Security and payments
HTTPS / TLS and 256-bit encryption
Checks of www.dynperformance.com on 19 October 2026 verified a valid certificate, TLS 1.3 with TLS_AES_256_GCM_SHA384, and TLS 1.2 with AES-256-GCM. Each connection negotiates its cipher; the same algorithm is not guaranteed for every browser.
Card payments
Enter card details only inside the PayTR iframe. In this flow, our application server does not receive or store card numbers or security codes. PayTR states its infrastructure is PCI-DSS compliant; this is not a DynPerformance PCI-DSS certification. 3D Secure verification depends on PayTR, the bank and merchant settings.
Accounts and sessions
The website uses the same accounts as the mobile app. Passwords are hashed using bcrypt at cost 12. Browser refresh tokens use HttpOnly, Secure, SameSite=Lax cookies; access tokens stay in memory. Cookie operations check the allowed Origin. My account offers sign-out for one session or all devices.
Personal data and contact
See the privacy notice and KVKK information for personal data processing, requests and contact details. A payment is confirmed by the server-verified PayTR callback, rather than the browser return page.