Legal Notice & Privacy Policy

2. Privacy Policy

Data Protection

I treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. There is no automated decision-making, including profiling, within the meaning of Art. 22(1) and (4) GDPR.

Web Hosting & Data Sovereignty

This website and its subdomains are hosted by IONOS SE (Montabaur) in Germany. The hosting provider acts as a processor under Art. 28 GDPR; a data processing agreement (Auftragsverarbeitungsvertrag) has been concluded with that provider. No content-delivery network or third-party tracking service is used.

Data Protection Officer

No data protection officer has been appointed. For any questions about data protection, please contact the controller directly.

Server Log Files

Each time this website is accessed, my web server writes an entry to a log file. An entry contains: the IP address, truncated to its first 24 bits (IPv4) or its first 40 bits (IPv6); the date and time; the request method, the requested host and path including query parameters, and the protocol version; details of the TLS connection (such as the version, the cipher suite and the requested server name); the status code, duration and size of the response, the size of the request body, and the response headers, with the content of any cookies set replaced by a placeholder. The source port and the headers your browser sends, such as the browser identifier, the referrer URL and the preferred language, are not recorded, nor is the host name of your computer. This data is not merged with other data sources. The legal basis for the temporary storage of this data and the server log files is Art. 6(1)(f) GDPR, based on my legitimate interest in the security, stability, and error-free operation of this website. Providing this data is neither a statutory nor a contractual requirement; without it, however, the website cannot be delivered. The server log files are stored for security reasons for a maximum of 7 days and are deleted automatically thereafter.

Server Security Logs

To protect the server against attacks, its firewall, its SSH service, its service that bans addresses and its audit system log the logins and login attempts over SSH, the packets the firewall refuses, the banned addresses, changes to key files and every switch to administrator rights. Such an entry contains the full IP address and the source port, the date and time, for a login attempt over SSH the user name tried, and for a login the fingerprint of the key used. The legal basis is Art. 6(1)(f) GDPR, based on my legitimate interest in protecting the server. These logs are stored for at most 7 days and are deleted automatically thereafter.

Contact by Email

If you write to me by email at info@mtorun0x7cd.com, I process your email address, your name if you give it, the content of your message and the technical details an email carries, in order to handle and respond to your request. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and, for general enquiries, Art. 6(1)(f) GDPR (legitimate interest in responding). Providing this data is neither a statutory nor a contractual requirement, and you are not obliged to provide it; without your email address, however, I cannot reply to you, and if you wish to enter into a contract with me, your name and contact details are required for it. The mailbox is held with Apple iCloud Mail; the provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. According to Apple, personal data collected by Apple or an Apple-affiliated company worldwide is generally stored by Apple Inc. in the United States, and the international transfer by Apple of personal data collected in the European Economic Area, the United Kingdom and Switzerland is governed by Standard Contractual Clauses. Your message may therefore leave the European Economic Area. According to Apple, you can request a copy of Apple's Standard Contractual Clauses from Apple using the form at https://www.apple.com/legal/privacy/contact/. I delete your message once your request has been dealt with, unless statutory retention obligations require otherwise.

Contact by iMessage

If you write to me by iMessage at info@mtorun0x7cd.com, I process the phone number or email address you write from, your name and photo if you share them, and the content of your message with its attachments, in order to handle and respond to your request. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and, for general enquiries, Art. 6(1)(f) GDPR (legitimate interest in responding). Writing to me by iMessage is voluntary; you can reach me by email just as well. iMessage is a service of Apple; according to Apple, personal data relating to individuals in the European Economic Area is controlled by Apple Distribution International Limited in Ireland. According to Apple, iMessage is end-to-end encrypted, so that Apple cannot decrypt the content of a conversation while it is in transit between devices; Apple retains limited information about the use of iMessage for up to 30 days. According to Apple, personal data collected by Apple or an Apple-affiliated company worldwide is generally stored by Apple Inc. in the United States, and the international transfer by Apple of personal data collected in the European Economic Area, the United Kingdom and Switzerland is governed by Standard Contractual Clauses. Your message may therefore leave the European Economic Area. According to Apple, you can request a copy of Apple's Standard Contractual Clauses from Apple using the form at https://www.apple.com/legal/privacy/contact/. Apple's processing is governed by Apple's Privacy Policy at https://www.apple.com/legal/privacy/en-ww/. I delete your message once your request has been dealt with, unless statutory retention obligations require otherwise.

Responsible Party (Controller)

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is: Mert Torun, M.Sc. Contact: see Legal Notice above.

Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

  • The right of access (Art. 15)
  • The right to rectification (Art. 16)
  • The right to erasure (Art. 17)
  • The right to restriction of processing (Art. 18)
  • The right to data portability (Art. 20)

To exercise any of these rights, please contact me using the details provided in the Legal Notice. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. The competent supervisory authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestr. 2-4, 40213 Düsseldorf, email: poststelle@ldi.nrw.de.

Right to Object under Art. 21 GDPR

Where I process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. I will then no longer process your data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Please address your objection to the contact details given in the Legal Notice.

Last Updated

This privacy policy was last updated in November 2026.

3. Secure Communication

For secure, tamper-proof email communication, you can download my S/MIME public certificate and verify its cryptographic fingerprints. The commits and tags I push to the repositories under my GitHub account are also signed with an Ed25519 SSH key that anyone can verify independently. For end-to-end verified messaging, you can compare my iMessage Contact Key Verification (CKV) code.

S/MIME Encryption

S/MIME Public Certificate
Download .cer

SHA-256 Fingerprint
11:BC:CF:B3:93:93:06:17:E5:95:87:8A:00:B3:82:43:AC:76:13:00:3E:3A:76:0E:98:B2:AA:05:BF:AD:55:A5

Code & Commit Signing (SSH)

Key Type
Ed25519 (ssh-ed25519)

SHA-256 Fingerprint
SHA256:h0XIy0K+hRkQ921LjtoKu/jSPvvlP0r4BiAMuyEPIrI

iMessage Contact Key Verification (CKV)

What is this?

iMessage ID (Email)
info@mtorun0x7cd.com

Verification Code
APKTIDNR74C6vm1ciqJaRjuMNEY4wvcQ3u4_mRZefbCYQbABWd6Q