Privacy policy

What we collect, and who processes it

• Email list. If you sign up for updates, your email address is stored by our email provider, a third party chosen for its GDPR documentation. We'll name the provider and link to its own privacy policy here as soon as an account is live; today, this list is not yet accepting sign-ups.
• Contact form. The contact form sends the name, email address, subject, and message you enter to a third-party form-processing provider, which delivers it straight to our inbox. That provider is a pipe, not a mailing list: your message is used only to reply to you and isn't added to marketing anything. The provider's name and a link to its policy will be listed here once it's connected.
• Purchases. All payments are handled by Paddle.com Market Limited, our payment provider and Merchant of Record. Paddle collects and processes your payment details, billing address, and email directly; we never see or store your card information. Paddle's own privacy policy governs that data, available at paddle.com/legal/privacy.
• Analytics. For general stats like visitor counts, we use a cookieless analytics tool that doesn't collect personal data (Plausible or Umami, depending on which is active). We don't use Google Analytics. That's the entire reason this site has no cookie banner: there's nothing that needs your consent to run.

Cookies

This site doesn't set cookies of its own. The analytics tool we use is cookieless by design. If that ever changes, this page and the site's cookie behavior will change together, not separately.

How long we keep it

Your email address stays on the list until you unsubscribe, which is one click, any time. Contact form messages are kept only as long as it takes to resolve what you wrote in, then deleted; we're not archiving a support inbox indefinitely. Payment and invoicing records are retained by Paddle for as long as tax and accounting law requires them to, which is out of our hands and set by regulation, not preference.

Your rights

If you're in the EU or UK, GDPR gives you the right to access, correct, delete, or export the data we hold on you, and the right to object to or restrict how it's processed. If you're in Turkey, KVKK (Law No. 6698) gives you equivalent rights under its Article 11: to learn whether your data is processed, request correction or deletion, and object to a result produced solely by automated processing. In practice, exercising any of these is the same step: unsubscribe from the email list yourself with one click, or write to us via /contact for anything else, including a full deletion request. We reply ourselves, there's no support queue to get lost in. If you believe we've mishandled your data, you also have the right to complain to your local data protection authority.

A plain note on this page

This policy is written in plain language by the person who runs this site, not drafted by a law firm. It's accurate to how the site actually works today. If you have a legal question about your data that this page doesn't answer, write to us via /contact and we'll answer directly.