Privacy policy.

01Who we are

puq.sh is run by XON Teknoloji A.Ş. (“puq.ai”, “we”, “us”), the data controller for the information described here.

Bilisim Vadisi Technology Development Zone Block No:2B Office No:214/215 Gebze/Kocaeli/Turkey

02What we collect

puq.sh has no sign-up and no forms. We never ask for your name or email address. What we do collect:

• Server logs. Every request to puq.sh, from a browser or from curl running the install command, is logged by our web server: IP address, requested URL, date and time, referring page and user agent.
• Network and security data. puq.sh is delivered through Cloudflare, which processes the same request data (including your IP address) to serve the site and block attacks and abuse.
• Usage and advertising data. puq.sh loads Google Tag Manager, which runs Google Analytics and the Meta Pixel. They record the pages you view, how you arrived (including the ad you clicked, if any), your browser and device, an approximate location derived from your IP address, and two actions on the page: copying the install command and opening the docs.
• Installer downloads. Our server fetches puq.sh/install.sh from GitHub without passing on anything about you. The script then downloads puq code directly from GitHub, which handles those requests under the GitHub Privacy Statement.

03Cookies

Cookies are small files a website stores in your browser. puq.sh sets one of its own; the rest come from Google and Meta.

• Necessary: cookieconsent_dismissed (puq.sh, 1 year) remembers that you accepted the cookie notice.
• Analytics: Google Analytics (_ga, _ga_*, 2 years) counts visits.
• Advertising: Meta Pixel (_fbp, _fbc, 90 days) measures and delivers our ads.

If you are signed in to Google or Meta, they may also read their own cookies on their domains. Their policies cover those.

04Why we use it

• Running and protecting the site. Server logs and Cloudflare help us find errors, stop abuse and keep puq.sh available. Legal basis: our legitimate interest in operating a secure website.
• Measuring the site. Google Analytics shows which pages and sections people use, so we can improve them.
• Measuring and optimising our ads. Google Analytics and the Meta Pixel tell ad platforms which visits came from our ads and which led to an install, so the platforms can show our ads to people likely to find puq code useful.

Legal basis for measurement and advertising: your consent, given through the cookie notice, where the law requires it; otherwise our legitimate interest in measuring our advertising. You can withdraw consent at any time (see Your choices).

05Who we share it with

We do not sell your personal data. It goes to:

• Google and Meta, which receive the usage and advertising data above. For advertising they also use it under their own terms: the Google Privacy Policy and the Meta Privacy Policy.
• Our hosting provider, which stores server logs on our behalf.
• Cloudflare, which delivers puq.sh and filters malicious traffic on our behalf, under the Cloudflare Privacy Policy.
• Authorities, when the law requires it, such as a court order.
• A successor, if puq.ai is merged or acquired.

06International transfers

Google, Meta and Cloudflare may process data in the United States and in other countries outside Turkey and the European Economic Area. They rely on safeguards such as the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

07How long we keep it

• Server logs: only as long as needed to run and protect the site, or as long as the law requires.
• Cookies: until the expiry listed under Cookies, or until you delete them.
• Google Analytics, Meta and Cloudflare: according to their retention settings and policies.

08Your choices

• Block or delete cookies in your browser settings. If you delete puq.sh’s cookies, the cookie notice appears again.
• Opt out of Google Analytics on every site with the Google Analytics opt-out add-on.
• Control the ads you see in your Meta ad preferences and in Google My Ad Center.

Withdrawing consent does not affect processing that took place before you withdrew it.

09Your rights

Depending on where you live, data protection law (the GDPR in the EU, KVKK in Turkey, the CCPA in California) may give you the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• object to or restrict how we process it;
• receive your data in a portable format;
• withdraw consent;
• complain to a supervisory authority, such as the Turkish Personal Data Protection Authority (KVKK) or the data protection authority where you live in the EU.

To use these rights, email [email protected]. puq.sh has no accounts, so we may ask for details such as your IP address to find the data about you. We reply within the time the law sets: 30 days under KVKK, one month under the GDPR.

10Changes to this policy

When this policy changes, we update this page and the date at the top.

11Contact

Privacy: [email protected]
Support: [email protected]
Developers: [email protected]