Privacy
Privacy policy.
Last updated: September 30, 2026.
What this page describes is matched against what the code actually does, not a generic template. No ad trackers, no data sold to third parties. The site uses just two session cookies; each one is listed below with what it does.
Who's responsible for your data
Muratify is a one-person software studio founded by Murat Baskıcıoğlu. The company that processes the data described here is Muratify LLC — the name that appears on your payment receipt if you've ever subscribed. Questions or requests go through the contact section at the bottom of this page.
What we collect, and why
muratify.com collects data at exactly five points. Nothing else is collected outside of these:
Contact form (/contact)
Your name, email address, topic and message. It's relayed once by email to our support inbox — it is not written to a database. Used only to answer you.
Email sign-up (discount / update forms)
Just your email address. It's forwarded to the sign-up service behind accounts.muratify.com (Muratify ID) to send a discount code or a product update. Your IP address is used only to slow down abuse within a rolling one-hour window and is not kept in raw form.
Product analytics
Each visit gets a random visit id. It is kept in your browser and deleted when you close the browser (details below, under Cookies). With it we log a closed set of events: which pages you viewed, which button or download you clicked, whether a form succeeded or failed. Each event also says where the visit came from: only the domain of the site that sent you (for example google.com, not the full address), the campaign tags in the link if it has any (utm_source, utm_medium, utm_campaign), and the channel type we work out from them (search, social, email and so on). Along with that go the page language, your operating system (macOS, Windows or Linux) and the text your browser uses to identify itself (the User-Agent; used to tell browser and device types apart and to filter out bots). Your full IP address is not sent: only a version with the last part set to zero (for example 88.230.14.0) goes along, for country-level statistics. The raw page address, the other parameters in the link and your form contents are never sent. If you sign in at accounts.muratify.com, that visit's events and the channel it came from are linked to your account, so we can see which channels lead to a purchase. If you don't sign in, the visit id can't be tied back to you. Events are processed by PostHog, hosted in the EU.
Error reporting
If something breaks, the error type, its message and a stack trace (file paths masked) reach Sentry, together with the page route with its query string stripped out. Form contents, cookies and your email never travel with it, and storing of IP addresses is blocked in our account settings — the only goal is finding and fixing the bug.
Payments
Card details never touch Muratify's servers. Subscriptions and payments run through Stripe via accounts.muratify.com (Muratify ID); that flow is covered by Stripe's own security and privacy practices.
The AgentSpace desktop app
Our desktop apps also send only anonymous usage events: countable facts like the app being opened, a panel being viewed or an agent being started — together with the app version and operating system. Your commands, what you type, your files, your code, agent conversations and memory contents are never attached to any event. You can turn this telemetry off entirely in the app's settings; for error reporting, the Sentry principles above apply on desktop exactly the same way.
Cookies and what your browser keeps
The site uses no ad cookies and no cookies from other companies. The only cookies are the two session cookies below, which the site sets itself. Neither has an expiry date; both are deleted when you close your browser. Both are valid on muratify.com and its subdomains, because checkout opens on accounts.muratify.com and needs to recognize the same visit. They are not sent to any other site.
mf_vid · Visit id
A randomly generated number. It holds no name, email or device details. It lets a visit count as one visit when you move from a product page to checkout.
Lasts: until you close the browser
mf_att · Where the visit came from
The domain of the site that sent you, the campaign tags in the link and the channel type. It is written once, on the first page of the visit, and does not change during the visit.
Lasts: until you close the browser
Besides the cookies, your browser may hold three more things. A copy of the same two values sits in tab storage (sessionStorage) and is cleared when you close the tab. If you finish or skip the guided tour on the AgentSpace product page, a "done" flag is saved (localStorage) so the tour does not start on its own again. A few experimental lab pages (hand-tracking games) keep records of your own play session. The tour flag and the game records never leave your browser. You can clear all of it from your browser's site settings.
Who your data is shared with
Only the processors that actually run the service below — nothing is sold, and there is no ad or marketing pixel wired into this site to hand data to:
- Resend — delivers the contact form as email
- The Muratify ID sign-up service — email sign-ups and discount codes
- PostHog (EU region) — product analytics
- Sentry — error tracking
- Stripe, via accounts.muratify.com — payments and subscriptions
How long we keep it
A contact message lives in our support inbox for as long as any other email you send us — there is no separate database to purge it from. An email sign-up is kept by the sign-up service for as long as your registration stays active. The cookies are deleted when you close your browser, and the tab-storage entries when you close the tab. Analytics events and error reports are kept under PostHog's and Sentry's own retention settings on our account with them.
If a data breach ever happens
If we detect a security incident affecting your personal data, we will notify affected users without undue delay, explain what happened and what we did about it, and meet the legal notification duties that apply.
Your rights
Under Turkish data protection law (KVKK, Law No. 6698, Art. 11), you can ask us to:
- tell you whether we process your personal data
- explain how and why it's processed
- name any third parties it's shared with
- correct it if it's inaccurate or incomplete
- delete or anonymize it
- notify the third parties above of a correction or deletion
- stop a decision made about you based solely on automated processing
- claim compensation if unlawful processing caused you a loss
If you live in the European Union, the equivalent GDPR rights (access, rectification, erasure, objection, portability) are available to you through the same channel.
Questions or requests
Write to us and we'll act on it — whatever the topic, name it as a privacy request so it doesn't get read as a support ticket.