Last updated: March 14, 2026
Overview
This website, kemalcodes.com, is a personal blog about software development and AI tools. This privacy policy explains what data is collected when you visit this site and how it is used.
The short version: We only collect analytics data, and only if you give consent. We do not collect your name, email, or any personal account information. We do not sell any data to anyone.
Data Controller
The data controller for this website is the site operator, reachable via the contact methods listed at the bottom of this page.
What Data We Collect
Analytics (Only With Your Consent)
We use Google Analytics 4 to understand how visitors use this site. This data is collected only after you click “Accept” on the cookie consent banner.
If you click “Reject” or ignore the banner, no analytics data is collected.
When you consent, Google Analytics collects:
- Pages you visit and how long you stay
- Your approximate location (country/city level — not your exact location)
- Device type, browser, and operating system
- How you found this site (search engine, direct link, social media)
We have enabled IP anonymization, which means your full IP address is never stored by Google Analytics.
Google Analytics sets cookies on your device to distinguish between visitors. These cookies are:
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes visitors | 2 years |
_ga_* | Maintains session state | 2 years |
You can opt out of Google Analytics at any time by:
- Clearing your cookies and clicking “Reject” on the banner when it reappears
- Installing the Google Analytics Opt-out Browser Add-on
- Using your browser’s “Do Not Track” setting
For more information, see Google’s Privacy Policy.
Cookie Consent Preference
When you click “Accept” or “Reject” on the cookie banner, your choice is saved in your browser’s local storage (not as a cookie). This is so we don’t ask you again on every page. This data never leaves your device.
Server Logs
Our web server (Nginx) automatically logs basic connection data:
- IP address
- Date and time of request
- Pages requested
- Browser user agent string
These logs are used only for server maintenance and security (detecting attacks, fixing errors). They are not combined with any other data and are periodically deleted.
What We Do NOT Collect
- We do not have user accounts or registration
- We do not collect names, email addresses, or phone numbers
- We do not use tracking pixels or fingerprinting
- We do not collect payment information
- We do not have a newsletter signup (currently)
- We do not use social media tracking widgets
Affiliate Links
Some articles contain affiliate links to products and services. When you click an affiliate link:
- The affiliate partner (e.g., Cursor, DigitalOcean) may set their own cookies on their website
- We may receive a commission if you make a purchase
- This happens on the partner’s website, not ours — their privacy policy applies there
We clearly mark articles that contain affiliate links. See our Disclaimer for more details.
Legal Basis for Processing (GDPR)
If you are in the EU/EEA, we process data under the following legal bases:
| Data | Legal Basis | Details |
|---|---|---|
| Analytics (Google Analytics) | Consent (Art. 6(1)(a) GDPR) | Only collected after you click “Accept” |
| Server logs | Legitimate interest (Art. 6(1)(f) GDPR) | Necessary for security and server operation |
| Cookie consent preference | Legitimate interest (Art. 6(1)(f) GDPR) | Stored locally to respect your choice |
Your Rights
For All Visitors
You can:
- Reject cookies — click “Reject” on the consent banner to prevent all analytics tracking
- Clear your data — clear your browser cookies and local storage at any time
- Opt out of Google Analytics — use the browser add-on
For EU/EEA Residents (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access — request what data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data (“right to be forgotten”)
- Restriction — request we limit how we process your data
- Data portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — withdraw your analytics consent at any time by clearing cookies
To exercise any of these rights, contact us using the methods below. We will respond within 30 days.
You also have the right to lodge a complaint with a data protection supervisory authority.
For California Residents (CCPA)
Under the California Consumer Privacy Act, you have the right to:
- Know what personal information we collect
- Request deletion of your personal information
- Opt out of the sale of personal information — we do not sell any personal information
Third-Party Services
| Service | Purpose | Their Privacy Policy |
|---|---|---|
| Google Analytics | Website analytics | Google Privacy Policy |
| GitHub | Code hosting and deployment | GitHub Privacy Statement |
| Hetzner | Web server hosting | Hetzner Privacy Policy |
Data Transfers
Google Analytics data may be transferred to and processed in the United States. Google participates in the EU-U.S. Data Privacy Framework. For more information, see Google’s data transfer information.
Data Retention
- Analytics data: Retained for 14 months in Google Analytics, then automatically deleted
- Server logs: Retained for a maximum of 90 days, then deleted
- Cookie consent preference: Stored in your browser until you clear local storage
Children’s Privacy
This website is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes to This Policy
We may update this privacy policy when we add new features or services. Changes will be posted on this page with an updated revision date. Significant changes will be clearly noted.
Contact
If you have questions about this privacy policy or want to exercise your data rights:
- X / Twitter: @kemal_codes
- GitHub: kemalcodes