Privacy.
This site uses no cookies, does not track visitors and runs no analytics. The only flow of personal data goes through the contact form. Every statement below describes the site's measured behaviour.
In short
- Cookies → none
- Analytics / tracking → none
- Data collected → the form only: name, email, message
- Storage → no database on this site; the message is delivered as email
- Third parties → Cloudflare (hosting) · Web3Forms (form delivery) · hCaptcha (only on form interaction)
What data we process
Only what you type into the contact form yourself: your name, your email address and the text of your message. Unless you fill in the form, you leave no personal data on this site. The site never asks for your location, phone number, date of birth or anything similar, and reads nothing of that kind from your browser.
Your message is not written to a database on this site. The request goes to a Cloudflare Worker running server-side; the Worker forwards the message to the Web3Forms service, and Web3Forms delivers it as an email to murat.tunali@murattunali.com.tr. In other words, your message lives in a mailbox, not in a user database.
Cookies and browser storage
This site sets no cookies. Measured: document.cookie stays empty even after interacting with the form. localStorage is not used. That is also why there is no cookie consent banner — there is no cookie to consent to.
The one exception is a technical session key: mt.intro in sessionStorage. Its job is to stop the intro animation replaying over and over in the same tab. It carries no identity, is never sent to a server, and is deleted when you close the tab.
Third parties
Hosting runs on Cloudflare. Like any web server, Cloudflare keeps technical logs; these can include IP address, browser information and the address requested, and are processed for security and service continuity. We do not read those logs to build personal profiles.
Form submissions are delivered through Web3Forms (app.web3forms.com). The relay happens server-side; your browser never makes a direct request to Web3Forms.
The moment you touch a form field, hCaptcha loads (Intuition Machines, Inc.). Its job is to filter out automated submissions, and to do so it processes IP address and browser signals. hCaptcha does NOT load on page open — only on form interaction. So if you read the contact page and leave, hCaptcha never runs.
Fonts are served from this site's own server. No request is made to Google Fonts or any comparable font service.
Retention
Form messages are kept in the mailbox for as long as the correspondence requires. They are deleted when you ask for them to be deleted. Server log retention follows Cloudflare's own policy.
Your rights
Under Article 11 of Turkey's KVKK and Articles 15–22 of the GDPR you have the right to learn whether data about you is being processed, to request information if it is, to have it corrected or erased, and to object to the processing.
To exercise any of these rights, an email to murat.tunali@murattunali.com.tr is enough. Nothing beyond identity verification is required, and the request is free of charge.
Changes
This text describes what the site actually does; if the behaviour changes, the text changes with it. When it does, the update date at the top of the page moves forward.