LEGAL
Privacy and legal
In short
This is my personal site. I set no cookies and run no analytics or tracking scripts, and there are no ads, forms or accounts. Everything on the page loads from okankilicer.com itself; there are no third-party scripts, fonts or trackers. Data about you exists in two places: the technical request records of the infrastructure that serves the site, and your message if you e-mail me. For visitors in Türkiye this page also serves as the notice under Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK).
Who is responsible
Okan Kılıçer. I am a private individual living in the United Arab Emirates.
E-mail: hello@okankilicer.com
I do not publish a postal address here. If you need one for a written request, ask by e-mail and I will give you an address for service.
What is processed, why, and on what legal basis
When you visit. Like any web server, the site has to process your IP address, the date and time of the request, the address you asked for, your browser and operating system details (user agent) and an approximate location derived from the IP address (country, city) in order to answer you. Cloudflare, which hosts the site, collects this by fully automated means. The purpose is to deliver the page, protect the site against attacks and abuse, and find and fix errors. Legal basis: my legitimate interest in keeping my site running and secure (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f) where it applies). I do not try to work out who you are from these records and I do not combine them with anything else.
If Cloudflare cannot tell whether a request comes from an automated tool, it may set a strictly necessary security cookie in your browser. If your browser cannot reach the site, it may send Cloudflare a short connection-error report.
When you e-mail me. I receive your e-mail address, your name, what you wrote and any attachments. I use them only to reply and to deal with what you wrote about. Legal basis: my legitimate interest in answering people who write to me (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)). If a dispute arises I may keep the correspondence to protect my rights (KVKK Art. 5(2)(e)). Please do not send sensitive personal data such as health information, or other people's personal data, unless it is necessary. If you need to share sensitive technical details, tell me first and we will agree on a safer channel.
Language choice. If you press the EN / TR switch at the top right of the home page, your choice is saved in your browser's local storage under the name ok-lang (value en or tr) so the site opens in the same language next time. If you never press it, nothing is stored. The value stays on your device, is not sent to me or anyone else, and does not identify you. You can delete it by clearing this site's data in your browser. Because it only remembers a preference you asked for, I do not show a consent banner.
I do not do automated decision-making or profiling. I do not sell your data or use it for marketing. Viewing the site is technically impossible without processing your IP address. Whether you e-mail me is entirely up to you.
Who receives your data
- Cloudflare, Inc. (USA) hosts and delivers the site and protects it against attacks. It processes the request data as my processor, and for the security of its own network as a controller in its own right.
- Fastmail Pty Ltd (Australia) hosts my mailbox. Messages you send me are stored on its servers.
- Competent authorities, only where the law obliges me.
Nobody else receives your data.
Where the data is processed
Neither provider keeps the data in a single country. Cloudflare answers your request from the data centre nearest to you and processes log and security data mainly in the United States and Europe. Fastmail is an Australian company and keeps mail on servers in the United States or Europe. So the data described above may be processed outside the country you live in; for visitors in Türkiye this means it is processed abroad. I use both services on their standard terms. Cloudflare's terms include its Data Processing Addendum; Fastmail publishes its own data protection agreement.
How long it is kept
I do not run a server of my own and I do not keep log files. Request records stay in Cloudflare's systems for a limited time. The request-level records I can see in my account (a sample of requests in the security logs) are deleted by Cloudflare automatically, currently after 31 days at the latest. Aggregate traffic figures (how many requests, from which countries) are not about individuals. I keep e-mails until the matter you wrote about is closed and I no longer need them. I will delete yours earlier if you ask, unless I have to keep a message to protect a legal right.
Your rights
Under Article 11 of the KVKK you have the right:
- to learn whether I process personal data about you,
- to ask for information about it if I do,
- to learn what it is processed for and whether it is used for that purpose,
- to know which third parties in Türkiye or abroad it has been transferred to,
- to have it corrected if it is incomplete or wrong,
- to have it erased or destroyed under the conditions in Article 7 of the KVKK,
- to have the correction, erasure or destruction passed on to the third parties it was transferred to,
- to object to a result that goes against you and comes solely from automated analysis of your data,
- to claim compensation if you suffer damage because your data was processed unlawfully.
How to use them. Write to hello@okankilicer.com. Say what you are asking for and which data it concerns, for example the address you e-mailed me from, or the date and IP address of a visit. If I cannot be sure it is you, I may ask for more information. I answer within thirty days at the latest and free of charge (KVKK Art. 13). If I refuse your request, do not answer in time, or you find my answer inadequate, you can complain to the Personal Data Protection Board within thirty days of learning my answer and in any case within sixty days of your request (KVKK Art. 14).
If you are in the EU or the UK. Where the GDPR or the UK GDPR applies to you, you can write to the same address to exercise your rights of access, rectification, erasure and restriction of processing. You can object at any time to processing based on my legitimate interests. You can also lodge a complaint with the data protection authority of the country where you live.
The feed and external links
The headlines in the Feed section and in the ticker at the bottom of the page are fetched from the publishers' public RSS and Atom feeds by the site's own code running at Cloudflare. Your browser does not connect to those publishers unless you click a headline. When you click, you go to the publisher's site and its privacy rules apply. My site tells your browser not to tell the publisher where you came from.
Headlines, and short summaries where they are shown, belong to their publishers and appear with the source name and a link to the original. I do not write, edit or verify them. Following a source does not mean I agree with everything it publishes, and I am not responsible for the content of sites I link to. If you are a publisher and do not want your feed listed here, write to me and I will remove it. Nothing here, including the crypto and market headlines, is investment advice.
Personal site and trademarks
This is my personal site. It is not operated by or on behalf of my employer, and the views on it are my own. No publisher shown in the feed endorses or sponsors it.
All names and trademarks mentioned on this site belong to their owners. They are named only to describe my own work and interests or to credit a source.
Security contact
If you notice a security problem on this site, write to hello@okankilicer.com. The same contact is listed in security.txt.
Copyright and licences
Unless stated otherwise, the text and code of this site are mine. The typefaces Chakra Petch and JetBrains Mono are used under the SIL Open Font License 1.1. three.js, used for the 3D scene, is under the MIT licence. Licence texts: licenses.txt
Changes
If I change this notice I will update the date at the top.