Privacy notice

Last updated: 25 October 2026

This site is a portfolio. It sets no advertising or tracking cookies and has no user accounts. Below is everything it does with personal data.

Who is responsible

Cihat Eray Balat (Eray Balat, Citrine Studio), Kayseri, Türkiye. Contact: eray@eraybalat.com.

Quote and contact forms

When you send a form on this site, the following goes to me by email: your email address, your message, the project type you picked, and which page and language you sent it from, the website that referred you (domain only) and a campaign tag if the link had one (?ref=). I use this only to answer your request and prepare a quote. Legal basis: steps prior to a contract at your request (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).

The form is delivered by Web3Forms, which forwards it to my mailbox and, according to its own policy, does not store submissions beyond short-lived server logs. My mailbox is hosted by Hostinger. I keep project emails as long as needed for the project and for legal accounting duties, and delete enquiries that did not lead to work within 2 years.

Visitor statistics

The site uses Cloudflare Web Analytics, which counts page views without cookies and without storing your IP address. It gives me totals such as pages viewed, countries and referring sites. Legal basis: legitimate interest in knowing which pages are useful (GDPR Art. 6(1)(f)).

Hosting

The site is served by GitHub Pages (GitHub, Inc.). Like any web server it processes your IP address to deliver the pages and may keep it in short-term security logs.

Videos from YouTube

Some pages show a YouTube film only after you click play. Nothing is loaded from YouTube before that click; after it, YouTube's own privacy policy applies. Links to Instagram, LinkedIn, Upwork and other profiles open those sites, which have their own policies.

Stored in your browser

The site remembers your language choice and, in Detective mode, which case files you have opened, in your browser's local storage. This never leaves your device; clearing site data removes it.

Transfers abroad

Web3Forms, Cloudflare, GitHub and Hostinger may process data outside Türkiye and the EU, including the United States. These transfers rest on the providers' contractual safeguards, and on your explicit request when you send a form.

Your rights

You can ask for access to, correction or deletion of your data, object to its processing, or ask for a copy, by writing to eray@eraybalat.com. You may also complain to your data protection authority (in Türkiye: KVKK, the Personal Data Protection Authority).