Privacy and Cookies

COOKIES

Not a single cookie is written

Not mine, not anyone else’s. There is no Google Analytics on these pages, no ad network and no third-party tracking script. The only code that reaches your browser is a few lines that set the theme and the language. I wrote those myself, and they send nothing anywhere.

That is why you never saw an “accept cookies” box. Nothing was left out: there is simply no cookie to agree to.

STORED IN YOUR BROWSER

Two preferences, on your device

The site writes two values into your browser’s localStorage. Both are just a record of a choice you made: they never go to the server, they never leave your device, and I cannot see them.

• tema

  Whether you want the dark or the light look. It is read before the page paints, so you do not have to hit the theme button on every visit and the dark theme never flashes white.

• dil-secildi

  Whether you picked the language yourself. It keeps the automatic redirect, which runs once on the home page, from overwriting your choice.

Both are functional entries that remember a preference of your own. Neither GDPR nor Turkey’s KVKK asks for separate consent for that. Consent is there for records that follow you around whether you chose them or not.

How to delete them

Clear this site’s data in your browser settings and both are gone. In a private window nothing sticks around in the first place. Afterwards the site falls back to the default theme and your browser language, and nothing else is lost.

SERVER LOGS

Access logs are kept for 14 days

The server that publishes the site (nginx) writes one line per request. Without those lines I cannot tell whether the server is up, where it is failing, or whether it is under attack. One line holds:

• IP address
• Date and time
• The page requested
• HTTP status code
• Bytes sent
• Referring address (referer)
• Browser details (user-agent)

After 14 days these lines are deleted on their own. No archive is kept of them and no backup is taken.

Visitor counts

I use the same lines to count how often each page was opened. The IP address is not kept as it is: the IP and the browser details are hashed together, and only that hash stays behind. So what I have is “how many people came”, never “who came”.

WHEN YOU WRITE TO ME

No form here, you write to me directly

There is no contact form on the site. The email and WhatsApp links hand you over to your own app; nothing of mine sits in between. Once you write, I naturally end up holding your message and the address it came from. I use them to answer you and for nothing else: no mailing list, no passing them on. Ask me to delete the conversation and I will.

THIRD PARTIES

Nothing is sold, nothing is passed on

None of the data above is sold or shared for marketing. The one exception is infrastructure: the site is served through Cloudflare, which routes traffic over its own network to speed pages up and filter attacks out, and keeps its own security and cache logs while doing so. Those logs fall under Cloudflare’s own privacy policy and are not in my hands.

YOUR RIGHTS

Article 11 of the KVKK

Turkey’s Personal Data Protection Law no. 6698 gives you these rights in its article 11:

1. 01To learn whether your personal data is being processed.
2. 02To request information about it if it has been processed.
3. 03To learn the purpose of processing and whether the data is used in line with that purpose.
4. 04To know the third parties the data is transferred to, at home or abroad.
5. 05To have it corrected if it is incomplete or wrong.
6. 06To ask for it to be erased or destroyed.
7. 07To ask that corrections and erasures be reported to any third parties the data went to.
8. 08To object to an adverse outcome reached purely by automated analysis.
9. 09To claim compensation if unlawful processing has caused you harm.

How to use them

Write to the address below and say what you want in a sentence or two. I answer within thirty days at the latest, and usually much sooner. Since I hold nothing beyond what is listed above, the answers tend to be short.