given through a separate unselected choice. Marketing permission is not a condition of account creation.

The notice will be updated when relevant data purposes or recipients change. Dated versions should remain accessible as appropriate. This Turkish-law disclosure does not eliminate the Company's separate obligations under US or other applicable law.

“I would like to receive varolsun updates, announcements and promotional emails. I can withdraw this consent at any time.” This optional selection must not be prechecked or made a condition of registration or support.

Authentication codes, transaction confirmations, security alerts and legally required notices may be sent where supported by an appropriate lawful basis without marketing consent. Adding advertising content to a service message may alter its classification and obligations.

Promotional emails should include an effective unsubscribe mechanism. The date, channel and version of consent and any subsequent withdrawal should be recorded appropriately. Withdrawal does not undo processing that was already lawful, but it applies to future marketing as required.