Privacy policy

What we store, why, for how long, and how to make it all go away.

Last updated 19 August 2026

Who is responsible

Minekop runs minekop.com and decides what happens to the data described here. Different countries use different words for that role — data controller under the European and UK GDPR, veri sorumlusu under Turkish law 6698 (KVKK), business under California's CCPA — but it means the same thing: we are the ones you hold responsible, and the ones you write to.

The company is registered in Turkey. minekop is used from all over the world, so this policy gives everybody the same rights, wherever you live. We do not work out which law covers you and then give you the smaller set.

Email: info@minekop.com

The short version. You can use every tool on this site without giving us anything at all. If you make an account we keep your email, your name, your company name and the charts and plans you save. We do not sell it, we do not track you around the internet, and there is a button in your account that deletes the lot.

Using minekop without an account

The org chart editor and all seven planning tables work signed out. When you are signed out:

The chart you are building lives in the page you have open. Close the tab and it is gone. Nothing is sent to us. Export it as PDF, PNG, CSV or JSON if you want to keep it.
The planner saves your figures in your own browser, under localStorage key minekop.plan, so a reload does not lose your work. That data stays on your machine. Clearing your browser data removes it.
Photos you drop onto a chart box are read by your browser and drawn into the page. They are never uploaded. They are not saved when you save a chart either — which is also why they disappear if you reload.

What we store when you do have an account

What	Why
Email address	It is how you sign in, and the only way we can reach you.
Password, hashed	To check your sign-in. We store a one-way hash, never the password itself.
Your name and company name	You type them at sign-up. The company name is the workspace your work belongs to.
Charts you save	Names, job titles, departments, locations, teams, and who reports to whom.
Plans you save	Products, prices, quantities and every figure you type into the statements.
Sign-in attempts	Email address and IP address, kept so that somebody cannot sit there guessing your password. Successful and failed attempts both.
An activity log	Your user id, your company id, what you did (signed in, saved a chart), and the IP address it came from.
The session cookie	See below.

Real names of real staff. An org chart is usually a list of actual employees. If you put your colleagues into minekop, they are your data and you are responsible for them: you decide what goes in, you tell them if you need to, and you delete it when you are done. We only hold it for you. Nothing in a saved chart is ever shown to another company, and there is no public or shared chart feature at present.

Cookies

We set one cookie, and only after you sign in:

Name	What it does	How long
`ocsid`	Keeps you signed in as you move from page to page. It holds a random id and nothing else. JavaScript cannot read it, it is only sent over HTTPS, and it is not sent when another site links to us.	Until you close your browser.

We do not use analytics cookies, tracking pixels, session recording, heat maps or any of that. There is no Google Analytics on this site.

Advertising

minekop is paid for by the ad spaces you see on the sides of each page. Those spaces are intended for Google AdSense. When real ads are running in them, Google and its partners may use cookies or similar technology to choose which advert to show you, including on the basis of your earlier visits to this and other sites. You can turn personalised advertising off for your Google account at adssettings.google.com, and you can read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.

Where the law where you are requires your consent before an advertising cookie is set — the EU, the UK and a growing list of other places — you will be asked for it before any such cookie appears, and you can say no and keep using every tool on the site.

At the time of writing the ad spaces are empty placeholders and no advertising cookie is set by anybody. This section applies from the moment real ads appear.

Other people's servers

Hostinger hosts the site and the database. They can technically reach the data because it sits on their machines, and their web server keeps ordinary access logs.
Google Fonts serves the one typeface the site uses. Your browser fetches it from fonts.gstatic.com, which means Google sees the request.
cdnjs serves the library that turns a chart into a PNG. It is only fetched if you press Export PNG.

That is the whole list. We do not send your charts, your figures or your email address to anyone.

Where it is kept

The site and its database sit on servers run by Hostinger. Hostinger operates data centres in several countries, so your data may be stored or processed outside the country you are in, including outside the EU, the UK or Turkey. If you would like to know what applies to your account, ask us at info@minekop.com.

What actually crosses a border is small: an email address, a name, a company name, job titles and numbers. Nothing is sent to a third party for their own use.

Why we are allowed to hold it

Your account and the work you save: because you asked us to — we cannot provide the service without it (contract).
Sign-in attempts and the activity log: because a login page with no rate limit gets broken into (legitimate interest in keeping accounts safe).
Advertising cookies, once ads are live: your consent, asked for at the time by the ad provider where the law requires it.

How long we keep it

Your account and your saved work: until you delete it. We do not expire idle accounts.
Sign-in attempts: they only matter for the fifteen minutes the lockout lasts, and are cleared with your account.
Activity log: deleted together with your account.
Hosting access logs: kept by Hostinger under their own schedule, not ours.

Deleting everything

your company, and every chart and plan saved under it
every person, position, product and figure inside them
your sign-in attempts and your activity log
your login itself — email, name and password hash

It is immediate, it is not a soft delete, and there is no undo. We keep one line saying that an account was deleted on that date, with no name, no email and no address in it, so that we can show the deletion happened.

If you would rather we did it, write to info@minekop.com from the address on the account.

Your rights, wherever you are

Whatever country you are in, you can ask us to:

tell you what we hold about you
correct anything that is wrong
delete all of it
hand it to you in a file you can take elsewhere
stop using it for something you object to
explain anything in this policy in plainer words

Write to info@minekop.com from the address on your account and we will answer within thirty days. We do not charge for it and we will not ask you why.

Some countries write these rights into law — the GDPR in the EU, the UK GDPR, KVKK article 11 in Turkey, the CCPA in California, and similar rules in Canada, Brazil, Australia and elsewhere. If a law where you live gives you a right that is not on the list above, you still have it; tell us and we will honour it.

Two of them you do not need us for. Export every chart as CSV or JSON from the editor, and delete everything from your account page, right now, without asking anybody.

If you are unhappy with how we handled it, complain to the data protection authority where you live — the ICO in the UK, your national supervisory authority in the EU, the KVKK Kurumu in Turkey, or the equivalent body in your own country. You can do that without going through us first.

Children

minekop is a tool for running a business and is not aimed at children. Please do not create an account if you are under 16, or under whatever higher age your own country sets for agreeing to this on your own. If you believe a child has made an account, write to us and we will remove it.

Security, honestly

The site runs over HTTPS. Passwords are hashed. Every query about your company is filtered by the company id held in your session, never by anything in the URL, so one account cannot read another's staff list. Sign-ins are rate limited.

That said: this is a free tool run by a small company, not a bank. Please do not put anything in it that would seriously hurt if it leaked — salaries, identity numbers, home addresses, disciplinary notes. Names and job titles are what it is for.

Changes

If this policy changes in a way that matters, the date at the top changes and, for anything significant, we will say so on the site. Carrying on using minekop after that means you accept the new version.