Privacy

Data controller

Ramazan Tolgay — independent email deliverability consultant, Denizli, Türkiye — is the data controller. For any request under this policy, write to hello@ramazantolgay.com.

What this site collects

Domain checker

The domain you enter is sent to public DNS resolvers to read its records. Nothing is stored, logged, or linked to you.

Contact form

Sends your email address, the domain you name, and your message. It reaches me as email through my own mail server and stays in my mailbox — no third-party email provider, no database, no mailing list.

Security and abuse prevention

Your IP address is processed briefly to rate-limit requests and run a Cloudflare Turnstile bot check. Turnstile reads browser signals — user agent, screen size, timing, a JavaScript challenge — to separate humans from bots, and may set a short-lived cf_clearance cookie. It is used for that purpose only.

Analytics

Vercel Web Analytics and Speed Insights measure traffic without cookies. Visitors are counted through a hash derived from the request, discarded within 24 hours. The result is aggregate: no persistent identifier, no cross-site tracking. More on cookies.

Lawful basis (GDPR Art. 6)

• Contact form — steps taken at your request and replying to you (Art. 6(1)(b), (f)).
• Rate limiting and bot checks — legitimate interest in keeping the service available and abuse-free (Art. 6(1)(f)).
• Aggregate analytics — legitimate interest in measuring use without identifying anyone (Art. 6(1)(f)).

Processors

• Vercel — hosting and cookieless analytics.
• Cloudflare — the Turnstile bot check.

Contact-form email is delivered by my own mail server, not a third party. The two providers above may process data on servers in the United States, outside Türkiye and the EEA; those transfers rely on the safeguards in each provider's data-processing terms, such as the EU Standard Contractual Clauses.

Retention

Contact messages stay in my mailbox only as long as the conversation and any resulting work need them, then they're deleted. Domain checks are never stored. Rate-limit data is transient. Hosting and analytics data follow the retention set by the processors above.

Your rights

Under the GDPR you can access, correct, delete, restrict, object to, or receive a copy of your data, withdraw consent, and complain to your local supervisory authority.

If you're in Türkiye, Article 11 of the KVKK gives you the equivalent rights. This page also serves as the controller's disclosure (aydınlatma) under Article 10.

To exercise any right, email hello@ramazantolgay.com. I respond within the statutory deadline.

Changes

If this policy changes, the date at the top changes with it.