Privacy notice

Last updated 10 October 2026

This notice explains what personal data this website handles, why, and what you can do about it. It is written for the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Who is responsible for your data

I am Hamza Tekin, a software engineer based in Nottingham, UK. Under data protection law I am the controller of the personal data described here. You can contact me at hello@hamzatekin.dev.

Visiting the site

When your browser asks for a page, it sends some information automatically, including your IP address, the address of the page and your browser's user agent. Cloudflare hosts the site and uses this information to deliver pages and protect the site from attacks. Cloudflare may also ask your browser to report failed connections to it (Network Error Logging), which helps it find network faults.

I do not see these request logs. The Cloudflare dashboard shows me totals only, such as requests per day and the countries they came from. Cloudflare keeps its logs as described in the Cloudflare privacy policy.

Lawful basis: legitimate interests, in running a website that works and stays secure.

Analytics

I use Cloudflare Web Analytics to see which pages people read and how they found the site, so I can tell what is useful and fix what is not. Cloudflare already hosts the site, so no other company is involved. I do not use the data for advertising or combine it with anything else.

For each page you view, a small script from Cloudflare sends:

• the address of the page, and of the site that linked you here if there was one
• how long the page took to load and display
• a random ID for that one page view, created in your browser and not saved

Cloudflare works out your country, browser, operating system and device type from the request. It discards your IP address at the nearest data centre and does not store it. There is no visitor ID: the script uses no cookies or local storage and does not fingerprint your device, so nothing links one page view to another.

I only see totals in the Cloudflare dashboard, and I make no decisions about individual visitors.

Lawful basis: legitimate interests, in understanding how the site is used so I can improve it.

Storage and access on your device: the script reads the page address and load timings from your browser, which counts as accessing information on your device. PECR allows this without consent when it is only used to produce statistics for improving the site, you are told about it, and you can object for free (Schedule A1, paragraph 5). Cloudflare processes the data on my behalf, as my processor. Switching analytics off is how you object.

How long it is kept: Cloudflare keeps the statistics for the limited period it sets for Web Analytics. I do not export or copy them.

Earlier analytics: until 10 October 2026 the site used Umami, running on my own server in Finland. I deleted that data when I switched to Cloudflare.

Emailing me

If you email hello@hamzatekin.dev, I receive your email address, your name if you include it, and whatever you write or attach. I use it to reply to you and, if we work together, to arrange that work. Cloudflare Email Routing receives mail for hamzatekin.dev and forwards it to my personal inbox.

Lawful basis: legitimate interests, in replying to messages. If you contact me about a job or a project, it is also to take steps you have asked for before we enter a contract.

How long I keep it: up to two years after our last exchange, unless the law requires me to keep it longer, for example tax records for paid work.

Cookies and similar technologies

This site does not set any cookies. The only things it reads from or saves in your browser are:

• the page address and load timings, read by the analytics script described above
• an analytics-off entry in local storage, saved only if you switch analytics off. Each page checks for it so it can respect your choice. It stays until you switch analytics back on or clear this site's data in your browser.

Cloudflare may also save a Network Error Logging policy in your browser so it can report connection failures.

Who else handles your data

• Cloudflare, Inc. hosts the site, provides DNS, runs the analytics and routes email. It acts as my processor under its data processing addendum.
• My email provider stores the messages you send me.

I do not sell personal data or share it for advertising. I would only disclose it to anyone else if the law required me to.

Transfers outside the UK

Cloudflare runs a global network and is based in the United States. It is certified under the UK Extension to the EU-US Data Privacy Framework, and its data processing addendum includes the ICO's International Data Transfer Addendum as a fallback. My email provider may store messages outside the UK, under the transfer safeguards in its own terms.

Your rights

You can ask me to:

• give you a copy of the personal data I hold about you
• correct it if it is wrong
• delete it
• limit how I use it
• stop using it, as you can object at any time to anything I do on the basis of legitimate interests
• give it to you or another organisation in a portable format, where that applies

Email hello@hamzatekin.dev. It is free, and I will reply within one month. Analytics records hold nothing that shows which visits were yours, so I cannot look them up, but I will tell you what I can do.

Complaints

If you are unhappy with how I have handled your data, email me first. I will acknowledge your complaint within 30 days, look into it and tell you the outcome.

You can also complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. If you live in the EU or EEA, you can complain to the data protection authority in your country.

Changes to this notice

When anything here changes, I will update this page and the date at the top.