Privacy & cookies

This is a personal portfolio site. There is no sign-up, no form and nothing to buy. Below is a plain account of what gets collected and where.

Who is responsible

I own this site and I am responsible for the data: İlyas Saltay. You can write to me about anything here at m.ilyassaltay@gmail.com.

Visit measurement

I use Google Analytics to see which pages get read. It runs only if you accept it in the notice at the bottom of the page; until you do, no measurement cookie is written to your browser. Once accepted, what is collected is the pages you visit, an approximate location at city level, your device and browser, and the link that brought you here. IP addresses are processed in anonymised form. Your name, your email or anything that identifies you directly is not part of this.

Ad measurement

I use the Meta Pixel to see who my ads on Instagram and Facebook bring to the site. It too loads only if you accept in the same notice; until you do, the pixel is not loaded, no measurement data goes to Meta and no pixel cookie is written to your browser. Once accepted, Meta receives the address of the page you open, your browser and device details, your IP address and an identifier stored in your browser; if you are signed in to Facebook or Instagram in the same browser, Meta may match the visit to your account. This data is processed on Meta's servers outside Türkiye under Meta's own privacy policy. You can also turn this use off in the ad preferences of your Facebook or Instagram account.

Your choice is stored in your own browser and applies to both kinds of measurement. If you change your mind, clearing this site's data in your browser brings the notice back and lets you choose again.

My own visit counter

Independently of Google Analytics, a simple counter runs on the site's own server and uses no cookies. It records only this much: the day, the path of the page opened, the domain you arrived from, whether the device is a phone or a computer, the browser language and whether a WhatsApp, CV, demo or email link was clicked. To count daily unique visitors, the IP address and browser signature are mixed with a salt that is specific to that day and expires the next, producing an irreversible digest; the IP address itself is never written anywhere. The records live outside the web root, in daily files only I can read, and are not passed to any third party. Because the counter processes no personal data it asks for no consent; declining cookies does not affect it.

YouTube and Instagram

The channel section on the English home page embeds my YouTube videos. When that section reaches your screen the player loads from YouTube's servers, and at that point YouTube sees your IP address and browser details; if you play a video it may also write its own cookies. That is governed by YouTube's own privacy policy. Instagram is only linked, not embedded: once you follow a link to my account, Instagram's own privacy policy applies. The Turkish pages embed neither YouTube nor Instagram.

Server logs

The site runs on a web server which, as every server does, keeps access logs for security and error tracking. These are technical records and are not used for marketing.

External links

The site links out to WhatsApp, LinkedIn, GitHub, Instagram, YouTube and to client sites. Once you follow one of those links the rules of that destination apply; what happens to your data there is not something I control.

Your rights

Under Turkish data protection law (KVKK, law no. 6698) you may ask whether your data is being processed and request that it be corrected or deleted. Write to the address above and I will get back to you.

← Back to the home page