This policy describes what actually happens on this site. It was last checked against the site’s own behaviour on 22 September 2026.
Thank you for reading this post, don't forget to subscribe!Who we are
This site is a personal blog at https://kemal.yaylali.uk, run by Kemal Yaylalı. Questions about this policy can be sent through the contact page.
Cookies and your choice
A consent banner appears when you first arrive. It runs on this site’s own server, stores your choice on your own device, and sends nothing to an outside consent service. You can change your decision at any time through the preferences control on the banner.
Only two cookies are set when you simply read the site. One is cf_clearance, set by Cloudflare to tell real visitors apart from automated traffic; it is required for the site to be served securely. The other belongs to the advertising setup described below, and your consent choice governs how it may be used. The full list is on the cookie policy page.
Comments
Comments are open on this site. When you leave a comment, the site stores the name, email address and website you type into the form, together with your IP address and your browser’s user agent string. The IP address and user agent are kept to help detect spam.
Your name and comment are published publicly. Your email address is not published, but it is stored and is visible to the site administrator. Comments and their metadata are retained indefinitely, so that follow-up comments from the same person can be recognised and approved automatically.
If you leave a comment, you may opt in to saving your name, email address and website in cookies in your own browser, so you do not have to type them again. Those cookies last one year and stay on your device.
You can ask for your comments and the data attached to them to be exported or erased — see Your rights below.
Analytics
Visitor statistics are collected with Umami, which runs on the same server as this site. Nothing is sent to a third-party analytics company.
- It sets no cookies and stores nothing on your device.
- It does not store your IP address. Your approximate country, region and city are derived from it and the address itself is discarded.
- It records the page you viewed, the site that referred you, and your browser, operating system, device type, screen size and language.
- Visits are grouped into a session using a value derived from your IP address and browser, which cannot be turned back into either.
Google Analytics was removed from this site in September 2026 and is no longer used.
Advertising
This site is in the process of applying to Google AdSense. The AdSense code is present so that Google can review it, but no advertisements are being served yet.
When advertising does begin, Google and its partners may set cookies in your browser. Your answer to the consent banner is passed to Google: if you decline, advertising is limited to non-personalised ads and your data is not used to build an advertising profile. You can review your Google ad settings at adssettings.google.com, and read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.
Newsletter and notifications
Brevo handles the newsletter. Your email address is sent to Brevo only if you subscribe, and you can unsubscribe from any email you receive. See Brevo’s privacy policy. Brevo’s visitor-tracking script was switched off in September 2026 and no longer runs here.
Optional browser push notifications are delivered through WonderPush, the provider behind Brevo’s push service. It sets no cookies. Your browser will ask before any notification is sent, and nothing is registered unless you agree; you can withdraw the permission in your browser settings at any time.
Other third parties
- Cloudflare delivers and protects this site and sets the
cf_clearancecookie described above. It is not used to track you across other sites. - Buy Me a Coffee and Ko-fi provide the support buttons. They receive data only if you use them.
- Google Search Console reports which searches lead here. It reads data on Google’s side and places nothing on your device.
Embedded content from X (Twitter) was removed in September 2026. Articles may still embed other content such as videos; where they do, that content behaves as if you had visited the other site directly, and that site may collect data about you and set its own cookies.
Media
If you upload images to this site, avoid images with embedded location data (EXIF GPS): visitors can download them and read that data.
How long data is kept
- Comments and their metadata, including the IP address: indefinitely, until you ask for erasure.
- Newsletter subscriptions: until you unsubscribe.
- Analytics: aggregated visit records, with no IP address attached.
- Your consent choice: stored on your own device, not on the server.
- Accounts: if you register, the information in your profile, until the account is deleted.
Your rights
If you are in the EEA or the UK, you can ask for a copy of the personal data held about you, ask for it to be corrected or erased, object to its processing, or complain to your national data protection authority. If you have commented or subscribed, you can request an export or an erasure through the contact page, and it will be acted on. This does not cover data that has to be kept for legal or security reasons.
Where your data is sent
The site and its analytics run on a server in Europe. Comment spam may be checked by an automated service. Email addresses given to the newsletter are held by Brevo. If you request a password reset, your IP address is included in the reset email.
Last updated: 22 September 2026.