Privacy Notice
This notice explains what personal data is processed on this site and on what legal basis. It also serves as the cookie policy. The Turkish version is the authoritative text.
Last updated:
Short summary
I do not collect your personal data directly. However, when you consent, Google Analytics and Google AdSense run and those services do process data. And if you use the contact form, what you write reaches me as an email.
Every developer tool on this site runs entirely in your browser. Nothing you type or paste into them is sent to a server, stored, or visible to me.
You can verify this yourself: open any tool page, disconnect from the internet, and watch the tool keep working.
Data controller
Send any request under data protection law to the email address above. If you prefer to write by post, email the same address and I will provide a postal address.
- Controller
- Mustafa Kürşad Başer
- Contact
- info@mustafabaser.net
- Site
- mustafabaser.net
What is processed, and why
The table below lists every personal data processing activity on this site and the legal basis for each.
| Activity | Data | Purpose | Legal basis |
|---|---|---|---|
| Google Analytics | IP address, browser and device information, pages visited, session duration | Visitor statistics, understanding which content is read | Consent (KVKK Art.5/1, GDPR Art.6(1)(a)) |
| Google AdSense | IP address, browser information, advertising identifiers | Serving and measuring ads | Consent (KVKK Art.5/1, GDPR Art.6(1)(a)) |
| Contact form | Name, email, optional phone and message | Replying to you, and nothing else | Contract (KVKK Art.5/2-c, GDPR Art.6(1)(b)) |
| Abuse prevention | IP address (transient, in memory) | Stopping automated submissions to the contact form | Legitimate interest (KVKK Art.5/2-f, GDPR Art.6(1)(f)) |
| Hosting logs | IP address, browser information, request time | Server security and fault diagnosis | Legitimate interest (KVKK Art.5/2-f, GDPR Art.6(1)(f)) |
| Your cookie choice | The consent record and its date | Remembering your choice and being able to demonstrate consent | Legal obligation (KVKK Art.5/2-ç, GDPR Art.6(1)(c)) |
Analytics and advertising cookies rest on your consent alone. The Turkish authority's cookie guidance states that legitimate interest is not available for those two categories, and it is not relied on here.
Developer tools: nothing leaves your browser
Every developer tool on this site runs only in your browser. It does not send your JSON, your token, your text or any other input to a server. There is no server-side code that receives, processes or stores that input.
This is a property of the architecture rather than a promise: the tool engines make no network calls at all. Once a page has loaded you can disconnect and the tools keep working.
Tool pages may display ads. Ads never see what you type; they relate to the page itself.
International transfers
Some of the providers this site depends on are located outside Turkey, which means your data is processed abroad.
| Service | Provider | Location | Data |
|---|---|---|---|
| Site hosting | Netlify | United States | IP address, access logs |
| Email delivery | Resend | United States | Contact form contents |
| Mailbox | Zoho Mail | United States | Messages sent to me |
| Analytics and ads | United States | Analytics and advertising data, if you consented |
The Turkish Personal Data Protection Board has not issued an adequacy decision for the United States. For analytics and advertising the transfer rests on your consent; refuse and those services do not run. For the contact form the transfer is necessary in order to deliver your message.
Retention
- Contact form messages: kept for at most 12 months, then deleted.
- Your cookie choice: re-asked after 365 days; changeable at any time.
- Google Analytics and AdSense data: subject to Google's own retention policies.
- Hosting logs: subject to Netlify's own retention policy.
Your rights
Under KVKK Art.11 and, where it applies to you, the GDPR, you have the right to:
- Learn whether your personal data is processed
- Request information about that processing
- Learn the purpose and whether the data is used accordingly
- Know the third parties to whom it is transferred, in Turkey or abroad
- Request correction of incomplete or inaccurate data
- Request erasure or destruction under KVKK Art.7
- Ask that correction and erasure be notified to third parties the data was transferred to
- Object to a result reached solely by automated analysis that adversely affects you
- Claim compensation for damage arising from unlawful processing
Send requests to info@mustafabaser.net; the "Your Rights and Requests" page explains what to include. A request is answered within thirty days at the latest.
Security and breach notification
Reasonable technical measures are in place: the site is served entirely over HTTPS, the contact form is protected by validation and rate limiting, and the tools are designed so that there is no data to collect in the first place.
If a personal data breach occurs, the Turkish authority is notified within 72 hours in line with Board decision 2019/271, and affected individuals as soon as reasonably possible.
Not directed at children
This site is aimed at software developers and does not offer content directed at children. Personal data is not knowingly collected from children.
Changes to this notice
When this notice changes, the "last updated" date above changes with it. If the purposes of processing change materially, your cookie consent is requested again.
The Turkish version of this notice is the authoritative text. This English translation is provided for convenience, and where the two differ the Turkish text prevails.