Privacy
This page explains which personal data seymanurcebi.dev processes, why, and for how long it is kept. It serves as a disclosure notice under Turkish data protection law (KVKK, Law No. 6698).
Effective: 7 August 2026
Data controller
Şeyma Nur Çebi — [email protected]
Data processed
If you write in the guestbook: your name and note. If you use the contact form: your name, email address and message (kept in the database so that I can reply). In both cases and for visit counting: a salted hash of your IP address and a timestamp. THE RAW IP ADDRESS IS NEVER STORED.
Purposes
Publishing and moderating your note; replying to your message; preventing spam and abuse; counting total visits; diagnosing failures.
Legal basis
You send your note or message of your own accord (explicit consent). Spam prevention and aggregate visit counting rest on legitimate interest in running the site safely (Art. 5/2-f).
Retention
Unapproved guestbook notes are deleted automatically after 7 days. The IP hash kept for rate limiting is removed after 1 hour. Visit de-duplication records are kept 2 days and contact-form counters 1 hour. These cleanups run when a new request arrives. Approved notes stay published until you ask for their removal. Messages sent through the contact form are kept until they are read and deleted manually; ask and they will be removed. 1 year
Third parties
The site runs on Cloudflare infrastructure (hosting, CDN, database, error logs). If the contact form is active, your message is passed to Resend for email delivery; this transfer goes abroad.
Cookies and local storage
The site USES NO COOKIES. Only two preferences are kept in your browser: appearance (light/dark) and whether the menu is open. Plus a marker so the visit counter does not increase twice in one session. None of these are sent to the server.
Analytics
This site uses no analytics service; only a total visit count is kept
Security
All traffic runs over HTTPS (HSTS). A content security policy is enforced. The raw IP address is never stored. Notes are approved manually before publication. The admin screen is protected by a separate key.
Your rights
Under KVKK Art. 11 you may: learn whether your personal data is processed, request information about it, learn the purpose of processing, know the third parties it is transferred to at home or abroad, request correction if it is incomplete or wrong, request erasure or destruction, request that these actions be reported to third parties, object to a conclusion drawn against you by automated analysis, and claim compensation for damages.
Requests
Write to [email protected]. Requests are answered within 30 days at the latest.