Privacy Notice

Who is responsible

For project enquiries submitted through this website, the data controller is Emre Lütfi, operating the independent software studio EmreLutfi. Privacy questions and requests can be sent to [email protected].

Information the brief collects

• project type, stage, requested services and description;
• an optional public website or product link;
• an approximate investment range and preferred timeline;
• your name, email address, company or pre-company status, and optional role and country or time zone;
• optional supporting-file metadata: filename, reported media type and byte size;
• your acknowledgement of this notice, a random submission reference, and ordinary security and request logs created by the hosting platform.

Selecting a supporting file reads only its name, reported type and size in your browser. The file contents are not uploaded. Please do not put passwords, payment details, credentials, sensitive personal information or confidential client material in the brief or filename.

Purpose and legal basis

The information is used to assess the proposed project, understand scope and fit, respond to you, protect the enquiry service from abuse and keep a record of the conversation. It is not added to a marketing list and is not sold.

Processing is necessary to take the steps you request before a possible contract and, where applicable, for the studio's legitimate interests in operating a secure enquiry service and establishing or protecting legal rights. The required checkbox confirms that you have seen this notice; it is not marketing consent.

Delivery and service providers

The website is hosted on Cloudflare infrastructure. Each brief is stored in the site's own database on Cloudflare, where only the studio can read it from a password-protected admin panel. When server email delivery is configured, Resend also processes the brief to deliver it to the studio mailbox. If delivery is unavailable, the site clearly says that nothing was sent and offers a prepared email you can review in your own mail application. Your email provider then processes that message under its own terms.

These providers process information only to supply hosting, security or email-delivery services. Depending on their configured infrastructure, processing may occur outside your country. Where required, transfers are handled using an applicable legal transfer mechanism and provider safeguards.

Retention

Enquiry information is kept only as long as reasonably needed to assess and answer the request, manage any follow-up and protect legal rights. If the enquiry becomes a client engagement, relevant correspondence may be retained with the project records for the period required by contractual, accounting or legal obligations. Provider security logs follow the provider's configured retention period. Information is deleted or anonymised when those purposes no longer apply.

Your choices and rights

Depending on the law that applies to you, you may ask whether your information is processed, request access or a copy, correct inaccurate information, request deletion or restriction, object to certain processing, or request portability. You may also complain to the Turkish Personal Data Protection Authority or another competent supervisory authority.

Send requests to [email protected] with the subject “Privacy request”. Enough information may be requested to verify that the enquiry belongs to you. You can also choose not to use the form and contact the studio directly by email.

Cookies and analytics

This application does not include advertising trackers, session replay or third-party analytics. The hosting platform may process essential request data and set strictly necessary security cookies when needed to protect the service.

The site keeps its own anonymous, aggregate statistics: daily counts of page views, the referring website, device type (desktop, tablet or mobile), country, and steps such as starting or sending the quote form. No cookies are set for this, no IP address or identifier is stored, and individual visits cannot be reconstructed. A small "visited today" marker in your browser's local storage avoids counting you twice in a day. If your browser sends a Do Not Track signal, nothing is counted. Project descriptions, contact details and form values are never sent to these statistics.

The optional AI assistant sends the messages you type to an AI provider (Google Gemini or Anthropic, depending on configuration), which generates the replies. If you choose to fill the quote form from the chat, the conversation is used once more to draft the form; you review it before anything is sent. Please do not share sensitive personal information in the chat.

The background music is a YouTube video played through YouTube's embedded player in privacy-enhanced mode (youtube-nocookie.com). It loads only after you interact with the page while music is switched on, and can be turned off with the sound button; when it plays, YouTube (Google) receives the usual request data for streaming the video.

Security and updates

The enquiry flow uses shared client/server validation, a hidden anti-spam field, duplicate-send protection and deployment-level bot verification when server email is enabled. No internet transmission can be guaranteed completely secure.

This notice may be updated when the studio's providers, purposes or site features change. The effective date above identifies the current version.