Last updated: 20 October 2026
This policy explains what data this website collects, why, and what you can do about it. The short version: the site works without collecting anything about you. Google Analytics runs only if you click Accept in the cookie banner, and you can change your mind at any time.
Who is responsible
This website is run by Alper İskender. For anything about your data, email [email protected].
When you visit the site
The site is hosted on a server rented from DigitalOcean. Like every web server, it briefly records each request: your IP address, the page requested, the date and time, and your browser’s name and version. We use these logs only to deliver the site and to protect it from attacks and abuse, which is our legitimate interest (GDPR Article 6(1)(f)). They are deleted automatically after 14 days.
The site’s fonts and images are stored on our own server, so visiting a page does not contact Google Fonts or any other third party apart from Cloudflare, described next.
Every request to the site passes through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA), which delivers the pages quickly and protects the site against attacks. To do this, Cloudflare processes your IP address, the page requested and technical details of your browser on our behalf. This is our legitimate interest in a fast and secure site (GDPR Article 6(1)(f)). Cloudflare may process this data in the United States; Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework. More in Cloudflare’s privacy policy.
The site is also protected by Wordfence, a security plugin made by Defiant, Inc. (USA) that runs on our own server. It checks each request and login attempt for signs of an attack and blocks attacks. To do this it processes your IP address and the request on our server; we have turned off its option to share attack data with Defiant. Records of blocked requests are deleted after 14 days, and Wordfence keeps a limited number of recent login attempts to detect password guessing. This is our legitimate interest in a secure site (GDPR Article 6(1)(f)).
Cookies
The site uses only the cookies below. The first one is needed to remember your cookie choice for 6 months, so the banner doesn’t ask again on every visit; it holds nothing else. The Google Analytics cookies are set only after you click Accept.
| Cookie | What it does | Kept for |
|---|---|---|
pinicon_consent | Remembers whether you accepted or rejected Google Analytics, so the banner doesn’t ask on every page. | 6 months |
_ga, _ga_… | Google Analytics: tells apart visits and visitors so pages can be counted. Only with your consent. | 2 months |
__cf_bm, cf_clearance | Set by Cloudflare only when its security checks run, to tell real visitors from bots. Needed to protect the site. | 30 minutes (__cf_bm); until the security check expires (cf_clearance) |
People who manage the site also get WordPress and Wordfence login cookies when they sign in. Visitors never sign in, so they don’t get these.
To change or withdraw your choice, click Cookie settings at the bottom of any page, or open the cookie settings here. If you withdraw consent, the Google Analytics cookies are deleted from your browser.
Google Analytics
If you accept, we use Google Analytics to see how many people visit, which pages they read and where visits come from. Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes the data on our behalf.
Google Analytics then receives:
- the pages you view, when, and the page or website you came from;
- your device type, operating system, browser and screen size;
- your approximate location (country and region), worked out from your IP address. For visitors in the EU, Switzerland and the UK, Google states that Google Analytics does not log or store their IP addresses (Google’s explanation);
- which links to Etsy you click.
We have set Google Analytics to collect as little as possible: no advertising features, no Google signals, no personalised ads, no detailed location or device data, and the event data is deleted after 2 months, the shortest period Google allows. We don’t use it to identify you, and we never combine it with other data about you.
The legal basis is your consent (GDPR Article 6(1)(a)). Google may process data in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing adequate protection. More in Google’s privacy policy.
Buying on Etsy
This site doesn’t sell anything itself: the “Buy on Etsy” buttons take you to our shop on Etsy, where checkout and downloads happen. What you enter there is handled under Etsy’s privacy policy. For each order, Etsy shares with us what we need to fulfil it, such as your name, your Etsy username and the items you bought. We use this only to deliver your order and answer your messages.
What we don’t do
- no user accounts, comments, contact forms or newsletters on this site;
- no advertising, no remarketing and no selling or sharing of data;
- no social media buttons or embedded videos that would load content from other companies.
Your rights
You have the right to ask what data we hold about you, and to have it corrected, deleted or restricted, to object to processing based on our legitimate interest, and to receive your data in a portable format. Where we rely on your consent, you can withdraw it at any time; this doesn’t affect what happened before. To use any of these rights, email [email protected].
You can also complain to a data protection authority, for example the one where you live.
Changes to this policy
If we change how the site collects data, we’ll update this page and the date at the top. If the change affects cookies, the cookie banner will ask for your choice again.