1. Who is responsible
MyTurn is run by the MyTurn team, India, which decides how your data is used. This policy follows the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
2. What we collect
- Account details: your email address, first and last name and mobile number.
- What you post: your text, drawings, website or app listings, likes and reports. Posts and listings are public.
- Payments: the amount, currency, time and the payment ID from Razorpay. Your card, UPI or bank details go straight to them and never reach us.
- Credit history: what you bought and spent credits on.
- Technical data: your IP address and browser type, used for security and to count each share once (we store only a scrambled code made from them, not the address itself), and the number of visits a listing's links get.
- Usage data collected by Google Analytics: pages visited, device, rough location and how you arrived.
3. Why we use it
- to log you in, by emailing you a one-time code;
- to run your account, show your posts and listings, and add the credits you buy;
- to show your name publicly as your first name and last initial, never your email or phone;
- to handle reports, stop abuse and keep the site safe;
- to answer your messages and sort out payment problems;
- to understand how the site is used and improve it.
We don't sell your personal data, and we don't use it for advertising.
4. Who we share it with
Only the services that run MyTurn, and only what each one needs:
- Razorpay: to take payments.
- Google: Google Analytics for usage statistics, and Gmail to send login codes.
- Cloudflare: website addresses submitted to the Showcase are checked against its family-safety filter. Only the address is sent.
- Our hosting provider, which stores the site and its database.
- Police, courts or government authorities, when Indian law requires it.
Some of these providers may process data outside India, under their own privacy and security commitments.
5. Cookies
- Login cookie: keeps you logged in for up to 30 days. Needed for the site to work.
- Theme setting: remembers light or dark mode, in your browser only.
- Google Analytics cookies: measure visits. You can block them in your browser settings or with Google's opt-out add-on, and the site keeps working.
6. How long we keep it
- Account details and posts: while your account is open. Deleting your account erases them straight away.
- Payment and credit records: as long as tax and accounting law requires, usually 8 years, even after you close your account.
- Login codes expire after 10 minutes. Login sessions end after 30 days.
- After you delete your account we keep a scrambled code made from your email, not the email itself, so the welcome bonus can't be claimed twice and a blocked account stays blocked. That code is erased automatically after 2 years.
7. Your rights
You can ask us to:
- tell you what personal data we hold about you;
- correct or update it;
- delete your account and personal data, apart from records we must keep by law. You can do this yourself from your Wallet page;
- withdraw consent, which means closing your account.
Send requests through our Contact page. If you are not satisfied with our answer, you can complain to our grievance officer, the MyTurn team (info@myturn.blog), and then to the Data Protection Board of India.
8. Security
We use encrypted connections (HTTPS), store login codes and sessions only in scrambled (hashed) form, and limit who can access the database. No system is perfectly secure, so please tell us at once if you notice anything wrong.
9. Children
MyTurn is for people aged 18 and over. We close accounts we learn belong to anyone younger.
10. Changes
We may update this policy. The date at the top shows the latest version, and we will flag big changes on the site.