Privacy

Who is responsible?

Berkant Üsen is responsible for the processing he determines through this website. For privacy questions or requests, email berkantusen@gmail.com. OpenAI and other providers also process information under their own notices where they operate their services independently.

Visiting and signing in

The site is hosted through OpenAI Sites using Cloudflare infrastructure. Delivery and security can involve your IP address, requested URL, request time, browser information and technical logs. Where sign-in is required, OpenAI authenticates access. Album administration additionally requires the owner's authenticated identity and a password checked by the server. After a successful unlock, the browser receives a secure session cookie that allows the server to recognise the authorised administration session. The cookie is used for access control, not advertising or analytics. Using “Lock studio” ends this administration session.

The purpose is to deliver the requested pages, control access and protect the site. The operator relies on the legitimate interest in running a secure portfolio, under Article 6(1)(f) GDPR. The site does not add advertising trackers, analytics scripts or remotely loaded fonts. Hosting and sign-in services may use their own necessary storage.

The administration cookie, __Host-bu-studio, is valid for up to eight hours. A new successful unlock replaces the previous administration session. Cloudflare D1 stores a hash of the session token, the owner's account identifier, its expiry and a credential version marker. Old session records are removed at the next successful unlock. A counter associated with the owner limits password attempts within 15-minute windows; it is cleared after a successful unlock or reset when a later window begins. This additional access-control mechanism does not store IP addresses. Hosting and provider security logs remain subject to the arrangements described below.

Sending a message

When you submit the contact form, your name, email address, subject and message are sent to FormSubmit, together with the technical information needed for that request, for forwarding to berkantusen@gmail.com. Email delivery has not yet been verified. FormSubmit may present Google reCAPTCHA after submission. The site does not load that service merely because you visit the contact page and does not keep a separate copy of your message in its database.

Berkant Üsen receives and answers correspondence using Gmail, provided by Google. Processing is for replying to your request: Article 6(1)(f) GDPR, or Article 6(1)(b) where the correspondence is necessary for steps you request towards a contract. Providing contact details is voluntary; without an email address a reply cannot be sent. Please avoid confidential or sensitive information in this form.

Tools and storage on your device

Calculator inputs and results are computed in your browser and are not sent to the website’s server. The focus timer saves its settings and session state in your browser’s local storage so it can continue across page visits. This data stays on that device and can be removed by clearing this site’s browser data. If browser storage is unavailable, persistence may not work.

The optional browser game runs on your device. Controls and scores are not sent to the website's server, and the game does not save a score after the page is closed.

The “Reduce motion” setting is stored in session storage for the current tab session. It is not sent to the website’s server. The site also respects your operating system’s reduced-motion preference.

Photographs and albums

Only the owner can create albums and upload photographs. Album text, publication settings and ownership records are stored in Cloudflare D1; image files are stored in Cloudflare R2. Published previews are generated without the original file’s EXIF metadata. The unchanged original remains restricted unless the owner enables its download. An original may contain camera, time or location metadata.

Images and album records remain until the owner removes them. If you appear in a photograph and have a privacy or rights concern, contact Berkant Üsen with the album or image address. Publication must respect the rights of the people depicted; access controls do not replace that requirement.

Recipients, retention and international processing

Relevant service recipients are OpenAI Sites, Cloudflare, FormSubmit and Google for the functions described above. FormSubmit states that it retains submitted form data for 30 days. Correspondence in the recipient’s mailbox is kept for as long as needed to resolve the inquiry, with longer retention only where legal obligations or the handling of legal claims require it. Hosting, sign-in logs and provider backups follow the providers’ retention arrangements; this site does not promise a fixed deletion period for those systems.

These providers may process data outside the European Economic Area. OpenAI describes adequacy decisions and standard contractual clauses; Cloudflare describes the EU–US Data Privacy Framework and contractual safeguards; Google explains its transfer arrangements in its privacy information. FormSubmit’s published notice does not specify processing locations or international transfer safeguards. The provider links below explain their published practices; they do not establish that every arrangement for this site has been independently verified.

Your rights

Subject to the applicable conditions, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. Where consent applies, you may withdraw it prospectively. You may complain to a data protection supervisory authority. This site makes no automated decisions with legal or similarly significant effects.

External links

LinkedIn and other external sites receive information when you follow their links. Their privacy notices govern those visits.