Privacy policy
Last updated: 25 October 2026
This policy explains which personal data DRA.MA processes when you use the service, why, and what rights you have. It is based on the Turkish Personal Data Protection Law (KVKK) and, where applicable, the GDPR.
Data we process
Account data: name, email address, an irreversible hash of your password, language and subtitle preferences, an optional profile photo and date of birth (for age checks).
Usage data: episodes you watch, viewing progress, favourites, unlocked episodes, comments, follows and in-app notifications.
Payment data: the package or plan purchased, amount, payment status and the payment provider's transaction reference. Card details are never stored on our servers; payment takes place on the iyzico, PayTR or Stripe page.
Creator payout data: IBAN, account holder name and Turkish national ID (TCKN), stored encrypted and used only for cash-out.
Technical data: IP address and request logs for security and abuse prevention.
Why we use it
To create your account, keep you signed in and let you continue where you left off.
To operate coin balances, episode unlocks and subscriptions correctly, and to meet accounting obligations.
To keep the service secure and prevent fraud and abuse.
To answer support requests and content reports.
Sharing
We do not sell your data. It is shared only with providers required to run the service (hosting, video delivery, email, payments) and with authorities where legally required.
Cookies
We use one essential session cookie to keep you signed in and one preference cookie to remember your interface language. No advertising or third-party tracking cookies are used.
Retention
Account and viewing data are kept while your account is open. You can delete your viewing history at any time from your account. Payment records are kept for the legally required period.
Your rights
Under the Turkish Personal Data Protection Law (KVKK) you may request access to, correction, deletion, portability or restriction of your data, and object to processing. Send requests via the contact page, the account-deletion form in settings, or .
Deleting your account
You can delete your account from account settings. The request is confirmed with your password. Name, email and creator identity data are anonymised; uploaded videos are taken down; sessions are signed out.
Payment and invoice records are kept for the legally required period. Pending cash-out requests are rejected.