Privacy Policy

Who is responsible

Emre Durukan operates ASCRank and is responsible for the personal data described here. For privacy requests, contact support@ascrank.com from your registered email. We verify ownership before disclosing or deleting account data.

What we collect and why

• Account name, email, a salted password hash and plan information, to create and authenticate your account and provide the service.
• Apple Issuer ID, Key ID, optional vendor number and an encrypted copy of your .p8 key, to access the Apple account you connect. The service decrypts the key only on the server when requesting Apple data.
• App identifiers, daily sales aggregates and public customer review text, nicknames, ratings, dates and territories, to display your portfolio.
• Audit inputs such as app metadata and website URLs, to retrieve public App Store and website information and return an audit. Audit inputs and reports are processed on request; the current audit endpoint does not save them to the database.
• Request metadata, including IP address and operational logs, for rate limiting, reliability and abuse prevention. We do not intentionally log private keys, passwords or authorization tokens.

Legal grounds and collection

We collect information you submit, obtain reports from Apple at your request, and receive technical metadata when you use the site. Processing necessary to establish and perform the service agreement, comply with legal duties, and protect the service’s legitimate security interests forms the basis for this use, subject to applicable law. Public customer reviews are imported only for the apps your connection can access. Optional Apple access can be stopped by disconnecting the connection.

Providers and transfers

Cloudflare hosts the application, database and related infrastructure; Apple receives API requests using your saved credentials and supplies your reports. The audit tool requests public App Store and website content. These providers may process information in countries outside your own, including outside Türkiye. We do not sell personal data. No external language-model service receives your review text in this release. Paid checkout is not enabled; before payments are enabled, payment-provider processing details will be added here.

Cookies

ASCRank uses an essential HttpOnly session cookie to keep you signed in for up to seven days. Signing out clears it. This release does not use advertising cookies or third-party marketing analytics. Blocking the session cookie prevents account features from working.

Storage, retention and deletion

Apple private keys are encrypted with AES-256-GCM. Account records and saved connection details remain while your account is active. Successful syncs remove sales and review records older than your plan’s history window. Disconnecting Apple deletes its saved connection, imported apps, reports and reviews from the application database. Request account deletion by email; any records that must be retained for a legal obligation are limited to that purpose. Provider backups and operational logs may remain subject to the provider’s retention settings.

Your choices and rights

Depending on applicable law, including the Turkish Personal Data Protection Law (KVKK), you may ask whether data is processed, request information and access, learn its purpose and recipients, request correction or deletion, ask that recipients be notified of corrections or deletion, object to adverse results from automated processing, and seek compensation for unlawful processing. Send requests to support@ascrank.com. We respond within the period required by applicable law. You may also contact the competent data protection authority. The service does not make automated decisions that create legal effects about you.

Changes

We update this policy when processing changes and show the effective date above. Contact support@ascrank.com before submitting information if you need further details.