Privacy and cookies

Who

The controller of this site is Mert Öztaş (Istanbul, Türkiye). Questions: contact@mertoztas.com

What data, and when

• Hosting: The site runs on Vercel Inc. infrastructure. When you open a page, your IP address, browser details and the requested address are recorded in the host’s technical logs to keep the site secure and working. Your country is used only to choose the language of the page.
• Language cookie (lang): Remembers the language you chose, or that was chosen for you, for 1 year. Needed for the site to work.
• Consent record (cerez-izni): Stores your choice in this banner in your browser for 12 months. It is not sent to any server.
• Google Analytics 4, only with your consent: pages opened, time on page, where you came from, device and browser type, approximate location (city, country) and interactions such as clicking the e-mail link. Cookies _ga and _ga_42HDNKXQ2R, kept for up to 2 years. Google Analytics 4 does not store IP addresses. Data is kept for 14 months.

Why, and on what legal basis

Hosting logs and the language cookie rely on legitimate interest in running a secure site (KVKK art. 5/2-f; GDPR art. 6(1)(f)). Google Analytics runs only with your explicit consent (KVKK art. 5/1; GDPR art. 6(1)(a)); it helps me understand which parts of the site are useful and which posts bring visitors. Your data is not sold or used for advertising.

Transfers abroad

Vercel and Google may process data on servers outside Türkiye and the EU, including the United States. The transfer of analytics data also relies on your consent; without it, no analytics data is collected or transferred.

Your rights

Under KVKK art. 11 and, where it applies, the GDPR, you may ask whether your data is processed, request access, correction or deletion, learn who it was shared with, and object. Write to contact@mertoztas.com; you will receive an answer within 30 days. You can withdraw analytics consent at any time.