Site owner and scope
setrox.com is the personal blog and project website of Yusuf Hikmet Gülsesli (SeTRoX). This notice describes data use on this website. The controller is Yusuf Hikmet Gülsesli. Contact him using this site’s contact form. Rivunox and other linked services have their own privacy notices.
Data used on this website
When you visit, the hosting infrastructure processes your IP address, requested page, request time and technical information sent by your browser to deliver pages and maintain security. The application has no visitor accounts, comments, payments or newsletter subscriptions, and no advertising. Optional Google Analytics use is described below.
When you submit the contact form, your optional name, reply email, subject and message are stored in the private owner inbox to respond to your enquiry. No automated email is sent. Please avoid unnecessary sensitive personal information. The admin panel processes account, session and login-security information for administrators only.
Browser preferences and cookies
Theme, accent colour, volume and music on/off preferences are saved on your device in a localStorage entry named setrox-atmosphere. It is not an advertising identifier and the application does not send this entry to the server. It has no fixed expiry; clearing this website’s browser data removes it.
Signing into the admin panel uses a secure authentication cookie; the session token is valid for two hours. An authentication cookie is not created for ordinary visitors. Article searches use the URL, so a search term may reach the technical infrastructure as part of a request address.
Images, fonts and ambient audio are served by this website. Audio may start when the browser permits it; you can stop it or change the volume using the controls. Saving preferences is optional: if browser storage is blocked, the website uses its defaults.
Purposes and processing grounds
Technical request and administrator security information supports website operation, abuse prevention and error investigation. Processing relies on the controller’s legitimate interests, provided this does not harm the individual’s fundamental rights and freedoms, under Article 5(2)(f) of Türkiye’s Law No. 6698.
Messages are processed to respond to your request. Correspondence needed to establish, exercise or protect a right relies on Article 5(2)(e); processing necessary to meet a legal obligation relies on Article 5(2)(ç). A new purpose or a feature requiring consent will receive separate information as appropriate.
Providers and external links
Hosting and technical security providers may process technical request information. Form messages are stored in this site’s database. If the owner replies by email, correspondence may pass through Gmail/Google infrastructure. Depending on the provider’s infrastructure, information may be processed outside Türkiye. You can request further provider and transfer details using the contact form.
Social profiles and sharing options are outgoing links; there is no embedded social-media feed. Opening a link or sharing a page opens the relevant external service, whose own privacy policy applies. Data is not sold for advertising. Information may be provided to competent authorities where legally required.
Retention and security
Browser preferences remain on your device until you clear them. Administrator session tokens last two hours. Form messages and email correspondence are retained for the communication need and any applicable legal obligations. Technical log retention depends on hosting and security configuration; this notice does not invent an unverified fixed number of days. Contact us for current retention details.
Spam controls use keyed digests of an IP address and reply email; the message record does not store the IP address. Counters use a one-hour window and a one-minute cooldown; expired counters are cleaned on subsequent submissions. A bot trap and short-lived signed form token are also used. The website uses HTTPS and authenticated admin access. Administrator passwords are not stored in plain text. Records and backups are considered when reviewing access and deletion requests.
Your rights and requests
Subject to the conditions of Law No. 6698, you may ask whether your data is processed, about its purposes and recipients, and request information, correction or deletion. You may request that recipients be informed of corrections or deletion, object to an adverse result based solely on automated analysis and seek compensation for damage caused by unlawful processing.
Send privacy questions and requests using the contact form, stating the request and a reply address. Formal applications under Turkish data-protection law follow the statutory procedures; only necessary information is requested for identity verification.
Changes to this notice
This notice is reviewed when features or data uses change. The current version and revision date are shown on this page.
Cloudflare Turnstile on the contact form
When you open the form, Cloudflare Turnstile loads to prevent spam and automated abuse. Cloudflare may process your IP address and technical browser/device signals on its infrastructure during verification. The application does not send your message content, name or reply email to Cloudflare; the server validates only the verification token. Pre-clearance is not enabled by this integration. Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/
Optional Google Analytics
Only with your permission, Google Analytics 4 is used on setrox.com and setrox.com.tr. Before consent and when declined, Analytics is not loaded and no analytics request is sent to Google. Google may process cookie identifiers, clean page addresses, site language, device/browser information and approximate location. Data may be processed on Google infrastructure outside Türkiye. Form contents, names, email addresses, messages, search terms, URL queries and audio transfer information are not sent to Analytics; contact, admin and preview pages are excluded. Advertising personalisation, Google Signals and automatic form measurement are disabled. Analytics cookies (_ga and names starting with _ga_) are configured for up to 180 days; detailed user/event data retention is set to two months. Your consent/decline choice is kept in this domain’s setrox-analytics-consent localStorage entry for 180 days; the other domain requires its own choice. Use Cookie preferences in the footer to withdraw consent, which stops new measurement and deletes this integration’s Analytics cookies. Declining does not affect site functionality. Processing relies on your optional consent; withdrawing does not retroactively remove earlier processing. Google privacy information: https://policies.google.com/privacy — Google Analytics data: https://support.google.com/analytics/answer/6004245