Legal · Privacy
Privacy and cookie policy
Last updated: 12 October 2026
In short
This site uses Google Analytics 4 (GA4) for visit statistics. Analytics cookies are set only if you allow them in the consent panel. The site shows no ads and has no forms or accounts. You can change your choice at any time with the Cookie preferences button at the bottom of every page.
Data controller
Kaan Çetintaş, Istanbul, Türkiye. Contact: kaan.ctntas@gmail.com. This site falls under the Turkish Personal Data Protection Law No. 6698 (KVKK).
Google Analytics 4 and Consent Mode v2
GA4 is a measurement service provided by Google. The site uses Google Consent Mode v2 and starts every visitor, in every region, with all permissions set to denied.
- Before you choose, or if you reject: no cookies are set and no identifier is stored in your browser. Google receives only limited cookieless signals without identifiers (that a page loaded, the consent state, time, browser type and similar). Google may use them for aggregate modelling.
- If you allow analytics: GA4 cookies are set and your visit is measured as a session.
- Advertising permission (off by default): the site has no ads and no ad tags. This permission only lets the advertising measurement features of Google Analytics (such as Google signals) work. The Accept button turns it on as well; use Settings to allow analytics only.
Ads data redaction is on, query strings are stripped from measured page addresses and no tracking parameters are added to links.
What is collected
- The page address (without query strings) and title, and the referring address,
- Browser, operating system, device type, screen size and language,
- Approximate location (country and city) derived from your IP address. According to Google, GA4 does not store IP addresses,
- Session duration, scroll depth and these interactions: CV download, contact link clicks (email, WhatsApp, LinkedIn, GitHub), opening a case page, outbound link clicks, language and view changes, using a before/after comparison.
Your name, email address or message content is never sent to GA4. I do not use this data to identify or follow individual visitors; I only look at aggregate numbers to see which content is useful.
Cookies
Set only if you allow analytics.
| Cookie | Provider | Purpose | Lifetime |
|---|---|---|---|
_ga | Distinguishes visitors with a random ID | 2 years | |
_ga_DP8EJ99JZN | Keeps session state | 2 years |
Legal basis, retention and transfer
- Legal basis: analytics measurement and cookies rely on your explicit consent (KVKK art. 5/1). Not consenting does not limit any part of the site.
- Retention: event-level data in GA4 is deleted automatically after 14 months. Aggregate report totals may remain after that and cannot be linked to a person.
- Processor: Google processes GA4 data on my behalf and on my instructions.
- International transfer: Google's servers are located outside Türkiye, mainly in the United States, so analytics data is transferred abroad. This transfer falls under KVKK art. 9.
Withdrawing consent
Use the Cookie preferences button at the bottom of any page to reopen the panel and switch permissions off; the new choice applies immediately. Clearing site data in your browser also removes the saved choice and the GA4 cookies, and the panel will ask again on your next visit. Google also offers a Google Analytics opt-out add-on.
What stays in your browser
These small entries live only in your browser and are never sent to me or to any server. They hold no personal data.
| Key | Where | Purpose | Lifetime |
|---|---|---|---|
shoko-consent | localStorage | Your cookie choice, its version and date | Until you change or clear it |
shoko-mode | localStorage | Your Exhibit or Index view preference | Until you clear it |
shoko-intro | sessionStorage | Plays the opening animation once per session | Cleared when the tab closes |
shoko-cut | sessionStorage | Continues the page transition animation | Cleared when the tab closes |
You can remove them at any time by clearing site data in your browser; the site works fully without them.
Server logs
The hosting provider may keep standard access logs to run the site and protect it from abuse: IP address, date and time, requested address, browser details. I do not use these logs to identify or profile anyone.
When you write to me
The message and contact details you send by email, WhatsApp or LinkedIn are used only to reply and to run the conversation. They are never sold or added to a marketing list. They are processed to set up a possible working relationship and on legitimate interest (KVKK art. 5/2-c and 5/2-f), kept as long as that purpose needs, and deleted when you ask. Email and messaging providers may store them on servers outside Türkiye.
External links
LinkedIn, GitHub, WhatsApp and the client sites linked from case pages have their own privacy policies, which apply once you follow those links.
Your rights
Under KVKK art. 11 you can ask whether your data is processed, request information about it, learn its purpose and recipients, ask for correction or deletion and for those changes to be passed on, object to an adverse result from purely automated analysis, and claim compensation for unlawful processing. Send questions and requests to kaan.ctntas@gmail.com; they are answered free of charge within thirty days (KVKK art. 13). You may also complain to the Turkish Personal Data Protection Authority. The full Turkish notice is at KVKK aydınlatma metni.