Privacy Policy

1. Controller

The controller is Deniz YILDIRIM. Privacy enquiries may be sent to deniz@nexcorn.com. The serviceable postal address is taken from the legal configuration shown above.

2. Hosting, server logs and international processing

The website is operated on Contabo VPS infrastructure in the European Union. Contabo is the infrastructure and web-hosting provider used to operate PWODY. Domain registration and DNS are also provided by Contabo. Normal web-server operation may process IP addresses, request timestamps, requested resources, HTTP metadata, browser, user-agent or referrer information where transmitted, and technical or security logs.

The confirmed web-hosting region is the European Union; no specific city, datacenter or physical server location is claimed. Contabo makes a GDPR data-processing agreement available for VPS services through its customer panel.

Logs are retained only for as long as technically or for security necessary; no precise period is stated where none has been operationally verified.

Contabo Data Processing Agreement guidance

3. Contact form

The form accepts name, surname, email, subject and message, plus optional phone and website fields. These details are used only to answer enquiries, communicate about professional opportunities, handle potential contractual or pre-contractual communications where applicable, and prevent abuse or security incidents.

Where a message concerns entering into or performing a professional engagement, Article 6(1)(b) GDPR may apply. Other legitimate professional enquiries and security handling may rely on Article 6(1)(f) GDPR where appropriate. Submission is not treated as marketing consent.

4. Email delivery

Contact submissions are delivered server-side to ask.me@pwody.com. The mailbox uses Namecheap Shared Hosting / cPanel email infrastructure associated with the pwody.com cPanel email account. Submitted message content and sender details—including name, email, and any optional phone or website information—therefore pass through that email infrastructure.

This email processing is separate from the Contabo EU web-hosting layer and may involve provider-specific processing outside the EEA where applicable. Namecheap publishes a Data Processing Addendum describing contractual safeguards, including Standard Contractual Clauses where applicable; no unsupported routing claim is made here.

The public privacy and legal contact remains deniz@nexcorn.com. SMTP credentials, technical server configuration, ports, and internal routing details are never exposed publicly.

Namecheap Data Processing Addendum

5. GitHub repository integration

Public repository metadata is requested by the PWODY server and supplied to the Projects interface from a server-side cache or local fallback. Browsers do not call GitHub merely to render Projects, and any configured GitHub token remains server-side. Visitor personal data is not intentionally sent to GitHub merely by viewing that section.

Following an OPEN REPOSITORY link leaves PWODY. GitHub then processes the visit under its own privacy terms.

6. Theme and language preferences

PWODY uses first-party localStorage only to remember the selected theme and language. The keys are pwody-theme and pwody-locale. They are not cookies and are not used for advertising, analytics, profiling, or cross-site tracking.

7. Service Status

The Service Status interface may request cached server-side health results for the website/runtime, GitHub integration, contact-mail readiness, SSL/TLS, and CV availability. Opening it does not create a tracking profile, and the response does not expose infrastructure secrets.

8. CV download

PWODY issues a short-lived same-origin download path for the CV matching the selected site language. The random path is a delivery mechanism, not an access-control boundary: the CV is public content and its source files remain served by the website infrastructure. PWODY does not add analytics to the download. Normal hosting logs may still record the technical request as described above.

9. External links

Social and project controls are plain links to destinations such as LinkedIn, GitHub, and X. No content from those services is embedded to render the controls. After you follow a link, the destination provider processes data under its own policy.

10. Retention

Contact submissions are kept only as long as needed to answer the enquiry, manage relevant professional or business correspondence, meet applicable obligations, or resolve claims where applicable. No automatic deletion period is promised where none has been operationally established.

Server and security logs follow the hosting and security retention required for operation once those settings are confirmed.

11. Your rights

Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction, data portability, or object to processing. Where processing actually relies on consent, consent may be withdrawn for the future. Contact deniz@nexcorn.com to exercise a right.

12. Complaints

You have the right to lodge a complaint with a competent data protection supervisory authority. This notice does not identify a specific authority until competence and current contact details have been verified.

13. Security and TLS

PWODY applies server-side validation, bounded abuse controls, restricted response data, security headers, and HTTPS/TLS for production. No internet transmission or storage method can be guaranteed absolutely secure.

14. Changes to this notice

This notice will be updated when the site's processing changes or verified deployment facts require correction. Material new analytics, marketing, embedded media, or non-essential storage requires a renewed privacy and consent assessment before release.

15. Current technology scope

PWODY currently uses no analytics, advertising, marketing pixels, third-party embeds, or consent-management platform. A cookie banner is therefore not presented for the implemented technology.