Privacy

This site is a personal portfolio run by Berktan Solmaz, an individual based in London. There is no company behind it and no data protection officer, because neither is required at this scale. Questions about anything on this page go to [email protected].

If you send a message, the form collects your name, your email address and the message itself. Nothing else is requested and nothing else is stored alongside it.

That message is delivered to my inbox by Resend, an email provider acting as a processor. From that point it lives in my mailbox like any other email, and it stays there for as long as the conversation is useful, which for a recruitment enquiry means somewhere between a few weeks and a couple of years.

The lawful basis is legitimate interest: you contacted me in order to get a reply, and replying requires holding your message and your address. There is no marketing list, and you will never be added to one.

Visits are counted with Cloudflare Web Analytics. It is cookieless: it sets nothing on your device, does not fingerprint your browser, and cannot follow you to another site. What it reports back to me is aggregate, along the lines of how many people opened a page and roughly where in the world they were.

Because none of that identifies you, this site shows no cookie banner. There is nothing to consent to.

The site runs on a machine I own, reached through a Cloudflare Tunnel, with Cloudflare sitting in front of it as a proxy and CDN. Cloudflare handles the connection and keeps its own request logs, which is inherent to how a proxied domain works.

The server keeps ordinary web server logs. They are used to see whether the site is up and to spot abuse, and they are not combined with anything else or used to profile anyone.

The project list is fetched from the GitHub API and the now-playing widget from the Spotify API. Both calls are made by the server using my own credentials, not by your browser, so neither service sees your visit or receives anything about you.

Fonts are served from this domain rather than from a font CDN, so loading the page does not announce you to a third party.

The DOOM easter egg is the one exception, and only if you choose to start it: it loads an emulator script from js-dos.com, which means that request comes from your browser. Nothing loads unless you click.

Under UK GDPR you can ask what I hold about you, ask for a copy, ask for it to be corrected, or ask for it to be deleted. In practice that means whatever is in an email thread between us, and a deletion request is honoured by deleting the thread.

Email [email protected] and I will deal with it. If you are not satisfied with how I handle it, you can complain to the Information Commissioner's Office at ico.org.uk.