GöbekliTepe Back to Home

Privacy Policy

Last updated: April 2026

1. Who We Are

Göbekli Tepe ("we", "us", "our") is an independent visitor guide and free offline audio-tour companion app for the Göbekli Tepe archaeological site near Şanlıurfa, Türkiye. The website exploregobeklitepe.com and the companion app are operated by Pixelo Mobile Ltd. We are committed to protecting your personal data and respecting your privacy.

We are an independent educational and visitor resource. We are not affiliated with, endorsed by, or operated by the Göbekli Tepe excavation, the German Archaeological Institute (DAI), the Şanlıurfa Museum, UNESCO, or the Turkish Ministry of Culture and Tourism.

2. What Data We Collect

We collect the following personal data when you interact with our services:

  • Account data: Email address and encrypted password (if you create an account to save enclosures and articles)
  • Visit data: The enclosures, heritage sites and articles you save or mark as explored (stored against your account if you have one)
  • Communication data: Messages sent via our contact form or email
  • Technical data: Browser type, IP address, and pages visited (if analytics cookies are accepted)

The companion audio-guide app is designed to work offline. It does not require an account and does not transmit your location to us — the proximity that triggers each enclosure's audio is processed on your device.

3. How We Use Your Data

  • To provide your account and remember what you have saved or explored
  • To send account and service-related communications
  • To respond to enquiries and support requests
  • To improve our website, guide content and app (with consent)
  • To comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

  • Contract: Processing necessary to provide your account and the features you ask for (saving and tracking enclosures)
  • Legitimate interest: Responding to enquiries, improving our guide and services
  • Consent: Analytics cookies and marketing communications (where applicable)
  • Legal obligation: Tax and accounting requirements

5. Data Sharing

We share your data only with:

  • Resend: Transactional email delivery
  • Cloudflare: Website hosting and security

We do not sell your personal data to third parties.

6. Cookies

We use the following types of cookies:

  • Essential cookies: Required for the website to function (e.g., session tokens, cookie consent preference). These cannot be disabled.
  • Analytics cookies: Help us understand how visitors use our site. Only loaded with your consent.

You can change your cookie preferences at any time by clearing your browser's local storage.

7. Data Retention

  • Account data and your saved enclosures/articles: retained until you request deletion
  • Enquiry data (emails and contact-form messages): retained for 2 years
  • Analytics data: anonymised after 14 months

8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise these rights, email us at [email protected].

9. Data Security

We protect your data using industry-standard measures including HTTPS encryption, hashed passwords (PBKDF2-SHA256), and secure cloud infrastructure via Cloudflare.

10. Who processes your data on our behalf (subprocessors)

We use the following third-party services to operate the Göbekli Tepe guide. Each has its own privacy practices — follow the links for detail. We have a UK-GDPR Article 28 data processing agreement in place (or equivalent standard terms) with each of them.

  • DigitalOcean (LLC, USA) — server + database hosting. Region: London (LON1). Privacy
  • Cloudflare (Inc., USA) — CDN, DNS, WAF, DDoS protection. Privacy
  • Resend (Inc., USA) — transactional email (account, enquiry and notification emails). Privacy
  • Firebase / Google Cloud Messaging (Google LLC, USA) — mobile push notifications (if you opt in within the app). Privacy
  • Apple Push Notification service (Apple Inc., USA) — mobile push on iOS. Part of the Apple Developer Agreement.

Some of these transfer data to the USA. Where they do, we rely on the UK's adequacy decision for the USA (Data Bridge, 2023) or Standard Contractual Clauses as appropriate.

11. Children

This guide is intended for adults aged 18 and over. Accounts are not offered to minors, and we do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us with personal data, contact us and we will delete it.

12. Your consumer cancellation right (Consumer Contracts Regulations 2013)

The Göbekli Tepe guide and its companion app are free to use, and we do not sell tickets, tours or any paid product. We do not take payment from visitors. If we introduce any paid feature in future, you will generally have a 14-day right to cancel under the UK Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 — and we will update this policy before doing so.

13. How to delete your account

You can de-identify your account and request erasure of your content at any time:

  • In the mobile app: Settings → Delete account
  • By email: write to [email protected] from the address your account is registered to

When you delete your account we immediately replace your name, email and any profile details with placeholder values, delete your saved enclosures and articles, and invalidate all your sessions. You can request full removal of any content under Article 17 of UK-GDPR by emailing us with the word "FULL ERASURE" in the subject. Full details: /delete-account.

14. Complaints

If you believe we have mishandled your personal data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

15. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top will reflect the most recent revision.

16. Contact

Data controller: Pixelo Mobile Ltd (trading as Göbekli Tepe), company number 10585806. Registered office: Demsa Accounts, 565 Green Lanes, Haringey, London, England, N8 0RL.

For privacy-related queries: [email protected]