• If I had asked people what they wanted, they would have said faster horses. -Henry Ford

Privacy Policy

Privacy Policy

Effective date: October 12, 2026

This Privacy Policy explains how personal data is handled on this portfolio website (the “website”) of Muhammet Cobanoglu (“I”, “me”). I am responsible for the website and act as the data controller. I am an individual based in Seattle, Washington, United States.

1. How to contact me about your data

For any question or request about this policy or your personal data, please use the contact form. Mention the name and email address you used, so that I can find your data. I do not publish a personal email address or phone number on this website.

2. What data is processed

  • Contact form: full name, email address, optional phone number and company, the purpose of your request and your message.
  • Resume request: full name, work email, company or organization, your role, the purpose of the request, and optionally a phone number, a position or project and a message.
  • Spam protection: a hidden form field, a time-based token, and a short-lived counter of submissions per visitor (one hour) based on a value derived from your IP address. It is not used for anything else.
  • Technical server data: like most websites, the servers of the hosting provider automatically record technical data such as IP address, date and time, requested page and browser type, to keep the website secure and running. I do not use these logs to identify visitors.
  • Analytics (only if you consent): Google Analytics 4, provided through the Google Site Kit plugin, records pages viewed, approximate location (country or city level), device and browser type, referring website and cookie identifiers. Nothing is sent to Google for analytics before you accept.
  • Your choices: your cookie choice, and your language and layout preferences, are stored in your browser so that the website can remember them. See the Cookie Policy.

3. Why the data is used and on what legal basis

  • Answering your message or sending the resume you requested: to act on your request and in my legitimate interest in replying to people who contact me.
  • Security, spam prevention and technical operation: my legitimate interest in keeping the website safe and working.
  • Analytics: your consent, which you can withdraw at any time through Cookie settings.

Where the Turkish Personal Data Protection Law (KVKK, Law No. 6698) applies, the processing relies on the equivalent conditions in Article 5 of that law, including your explicit consent for analytics and the data controller’s legitimate interests. Your details are not used for advertising, profiling or newsletters, and they are not sold.

4. Who receives the data

Data is shared only with the service providers needed to run the website: the web hosting provider, the email service that delivers submitted messages to me, and, only after you consent, Google (analytics). Data may also be disclosed where required by law.

5. International transfers

I am based in the United States, and the providers above may process data in other countries, including the United States. Where required, these transfers rely on the safeguards offered by those providers, such as standard contractual clauses or recognized data-transfer frameworks.

6. How long data is kept

  • Messages and resume requests: kept as long as needed to answer them and follow up, then deleted. You can ask for earlier deletion at any time.
  • Spam-protection counter: about one hour.
  • Analytics data: for the retention period configured in the analytics account. Analytics cookies expire as listed in the Cookie Policy.
  • Server logs: according to the hosting provider’s own retention schedule.

7. Your rights

Depending on where you live (for example under the EU or UK GDPR, the Turkish KVKK, or California privacy law), you may have the right to access your data, correct it, delete it, restrict or object to its use, receive a copy of it, and withdraw your consent at any time without affecting processing that took place before. You may also complain to your data protection authority (in Turkey, the Personal Data Protection Board; in the EU or UK, your national supervisory authority).

California residents: I do not sell personal information and do not share it for cross-context behavioral advertising. To exercise any right, send a request through the contact form. I aim to respond within 30 days.

8. Cookies

The website uses no advertising cookies. Essential storage and optional analytics cookies are explained in the Cookie Policy. You can change your choice at any time through Cookie settings.

9. Security

Administrative and technical measures are used to protect submitted data, including encrypted connections (HTTPS), input validation, rate limiting and restricted access to the administration area. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

10. Children

This website is not intended for children under 16, and personal data from children is not knowingly collected.

11. Links to other websites

The pages contain outbound links, such as to LinkedIn. Those websites follow their own privacy policies once you click a link.

12. Changes to this policy

This policy may be updated when the website or the law changes. The effective date above shows the latest revision.