Privacy policy.
This policy covers the website syntheticcortex.dev only. The Generation Network app and generationnetwork.app have their own privacy policy. Effective date: 15 November 2026.
§1 Data controller
Data controller: Baran Akyol (natural person, independent developer), Mersin, Türkiye. Data protection requests: [email protected]. Official and legal requests: [email protected]. No representative in the EU/UK has been appointed, as processing on this site is occasional and low-risk (GDPR Art. 27(2)); you can write to the addresses above in English or Turkish.
§2 Summary
The site has no accounts, forms, comments or newsletter, sets no cookies of its own, uses no analytics of its own and does not use browser storage. The interactive diagrams and the emotion-frequency lab run entirely in your browser and send nothing to us. Personal data is processed only (a) by our hosting provider to deliver the site and keep it secure, and (b) by Google if and when advertising is switched on, subject to your choices.
§3 What is processed, why, and on what legal basis
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Connection data — IP address, date and time, requested URL, browser and device type, referrer | Delivering pages, caching, preventing abuse and attacks (Cloudflare) | GDPR Art. 6(1)(f) legitimate interest in a secure, working site · KVKK Art. 5(2)(f) legitimate interest | Short-term logs kept by Cloudflare under its own policy; we do not keep or combine them |
| Advertising data (only when ads are enabled) — cookie and device identifiers, IP address, pages viewed, approximate location, ad interactions | Showing ads, measuring them, preventing ad fraud; personalised ads only if you allow them | Consent: GDPR Art. 6(1)(a) with ePrivacy Art. 5(3) · KVKK Art. 5(1) explicit consent · US: notice with opt-out of sale/sharing and targeted advertising | As set by Google; you can withdraw consent at any time (§6) |
| Your consent choice (only when ads are enabled) | Remembering what you chose in the consent message | GDPR Art. 6(1)(c) and (f) — demonstrating consent · KVKK Art. 5(2)(ç) and (f) | Until you change it or clear your browser data |
| Emails you send us — address, name, message | Answering you and handling rights requests | GDPR Art. 6(1)(b), (c) and (f) · KVKK Art. 5(2)(c), (ç) and (f) | Up to 2 years after the matter is closed, longer only where the law requires |
We do not sell personal data for money, do not process special-category (sensitive) data on this site, and do not make decisions about you by automated means that have legal or similarly significant effects.
§4 Recipients and international transfers
Cloudflare, Inc. (hosting, content delivery, security) and, when advertising is enabled, Google Ireland Limited / Google LLC (advertising, consent management). Both may process data outside Türkiye and the European Economic Area, including in the United States. Transfers from the EEA/UK rely on the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses (GDPR Chapter V). Transfers from Türkiye rely on the appropriate safeguards in KVKK Article 9, in particular standard contracts. Google's handling of data is described at How Google uses information from sites that use its services; Cloudflare's at cloudflare.com/privacypolicy.
§5 Advertising and cookies
Some pages contain reserved advertising spaces. Until advertising is switched on, no advertising code is loaded and no cookies are set. When it is switched on: in the EEA, the UK and Switzerland, a consent message from a Google-certified consent management platform appears before any advertising cookie is stored, and you can accept, reject or choose non-personalised ads; rejecting does not limit your use of the site. Elsewhere, ads may load by default, and in US states with privacy laws you can opt out as described in §6. Visitors we know to be under 16 are not shown personalised ads.
§6 Your privacy choices · Do Not Sell or Share My Personal Information
Showing personalised ads may count as "selling" or "sharing" personal information, or "targeted advertising", under the laws of California and other US states. You can opt out at any time:
- use the button below to reopen the consent and privacy message (available once advertising is enabled);
- turn on Global Privacy Control in your browser — we treat a GPC signal as a valid opt-out of sale/sharing and targeted advertising for that browser;
- or email [email protected] with the subject "Do Not Sell or Share".
Browsers' older "Do Not Track" signal has no common standard; we honour GPC instead.
§7 Your rights
GDPR / UK GDPR: access, rectification, erasure, restriction, data portability, objection (including to processing based on legitimate interests), and withdrawal of consent at any time without affecting earlier processing. You may complain to the supervisory authority where you live or work.
KVKK (Türkiye), Article 11: to learn whether your data is processed and request information about it; to learn the purpose and whether it is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data and erasure or destruction under Article 7, and notification of these to recipients; to object to a result against you arising exclusively from automated analysis; and to claim compensation for damage caused by unlawful processing. Requests can be made in writing or by email under the Communiqué on Procedures and Principles of Application to the Data Controller; we answer free of charge within 30 days at the latest. You may then apply to the Personal Data Protection Board (KVKK Kurulu).
US state laws (including California CCPA/CPRA, Virginia, Colorado, Connecticut, Utah, Texas and others): to know or access the categories and specific pieces of personal information processed, to delete, to correct, to opt out of sale, sharing and targeted advertising (§6), and not to be discriminated against for exercising these rights. You may use an authorised agent. We verify requests in a way proportionate to the data involved; as we hold almost no data, we may ask only for what is needed to find it. If we decline a request, you can appeal by replying with "Appeal" in the subject; if the appeal is denied you may contact your state attorney general. In the last 12 months, the categories that may have been processed are identifiers and internet activity (§3), for the purposes listed there, disclosed to the recipients in §4.
We aim to answer every request within 30 days (KVKK and GDPR) and 45 days (US state laws), extendable where the law allows.
§8 Security
The site is served only over HTTPS with strict transport security and a restrictive content security policy. No system is completely secure, but the site holds no personal data of its own that could be exposed.
§9 Children
This site is a technical resource and is not directed at children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect personal data from children; if you believe a child has sent us personal data, write to us and we will delete it.
§10 Changes
We will post any change here with a new effective date, and announce material changes on the home page. Last updated: 15 November 2026.
See also the terms of use and legal notice.