Privacy Policy

1. Data Controller

The data controller is İbrahim Enes Bahadır. For any request or question: hello@enesbahadir.design.

2. Data Collected

Contact form: name, e-mail address, message content, language preference and submission time, stored in a Cloudflare D1 database.

IP address: NEVER stored raw. It is used only transiently as a salted, non-reversible, truncated hash to prevent abuse (spam, brute force); the original IP is discarded.

Analytics: Cloudflare Web Analytics is cookieless — no cookies, no cross-site tracking, aggregate/anonymous statistics only.

3. Purposes & Legal Bases

Responding to your enquiry: KVKK Art. 5/2 and GDPR Art. 6(1)(a) consent, via the form's consent checkbox.

Security and abuse prevention (rate limiting, bot protection, audit logging): KVKK and GDPR Art. 6(1)(f) legitimate interest.

4. Retention

Contact messages are automatically deleted after at most 12 months.

Administrative audit logs are kept for at most 12 months.

Analytics data is retained per Cloudflare's own policy.

5. Transfers & Processors

Hosting, database (D1), storage (KV), e-mail routing, bot protection (Turnstile) and analytics are provided by Cloudflare; data may be processed on Cloudflare's global infrastructure.

Your data is never sold or shared with third parties for marketing.

6. Cookies

The public site uses no marketing or tracking cookies. Only the admin panel sets a technical session cookie (eb_session, httpOnly).

7. Your Rights

Under KVKK Art. 11 and GDPR Arts. 15–22 you have the right to access, rectify, erase or anonymise your data, to object to processing, and to data portability.

To exercise these rights, e-mail hello@enesbahadir.design; your request will be answered within 30 days.

8. Contact & Complaints

For questions: hello@enesbahadir.design. In Turkey you may also lodge a complaint with the Personal Data Protection Authority (KVKK).

9. Changes

This policy may be updated; the current version is published on this page with the update date shown at the top.