000

Privacy

This page explains which personal data seymanurcebi.dev processes, why, and for how long it is kept. It serves as a disclosure notice under Turkish data protection law (KVKK, Law No. 6698).

Effective: 7 August 2026

Data controller

Şeyma Nur Çebi — seymanurcebi6@gmail.com

Data processed

If you write in the guestbook: your name and note. If you use the contact form: your name, email address and message (kept in the database so that I can reply). In both cases and for visit counting: a salted hash of your IP address and a timestamp. THE RAW IP ADDRESS IS NEVER STORED.

Purposes

Publishing and moderating your note; replying to your message; preventing spam and abuse; counting total visits; diagnosing failures.

Legal basis

You send your note or message of your own accord (explicit consent). Spam prevention and aggregate visit counting rest on legitimate interest in running the site safely (Art. 5/2-f).

Retention

Unapproved guestbook notes are deleted automatically after 7 days. The IP hash kept for rate limiting is removed after 1 hour. Visit de-duplication records are kept 2 days and contact-form counters 1 hour. These cleanups run when a new request arrives. Approved notes stay published until you ask for their removal. Messages sent through the contact form are kept until they are read and deleted manually; ask and they will be removed. 1 year

Third parties

The site runs on Cloudflare infrastructure (hosting, CDN, database, error logs). If the contact form is active, your message is passed to Resend for email delivery; this transfer goes abroad.

Cookies and local storage

The site USES NO COOKIES. Only two markers are kept in your browser's session storage (sessionStorage): one so the visit counter does not increase twice in one session, and one so the opening animation is shown only once per session. Neither is sent to the server, and both are cleared when the tab is closed.

Analytics

This site uses no analytics service; only a total visit count is kept

Security

All traffic runs over HTTPS (HSTS). A content security policy is enforced. The raw IP address is never stored. Notes are approved manually before publication. The admin screen is protected by a separate key.

Your rights

Under KVKK Art. 11 you may: learn whether your personal data is processed, request information about it, learn the purpose of processing, know the third parties it is transferred to at home or abroad, request correction if it is incomplete or wrong, request erasure or destruction, request that these actions be reported to third parties, object to a conclusion drawn against you by automated analysis, and claim compensation for damages.

Requests

Write to seymanurcebi6@gmail.com. Requests are answered within 30 days at the latest.