Privacy & Cookies

Visit measurement (Google Analytics 4) runs on this site only if you allow it, which is why you are asked on your first visit. If you do not allow it, the measurement code is not loaded, no measurement cookie is written and no measurement request is sent to Google Analytics. There is no advertising, remarketing or profiling tag; the site contains no embedded third-party content (video, maps, social embeds) and no external web fonts.

The site never asks you for an account, an e-mail address or contact details, and quiz progress stays in your own browser. The server’s technical logs (below) are always kept. You can change your choice at any time from the Privacy choices button at the bottom of every page.

The data controller for this website is Doruk Vatansever. This section is written to meet the transparency duty under Article 10 of the Turkish Data Protection Law (KVKK).

We are not hiding the gap. The site is published under this name; no verified registration, legal entity or postal address for the data controller has been published. The identity element of Article 10 is therefore not fully satisfied, and this notice does not claim full legal compliance. No title, address or registration number has been invented; this is a deliberate and recorded gap.

Applications: for requests under Article 11 you can use the address info@dorukvatansever.com; applications are answered within 30 days at the latest under Article 13. For child-safety reasons the site publishes no clickable e-mail link, no telephone number and no contact form; the address is given as text only.

The most frequently needed right — withdrawing consent — requires no application at all: use the Privacy choices button at the bottom of every page and select Continue without measurement; measurement stops immediately and the measurement cookies are deleted.

If you allow it, first-party measurement cookies are used for Google Analytics 4 (measurement ID G-26PEX3JV1V): _ga and _ga_26PEX3JV1V. Their lifetime is 90 days — this is not a legal limit but our voluntary data-minimisation choice; the period is not restarted on each visit. If you do not allow it, these cookies are not written and no measurement request is sent to Google Analytics; the default state is refused.

Advertising personalisation and Google signals are switched off in code (allow_ad_personalization_signals:false, allow_google_signals:false); advertising storage permissions are never granted at any stage. Measurement data is not anonymous but pseudonymous: it does not carry your name, but it is linked to a random identifier specific to your browser.

Measured events (the honest list): page views, first visit and session start, engagement time, reaching about 90% of the page, outbound-link clicks (the site has 3,903 links to 104 distinct external domains; the count covers clickable <a href> links across the 1,278 HTML pages in the published package — code samples displayed on the lesson pages are not clickable links and are therefore not counted), clicks on document download links (302 PDF links) and form interactions in the on-page tools (16 tool forms; what you type into a form is not sent, only the fact that an interaction happened). There is no embedded video on the site; the on-page search tools do not change the address bar, so your search term is not sent to measurement.

The consent record: your choice is stored not as a cookie but in your browser’s local storage under the name doruk-riza. It contains only your decision, the decision date, the expiry date and the consent-scope version; it is not sent to any server and stays in this browser for 12 months. Acceptance and refusal are stored for the same period. Wording, design or explanatory updates do not reset your choice; you are asked again only if the purpose, data categories, provider, recipients or measurement features expand materially.

The appearance preference: the light/dark appearance choice is likewise stored not as a cookie but in your browser’s local storage under the name doruk-theme. The record contains only the value light or dark; it carries no identity, browsing history or measurement data, it is not sent to any server and it is not passed to Google Analytics. It is written only when you change the appearance, and it is independent of whether you allowed measurement — it works even if you refuse, because it does nothing except remember your choice. Lifetime: the record has no expiry date; it stays in this browser until you change the appearance again or clear your browser data. These are all of the persistent records the site keeps in your browser’s LOCAL STORAGE: doruk-riza (your measurement choice), doruk-theme (your appearance choice) and, only if you take a quiz, doruk-quiz-progress-v2 (described separately below). These are not cookies; if you allow measurement the _ga and _ga_26PEX3JV1V cookies listed above are written as well — they are not part of this list, because cookies and local storage are two different places. Apart from these, a key named __sv is written momentarily and deleted in the same step to test whether local storage is available; it is not persistent and carries no information.

If this page is opened inside another site’s frame: this site can be embedded in an iframe on pages served from other domains. In an embedded view no measurement choice is offered and measurement never starts: a click given on the embedding page is not valid explicit consent for this domain, and because browsers partition local storage inside a frame your choice could not be stored in a provable way. Measurement runs only when you open the site at its own address and explicitly allow it.

Child visitors: this site is also read by middle-school and high-school students. Google Analytics does not ask for a visitor’s age and does not distinguish a child from an adult; that is why measurement is off by default and never starts unless it is allowed. If measurement was allowed on a child’s device, a parent or teacher can withdraw it from the same button. The site creates no accounts and asks for no name, school, class or contact details.

Withdrawing consent: the Privacy choices button at the bottom of every page is the primary route; choosing Continue without measurement stops measurement, deletes the _ga cookies and prevents any new measurement request. Secondary routes: clearing cookies in your browser settings, or the Google Analytics opt-out add-on.

When the site is accessed, standard technical information such as the IP address, access time, requested page, browser or device information and the server response code may be processed in the hosting infrastructure in order to deliver the website and keep it secure. These records are not used for advertising or marketing, no behavioural user profile is built from them, and the site owner does not transfer them into a separate visit-measurement system.

No aggregated visit counting is performed on the server logs. If such counting is ever introduced, a written legitimate-interest balancing test will be prepared first and this notice will be updated; the counting is not run before that test exists.

What is explicitly not yet verified: the full legal name of the hosting provider, the actual retention period of the server logs and the country or countries in which they are processed have not yet been verified by us. This section is not considered complete until those three facts are verified; uncertain information is not written here by guesswork and will be added once confirmed.

Visit measurement (only with consent): to understand which content is of interest and to improve the site — legal basis: explicit consent (KVKK Art. 5/1).

Technical access and security logs: operating the site; ensuring information and system security; detecting errors and outages; preventing unauthorised access and misuse; meeting legal obligations where required. If legitimate interest is to be relied on for these logs, a concrete balancing test is prepared first — that test has not yet been prepared.

KVKK applications: to answer your application and keep a record of it — legal basis: legal obligation and legitimate interest. The site does not process data for membership, sales, marketing, profiling or automated decision-making.

If you allow measurement, your visit data is transferred to Google and may be processed outside Türkiye on Google infrastructure (KVKK Art. 9). The legal basis for this transfer is your explicit consent. If you do not allow it, no transfer takes place.

We state this plainly: the transfer is regular in nature, and the Law requires an additional appropriate safeguard (for example the Board’s standard contract) for regular transfers; no such contract has been concluded with Google. The site owner has chosen to run measurement on the basis of explicit consent while this gap persists. For that reason this notice does not claim full legal compliance.

For the hosting provider and its sub-processors that handle server access logs, verification of the recipient, role, country and transfer mechanism is still in progress; it is not written into this section until verified.

• Measurement cookies (_ga, _ga_26PEX3JV1V): 90 days — voluntary minimisation.
• User and event data on Google Analytics servers: 2 months — the GA4 default, not increased.
• Consent record (doruk-riza): 12 months.
• Quiz progress: in your own browser only, until you delete it.
• Server access and security logs: the period is set by the hosting provider; the actual period has not yet been verified by us.
• Correspondence about KVKK applications: for the periods set by applicable law and possible disputes.

Under Article 11 of Law No. 6698 you have the right to: learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether the data is used in line with that purpose; know the third parties to whom it is transferred; request rectification if it is incomplete or incorrect; request erasure or destruction when the statutory conditions are met; request that rectification and erasure be notified to the parties to whom the data was transferred; object to a result against you arising from analysis carried out solely by automated systems; and claim compensation for damage.

You can withdraw your consent to measurement at any time, without giving a reason, from the Privacy choices button at the bottom of the page; when you withdraw it, the measurement cookies are deleted and no new measurement request is sent to Google Analytics.

You can send your applications to info@dorukvatansever.com; they are answered within 30 days at the latest. If your application is refused, answered insufficiently or not answered in time, you may lodge a complaint with the Turkish Personal Data Protection Board (kvkk.gov.tr).

On your first visit three equal options are offered: Allow measurement · Continue without measurement · Review settings. The default state is refused; no measurement request is sent to Google Analytics before you allow it. In the settings panel the measurement category is not pre-ticked.

If your browser blocks local storage, your choice cannot be recorded in a demonstrable way, so measurement does not start at all and the reason is shown to you. You are asked again after 12 months, or if the measurement scope expands materially.

Measurement ID: G-26PEX3JV1V · consent-scope version: analytics-scope-01 — stored together with your choice. Corrections to the wording do not reset your consent. The machine-readable measurement statement of the site is published at /olcum.json.

Links to the Ministry of National Education, ÖSYM, YÖK, TÜBİTAK, W3C and other sources are links only: unless you click them, no request is sent to those sites and their cookies or scripts do not run on this page. When you open a link you leave this site and the privacy and cookie practices of the site you open apply; this site does not control their processing.

Even when an external link has been selected as an official source, a user who is about to sign in, upload a document or send personal information should re-verify the address, the institution’s name and the secure connection. Children in particular should carry out application and document procedures with appropriate adult support.

DorukVatansever.com has no membership, comments, contact form, advertising profile or user account. It does not ask visitors for a name, email address, telephone number, school, address or location. Personalised advertising and remarketing code are not part of the site design, and advertising identifiers are switched off in code. If you consent to measurement, Google Analytics recognises you by a pseudonymous identifier and links the pages you read to it — that is not an advertising profile, but it cannot be called “no profiling at all” either. Google Analytics is used to measure visits, but measurement runs only if you explicitly consent. Until you do, no request is sent to Google and no measurement cookie is written.

This page is not legal advice or a guarantee about the entire internet. A hosting provider may keep standard server logs for security and technical operation. The site is not designed to use those logs for a learner profile or marketing.

The local-storage key is “doruk-quiz-progress-v2”. The data is not sent to the server or synchronised across devices. A visitor can export it as JSON or delete it from the Progress Centre. Clearing browser data may also remove progress.

Publication of the selected Graduation 2026 photographs is approved. That approval does not permit unlimited reuse for facial recognition, advertising targeting, dataset creation or unrelated personal narratives.

Before a child’s image is published, necessity, purpose limitation, minimisation, visibility of other people, school-document or location leakage and future reuse are considered together. A removal or replacement should be recorded in the page version.

• Home or school address, regular route and live location
• Student numbers, document numbers and full grade transcripts
• Private health, measurement or psychological information
• Names and images of classmates, teachers or teammates without permission
• Private telephone, email, account or messaging details
• Unconfirmed school, institution, competition, project or achievement claims

A future contact form, membership system, server-side progress, analytics or other data processing would change this privacy model. Before release, data fields, purpose, retention, security, effects on children and deletion methods would need separate definition.

This gate has been applied for visit measurement: Google Analytics was added only together with an explicit consent gate, and its data fields, purpose, retention, transfer, effect on children and deletion method are defined in the Measurement and cookies section above. Apart from that, there is no contact form, membership or server-side progress feature.

When a new feature is considered, asking whether data can technically be collected is insufficient. The site asks whether the data is genuinely necessary, whether the same function works with less data, whether it can be explained in child-friendly language, whether secure deletion exists and what future misuse may look like.

The default should be the least data possible. If progress can remain on the device, an account is unnecessary; aggregate insight does not require a detailed person profile; a photograph story does not require location or school documents.

A child or family may reconsider an earlier publication decision. Where technically possible, removal, correction and reduced visibility remain available. Approval is not treated as an irreversible permanent transfer.

• Necessity
• A lower-data alternative
• Child-friendly explanation
• Deletion and withdrawal
• Future reuse risk

Because quiz progress stays in the browser, another person may see it on a shared or school device. A visitor can delete the record after use and should not leave an exported JSON file on a device they do not control.

LocalStorage is not a secure identity vault. Names, health information, school details, passwords and contact data are therefore excluded. Only the minimum statistics needed for learning review are stored.

• Review data on shared devices
• Protect exported files
• Never store sensitive identity data
• Keep only necessary quiz statistics