Privacy notice

This site tries to take up as little room as possible when it comes to personal data. Here is what actually happens.

Data controller

Abdullah Faruk. Contact: hello@abdullahfaruk.com

While you browse

There is no advertising on this site, no advertising related tracking, and no other third party script.

One thing is stored in your browser: the theme you picked, light or dark. That stays in your browser and never reaches me.

The site is hosted on a web server, so as with any web server, access logs (IP address, request time, requested path) may be kept. Those exist for running the server and preventing abuse, and are not used for marketing.

Visit statistics (Google Analytics)

I use Google Analytics 4 to see which posts get read. The measurement id is G-LMGY7RRBMM.

Data collected: the pages you visit, how long you stay, where you came from, approximate location at country and city level, device and browser type. Google sets a cookie in your browser for this measurement.

What is switched off: ad storage, ad personalisation and sharing data for advertising are denied up front through Consent Mode. IP addresses are processed anonymised. I do not use this data for advertising and I do not sell it.

Purpose: to see which posts get read and to decide what to keep writing about.

Where it is processed: on Google LLC infrastructure, which means the data is transferred abroad.

If you would rather not: you can use your browser’s tracking protection, a content blocker, or Google’s Analytics opt out add on. The site works fine with any of those.

Subscribing is entirely optional. If you do not subscribe, this section does not concern you.

Data collected: your email address, the language you chose, when the record was created, when it was confirmed, your IP address and browser string at the moment of confirmation, and the version of the consent text.

Why: so I can send you notifications about new posts. The IP and browser string are kept only as a record showing the confirmation genuinely came from you. Without that record I cannot prove that explicit consent exists.

Legal basis: your explicit consent under Turkish law 6698 on the Protection of Personal Data. You give that consent by ticking the box and then clicking the link in the email that follows.

Double opt in: if you do not click the confirmation link you are not added to the list. Unconfirmed records never receive anything.

Where it is kept: the source of truth is a SQLite file on my own server. Creating, confirming and deleting a subscription is handled there.

Sending emails: confirmation and newsletter emails go out through Brevo. When you confirm, your email address and language preference are also written to the sending list at Brevo. When you unsubscribe you are removed from that list, and when you ask for deletion the contact at Brevo is deleted too. Brevo acts as a data processor here and processes the data inside the European Union, which means the data is transferred abroad. The data is not shared with anyone and is not sold.

For how long: for as long as your subscription lasts. When you unsubscribe, your record leaves the mailing list and is kept as proof of the opt out. If you ask for it to be removed completely, it is removed.

If you fill in the consulting form

The form is entirely optional and separate from the newsletter. If you do not use it, this section does not concern you.

Data collected: your name, your email address, optionally your company and your role, the package and budget range you picked, the message you wrote, your IP address and browser information at the moment you sent the form, and the version of the consent text.

Why it is collected: so I can reply to your enquiry and discuss the scope of possible work. The IP and browser information is kept only as a record that the consent really came from you, and to limit abuse.

Legal basis: your explicit consent under Turkish data protection law, together with the steps taken prior to entering into a contract. You give that consent by ticking the box.

Where it is kept: the source of truth is again a SQLite file on my own server, in a table separate from the newsletter records. Filling in the form does not add you to the mailing list; the two flows never mix.

Where it goes: when the form is sent, its content reaches me as a notification email and a copy is sent to you. Delivery goes through Brevo. The mailbox where I read the notification is a Google (Gmail) account, so the content of your enquiry also sits on Google infrastructure, which means the data is transferred abroad.

How long: until the conversation concludes, and for a reasonable period afterwards for accounting and record keeping. If you want it deleted sooner, I delete it.

Your rights

Article 11 of the Turkish data protection law gives you the right to access, correct and delete your data, and to object to its processing. There is no complicated process for using those rights:

Unsubscribe: the one click link at the bottom of every email.
Delete completely: the delete link in the unsubscribe email. That link removes the record from the database irreversibly.
See or correct: write to me and I will share exactly what I hold.
Delete a consulting enquiry: write to me; the record is removed from the database and from the mailbox.

In every case you can write to hello@abdullahfaruk.com.

The emails that are sent

Newsletter emails, subscription confirmations and unsubscribe handling all go through my own server. Every email carries a List-Unsubscribe header, so your mail client shows you a one click unsubscribe button. There are no tracking pixels and no click tracking in the emails.

If this notice changes

The version of this notice is tracked by the update date above. Consent records also store which version you consented to. If a change widens the scope of that consent, I will ask for consent again.