Your privacy.
How the TulayBox prelaunch website handles information and how launch-update signup will work.
Updated 19 September 2026
The website today
Launch-list signup is currently closed. The form does not accept or save email addresses. The operator’s identity and privacy contact will be published before signup opens.
Visiting this website
The website is configured for Cloudflare hosting. Technical information, such as your IP address, requested page and browser information, may be processed to serve the site and protect it from abuse. We have not added advertising trackers or optional audience analytics to this release.
Launch updates
When signup is open, we ask for your email address, collection city and permission to send TulayBox launch updates. We use that information to manage the list, understand interest by city and send the updates you requested. A confirmation link checks that you control the email address. Signup is not a shipping booking.
The system records the signup time, consent wording version and confirmation time. Email addresses are stored in Cloudflare D1. Confirmation email delivery is configured through Twilio SendGrid. Open and click tracking are disabled for these confirmation emails.
Protecting the form
When enabled, Cloudflare Turnstile checks submissions for automated abuse. The server also uses short-lived, one-way identifiers derived from network information to limit repeated requests. Raw IP addresses are not stored in the launch-list database.
Retention and leaving the list
Unconfirmed signup records expire after 48 hours. Confirmed records expire after 12 months unless a shorter period applies. Expired records are removed by a daily cleanup job. You can remove your launch-list record sooner using the unsubscribe link in your email.
Service providers and international processing
Hosting, database and email providers process information to support the website and signup. Processing may take place outside Türkiye. The operator must complete the applicable transfer arrangements before enabling signup. The Türkiye information notice will describe the relevant arrangements when they are in place.
Contact enquiries
When the contact form is enabled, it collects your name, reply email, mobile number, topic, shipping origin and destination details, optional reference, and message. These details are used to handle your enquiry, not to subscribe you to marketing. Enquiry records are stored in Cloudflare D1 and are scheduled for deletion after 180 days under the configured default retention period. The operator must review this period and the relevant processing arrangements before opening the form.
Your requests
Use the privacy enquiry process to ask about access, correction, deletion or other applicable rights. Please do not submit identity documents, passwords or payment-card details through the general form.