Privacy
Last updated: 7 October 2026 · Türkçe (KVKK Aydınlatma Metni)
What personal data berk.kim processes, why, who receives it and what your rights are. This notice is given under Article 10 of Turkey's Personal Data Protection Law No. 6698 (KVKK) and Article 13 of the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller is Berk Lögün, the individual who runs this site. Contact: berk@berk.kim.
In short
- There is no advertising, tracking pixel or tracking cookie on this site. Visits are counted with Cloudflare Web Analytics, which uses no cookies.
- If you only read the pages, the only personal data involved is the technical data every web request carries (your IP address and browser details). The hosting provider and the font service receive it.
- If you use the chat, what you write is forwarded to Berk's Telegram account.
Visiting the site
Hosting. Cloudflare, Inc. hosts and serves the site. To deliver pages and protect the site against abuse, Cloudflare processes your IP address and the details of each request (the address requested, the time and your browser's user agent). When you open berk.kim/ without choosing a language, the country of your IP address is used once to pick one; it is not stored.
Visit statistics. Visits are counted with Cloudflare Web Analytics. A small script reports the page you viewed, the page that sent you here, your browser, operating system and device type, your country and how fast the page loaded. Cloudflare states that it uses no cookies, no browser storage and no fingerprinting, and does not follow you across sites. Berk sees only aggregated numbers.
Technical logs. The server records technical events, such as "a chat session started" or an error code, to keep the site working. These logs can include request details such as the address requested, the time and the country a request came from. They never include the content of your messages. Cloudflare deletes them automatically after a few days.
Fonts. The typefaces are loaded from Google Fonts (Google LLC). Your browser connects to Google's servers to fetch them, so Google receives your IP address and browser details. See Google's privacy policy.
GitHub. The contribution count and the garden are fetched by the server from Berk's public GitHub profile. Your browser does not contact GitHub, and nothing about you is sent there.
Using the chat
What is processed: the name you enter, the email address you enter so Berk can reply after you have left (the field appears while he is offline; both are optional), the messages you write and anything you choose to include in them. Please don't send sensitive information (for example about health) through the chat.
How: each message is forwarded through the Telegram Bot API (Telegram Messenger Inc.) to Berk's own Telegram account, together with the name and email address you entered, where he reads and answers it. If you gave an email address, he may answer by email. Your conversation is labelled with a random six-character id, not with your identity.
Spam protection: the first time you open the chat, Cloudflare Turnstile checks that you are a person and not a bot. It processes your IP address and characteristics of your browser and device, and your IP address is passed to Cloudflare again when the check is verified. Turnstile is loaded only when you open the chat. See Cloudflare's Turnstile privacy addendum.
How long it is kept:
- In your browser: the conversation and a session token are kept in this tab's session storage and disappear when you close the tab. The session token expires after 6 hours.
- On the server: the conversation id and the name and email address you entered are held only while your page is connected, and deleted when you leave. Your session token, which carries them, is signed so they can't be altered.
- In Telegram: messages stay in Berk's Telegram account until he deletes them.
Cookies and browser storage
The site uses one cookie and the browser's session storage, all for things you ask for. Web Analytics stores nothing in your browser. There is nothing optional to consent to, so there is no cookie banner.
| Name | Type | Purpose | Duration |
|---|---|---|---|
lang | Cookie (preference) | Set only when you pick a language from the list, so that berk.kim/ opens in that language next time. | 1 year |
chat.token, chat.log | Session storage (necessary) | Keep the chat session and conversation you started in this tab. | Until you close the tab |
Cloudflare Turnstile runs in its own frame from challenges.cloudflare.com when you open the chat, under Cloudflare's addendum linked above.
Legal bases
- GDPR: Article 6(1)(f), legitimate interests: delivering and securing the site, counting visits, preventing spam and replying to messages you send. When your message is about a possible collaboration or job, Article 6(1)(b), steps taken at your request before entering into a contract.
- KVKK: Article 5(2)(f), legitimate interest, for the same purposes, and Article 5(2)(c), where the processing is directly related to setting up a contract. The data is collected by automated means through this website.
Recipients and transfers abroad
- Cloudflare, Inc.: hosting, security, Turnstile and visit statistics. Global network, including the United States.
- Google LLC: fonts. United States and other countries.
- Telegram Messenger Inc.: chat delivery. Servers outside Turkey and the EU.
Personal data is therefore transferred outside Turkey and, for visitors in the EU, outside the European Economic Area. It is not shared with anyone else, not sold, and not used for profiling or automated decisions.
Your rights
Under the GDPR you can ask for access to your data, its correction or erasure, restriction of processing and data portability, and you can object to processing based on legitimate interests. You can also complain to the data protection authority in your country.
Under Article 11 of the KVKK you can learn whether your data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties in Turkey or abroad it is transferred to; ask for incomplete or incorrect data to be corrected; ask for it to be deleted or destroyed under Article 7; ask for third parties to be notified of a correction or deletion; object to a result against you that comes solely from automated analysis; and claim compensation for damage caused by unlawful processing. You can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) after first applying to the controller.
To use any of these rights, email berk@berk.kim. Include enough detail to find your conversation, such as the name you used or roughly when you wrote. Requests are answered free of charge within 30 days.
Changes
This notice is updated whenever the site starts processing personal data differently. The date at the top shows the latest version.