Privacy policy

Controller

Berke Biricik
Erwin-Rommel Str. 53a
Erlangen
Germany
berkeumtbiricik@gmail.com
See also the Impressum.

Hosting and server logs

The site is hosted by Vercel Inc. (USA). When you visit, the hosting infrastructure processes technical data such as your IP address, the requested URL, the time and your browser type in temporary server logs. This is needed to deliver the site securely and reliably (Art. 6(1)(f) GDPR). Transfers to the USA rely on the EU-US Data Privacy Framework and standard contractual clauses.

Page views

I count visits per page to see which posts are read. The counter stores only the page path and a number per day. It sets no cookies, stores no IP address and no identifier, and doesn't track you across sites. To avoid counting a reload twice, your browser keeps a flag per page in its session storage (viewed:…); it is never sent to me and disappears when you close the tab.

Contact form

If you send a message, I process the name, email address and message you enter to answer you (Art. 6(1)(b) and (f) GDPR). Messages are stored in a database (Upstash, Redis) and kept until I have dealt with your request; you can ask me to delete yours at any time. New messages are also forwarded to me by email through the delivery service Resend.

Abuse protection

To limit spam and guessing attacks, the login, the contact form and the page-view counter keep short-lived request counters per IP address (for IPv6, per network prefix). They are deleted automatically after at most about 45 minutes (Art. 6(1)(f) GDPR). The IP address is not stored together with your messages or the page-view counts.

Cookies and local storage

The site stores your light/dark preference in your browser's local storage (theme). No tracking or advertising cookies are used. The admin login, which only I use, sets one strictly necessary session cookie.

Fonts and external content

Fonts, icons and scripts are served from this site, so your browser makes no requests to Google or other third parties when loading pages. Links to X, GitHub and LinkedIn are plain links: data is only transferred to them if you click. If a note embeds an image hosted elsewhere, your browser requests that image from its host, which then sees your IP address.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Articles 15–21 GDPR), and to lodge a complaint with a data protection supervisory authority. To exercise them, contact me using the details above.