Privacy notice for this site

Who is responsible

The controller of this site — the person who decides why and how data is processed — is Mustafa Evleksiz. I live in Dubai. For any question about this notice: mustafa@mustafaevleksiz.com.

In short

• No ads, no tracking cookies, no selling of data.
• Visit statistics are kept in aggregate; no profile of you is built.
• What you write in the contact form is used only to reply to you.
• Unless you press the language switch, the site leaves no cookie in your browser at all.

Visit statistics

mustafaevleksiz.com runs Vercel Web Analytics and Vercel Speed Insights. Neither uses cookies. Each page view records the page address, the site that referred you, your approximate location (country, region and city), your device type, operating system and browser. Speed Insights also measures how fast the page loaded and your connection type. When you press the language switch, the change from one language to the other is counted too.

To tell visits apart, Vercel derives a one-way hash from your request and discards it after 24 hours. Your IP address is not stored, and your visits are not linked to other websites. I only ever see totals. None of this runs on the evleksiz.me mirror.

Contact form and e-mail

When you send the form, your name, e-mail address and message are passed to my inbox through Web3Forms, a form service with servers in the United States. Web3Forms says it does not store message contents and deletes server logs that may contain personal data every two months. Your message then stays in Google Workspace, where my e-mail is hosted.

The same applies when you e-mail me directly. I use the conversation only to reply to you, and I will delete it if you ask.

Server logs

Every request passes through the infrastructure that serves the site: Vercel for mustafaevleksiz.com, and my own server in Germany (Contabo) for evleksiz.me. These systems may keep your IP address and the details of the request in short-lived technical logs, for security and debugging. I don't use them for anything else.

What stays in your browser

• Your theme choice (light or dark) is kept in your browser's local storage and is never sent to the server.
• Your language choice is written to a cookie called NEXT_LOCALE only when you press the language switch, and kept for a year. If you haven't pressed it, the language is read from your browser settings and no cookie is set.

That is why there is no cookie banner: there are no tracking or advertising cookies, and the only cookie remembers a setting you chose.

Legal bases

• Visit statistics and speed measurement: legitimate interest — seeing how the site is used and how fast it loads.
• Server logs: legitimate interest — keeping the site secure and working.
• Contact form and e-mail: legitimate interest — being able to reply when you write to me.
• Language and theme choice: your request — remembering the setting you picked.

Transfers abroad

Some of the services I use run outside the country you live in: Vercel and Web3Forms in the United States, Google Workspace in data centres around the world, and Contabo in Germany, inside the EU.

For transfers from the EU, EEA and UK, Vercel and Google offer the European Commission's standard contractual clauses. You can ask me for a copy of these safeguards. I could not find an equivalent document for Web3Forms; if you'd rather not use the form, you can simply e-mail me.

How long

• Visit statistics: kept by Vercel as aggregate counts; the hash that tells visits apart is discarded after 24 hours.
• Server logs: for the infrastructure's own short retention period.
• Form messages and e-mails: for as long as the conversation needs. I'll delete them straight away if you ask.
• Your settings: in your browser until you clear them. The language cookie lasts at most a year.

Your rights

Depending on where you live, the GDPR, the UK GDPR, Türkiye's KVKK, Brazil's LGPD or the UAE's PDPL give you the right to know what data I process about you, to get a copy, to have it corrected or deleted, to restrict its processing, to object to processing based on legitimate interest, and to have it moved elsewhere.

To make a request, write to mustafa@mustafaevleksiz.com. I will reply within one month — within 30 days if you are covered by the KVKK — and if I need longer, I'll tell you why. I may ask for something that confirms the request really comes from you.

I make no automated decisions about you; there is no profiling on this site. You can always lodge a complaint with the data protection authority of the country you live in.

Children

This site is not aimed at children and doesn't ask anyone's age. If you are under the age of digital consent where you live (between 13 and 16 in the EU, depending on the country), use the contact form with a parent's or guardian's consent.

Region-specific information

• EU, EEA and UK: the rights above come from the GDPR and the UK GDPR. You can complain to the data protection authority of the country you live in, or to the ICO in the UK.
• United States: I don't sell your personal information or share it for targeted advertising. Because the site doesn't track you, a Do Not Track signal changes nothing.
• Brazil: you can exercise your rights under the LGPD at the same address, and complain to the ANPD.
• Türkiye: I reply to requests under the KVKK within 30 days. Your right to complain to the Personal Data Protection Board is unaffected.
• UAE: you can exercise your rights under the Personal Data Protection Law (PDPL) at the same address.

Changes

When I change this notice, I update the date at the top. If a change matters, I'll also say so at the start of the page.