Privacy
Privacy policy.
Last updated: November 5, 2026.
What this page describes is matched against what the code actually does, not a generic template. We use no ad network code, and no data is sold to third parties. The site uses just two session cookies; each one is listed below with what it does.
Who's responsible for your data
Muratify is a one-person software studio founded by Murat Baskıcıoğlu. The company that processes the data described here is Muratify LLC — the name that appears on your payment receipt if you've ever subscribed. Questions or requests go through the contact section at the bottom of this page.
What we collect, and why
The muratify.com site collects data at exactly five points. The site collects nothing else outside of these:
Contact form (/contact)
Your name, email address, topic and message. It's relayed once by email to our support inbox — it is not written to a database. Used only to answer you.
Email sign-up (the email form on the home page)
Just your email address. It's forwarded to the sign-up service behind accounts.muratify.com (Muratify ID) for your discount code and the Muratify product announcements named on the form. When a discount code is created, your email address is also written to Stripe. Your IP address is used only to slow down abuse within a rolling one-hour window and is not kept in raw form.
Product analytics
Each visit gets a random visit id. It is kept in your browser and deleted when you close the browser (details below, under Cookies). With it we log a closed set of events: which pages you viewed, which button or download you clicked, whether a form succeeded or failed. Each event also says where the visit came from: only the domain of the site that sent you (for example google.com, not the full address), the campaign tags in the link if it has any (utm_source, utm_medium, utm_campaign), and the channel type we work out from them (search, social, email and so on). Along with that go the page language, your operating system (macOS, Windows or Linux) and the text your browser uses to identify itself (the User-Agent; used to tell browser and device types apart and to filter out bots). Your full IP address is not sent: only a version with the last part set to zero (for example 88.230.14.0) goes along, for country-level statistics. The raw page address, the other parameters in the link and your form contents are never sent. If you sign in at accounts.muratify.com, that visit's events and the channel it came from are linked to your account, so we can see which channels lead to a purchase. If you don't sign in, the visit id can't be tied back to you. Events are processed by PostHog, hosted in the EU.
Error reporting
If something breaks, the error type, its message and a stack trace (file paths masked) reach Sentry, together with the page route with its query string stripped out. Form contents, cookies and your email never travel with it, and storing of IP addresses is blocked in our account settings — the only goal is finding and fixing the bug.
Payments
Card details never touch Muratify's servers. Subscriptions and payments run through Stripe via accounts.muratify.com (Muratify ID); that flow is covered by Stripe's own security and privacy practices.
The data the Alaz game processes is listed in its own section: The Alaz game
The AgentSpace desktop app
Our desktop apps also send only anonymous usage events: countable facts like the app being opened, a panel being viewed or an agent being started — together with the app version and operating system. Your commands, what you type, your files, your code, agent conversations and memory contents are never attached to any event. You can turn this telemetry off entirely in the app's settings; for error reporting, the Sentry principles above apply on desktop exactly the same way.
The Alaz game
Alaz is a multiplayer browser game by Muratify LLC. This section applies to the game only. The game does not collect marketing consent.
Account
You enter the game with your Muratify account. Your email address stays in your Muratify account and is not written to the game server. The game server knows you by your account id.
Game record
Account id, character name, level, class, gold, position, inventory and game progress. Chat messages you write are delivered to the players in that channel. A mute or a ban applied for breaking the rules is added to the record with its reason.
Purpose
To run the game, keep your progress, protect your account and prevent abuse. The game page has no ad code and no product analytics. The AgentSpace link in the game goes to muratify.com, where the site rules on this page apply.
IP address and security
The game server uses your IP address temporarily, in memory, for connection and rate limits. In admin action logs the IP address appears as a one-way digest, not in raw form.
Preferences on your device
Your browser's storage keeps your session details, player name, music volume, outfit, shortcut and graphics preferences. During sign-in, short-lived security values sit in tab storage. You can delete all of this in your browser's site settings; if you delete the session details, you sign in again.
Retention
The game record is kept for as long as your account is open. After an account deletion request it is deleted within 30 days at the latest. Encrypted backups are kept for at most 14 days.
Where the data is processed
Your Muratify account runs on Supabase and the game server runs on Hostinger. Both are in Germany (Frankfurt), so your data is processed outside Türkiye.
Age
Alaz is not directed at children under 13. Anyone under 18 should use it with a parent's or guardian's permission.
Early access
Alaz is in early access and free. Characters, items and progress may be reset without prior notice; the game may change or shut down. You can use your rights over your personal data regardless of any of this.
Requests
For account deletion and your rights under Article 11 of the KVKK, write to us through the contact section at the bottom of this page. Just say it is a privacy request and give your Muratify account's email address.
Cookies and what your browser keeps
The site uses no ad cookies and no cookies from other companies. The only cookies are the two session cookies below, which the site sets itself. Neither has an expiry date; both are deleted when you close your browser. Both are valid on muratify.com and its subdomains, because checkout opens on accounts.muratify.com and needs to recognize the same visit. They are not sent to any other site.
mf_vid · Visit id
A randomly generated number. It holds no name, email or device details. It lets a visit count as one visit when you move from a product page to checkout.
Lasts: until you close the browser
mf_att · Where the visit came from
The domain of the site that sent you, the campaign tags in the link and the channel type. It is written once, on the first page of the visit, and does not change during the visit.
Lasts: until you close the browser
Besides the cookies, your browser may hold three more things. A copy of the same two values sits in tab storage (sessionStorage) and is cleared when you close the tab. If you finish or skip the guided tour on the AgentSpace product page, a "done" flag is saved (localStorage) so the tour does not start on its own again. A few experimental lab pages (hand-tracking games) keep records of your own play session. The tour flag and the game records never leave your browser. You can clear all of it from your browser's site settings.
Who your data is shared with
Only the processors that actually run the service below. Nothing is sold. The site has no ad network code and no ad tracker from another company; we measure which campaign a visit came from ourselves, with the product analytics described above:
- Resend — delivers the contact form, discount codes and transactional email
- The Muratify ID sign-up service — email sign-ups and discount codes
- PostHog (EU region) — product analytics
- Sentry — error tracking
- Stripe, via accounts.muratify.com — payments, subscriptions and discount codes
- Supabase (Frankfurt, Germany) — Muratify accounts
- Hostinger (Frankfurt, Germany) — the Alaz game server
How long we keep it
A contact message lives in our support inbox for as long as any other email you send us — there is no separate database to purge it from. An email sign-up is kept by the sign-up service for as long as your registration stays active. The cookies are deleted when you close your browser, and the tab-storage entries when you close the tab. Analytics events and error reports are kept under PostHog's and Sentry's own retention settings on our account with them.
If a data breach ever happens
If we detect a security incident affecting your personal data, we will notify affected users without undue delay, explain what happened and what we did about it, and meet the legal notification duties that apply.
Your rights
Under Turkish data protection law (KVKK, Law No. 6698, Art. 11), you can ask us to:
- tell you whether we process your personal data
- explain how and why it's processed
- name any third parties it's shared with
- correct it if it's inaccurate or incomplete
- delete or anonymize it
- notify the third parties above of a correction or deletion
- stop a decision made about you based solely on automated processing
- claim compensation if unlawful processing caused you a loss
If you live in the European Union, the equivalent GDPR rights (access, rectification, erasure, objection, portability) are available to you through the same channel.
Questions or requests
Write to us and we'll act on it — whatever the topic, name it as a privacy request so it doesn't get read as a support ticket.