Legal

Privacy policy

This site collects as little as possible. Here is exactly what that means.

Last updated:

The short version

This website sets no advertising cookies, runs no third-party trackers, and does not build a profile of you. The only personal data it stores is what you type into the contact form, and it is used solely to reply to you.

What is collected

Contact form

When you send a message, the following is stored in a Cloudflare D1 database in order to read and reply to it:

  • Your name, email address, subject and message.
  • Your IP address and browser user-agent, and the country Cloudflare associates with the request. These are kept only to identify and block spam.
  • The time of submission.

The legal basis is legitimate interest: you contacted me and expect a reply. Messages are deleted once the correspondence is concluded, and in any case within 24 months.

Analytics

Traffic is measured with Cloudflare Web Analytics, which is privacy-first: it uses no cookies, does not fingerprint visitors, and does not track individuals across sites or sessions. It records aggregate page views, referrers and general performance timings. Nothing it collects identifies you.

Spam protection

The contact form is protected by Cloudflare Turnstile, a CAPTCHA alternative that verifies you are human without tracking you and without the visual puzzles. It does not use cookies for cross-site tracking.

Security and delivery

The site runs on Cloudflare's network, which processes request metadata (IP address, user-agent, timestamps) in transient logs to deliver pages, mitigate attacks and detect abuse. This is standard for any website and is required for it to function at all.

What is stored in your browser

The site sets no tracking cookies. It stores exactly two things locally:

  • theme in localStorage — remembers whether you chose light or dark mode. It never leaves your device.
  • A session cookie, only if you are the site administrator and sign in. It is HttpOnly, Secure and SameSite=Lax, and is used purely to keep that session authenticated.

Because no cookies are used for tracking or advertising, no cookie-consent banner is required.

What is shared

Nothing is sold, rented, or shared for marketing. Data is processed only by the services needed to run the site:

  • Cloudflare — hosting, database, media storage, analytics, spam protection.
  • Resend — used solely to email me a copy of your contact-form message so I see it promptly.

Your rights

Under the GDPR and Turkey's KVKK you may request access to, correction of, or erasure of your personal data, and you may object to its processing. To exercise any of these, email oeyeci@gmail.com and I will respond within 30 days.

External links

Pages here link to external sites (DOIs, publisher pages, ORCID, GitHub, Google Scholar). Those sites have their own privacy policies, and this one does not apply once you leave.

Changes

If this policy changes, the "last updated" date above changes with it. Material changes will be noted on this page.

Contact

Questions about privacy or data on this site can be sent to oeyeci@gmail.com.