What this site collects

Analytics

Two services count visits here, and neither writes a cookie or builds a profile of you.

Vercel Web Analytics

Provided by the host that serves this site. It is cookieless by design rather than by configuration: it sets nothing on your device, assigns you no identifier, and cannot follow you between sites or between visits. It records that a page was requested, which page referred it, and a coarse country — and derives a per-day hash from request headers that is discarded daily and cannot be reversed to identify you.

It is here because the Google tag below, configured as it is, reports almost nothing: with no identifier to work from, Google estimates visits through behavioural modelling, and that modelling needs roughly a thousand consented events a day before it activates. This site does not reach that, so a second, simpler counter does the job the first one cannot.

Google Analytics 4

Runs with Google Consent Mode v2, with every storage type denied by default:

ad_storage            denied
ad_user_data          denied
ad_personalization    denied
analytics_storage     denied

Because analytics storage is denied, no analytics cookies are written to your device and no persistent identifier is created for you. Google receives an anonymous, aggregated signal — that a page was viewed, roughly where from, and what referred it — with no way to link it to you across visits. IP addresses are anonymised before storage.

That is why there is no consent banner. A banner exists to ask permission to store things on your device. Neither service stores anything on your device, so there is nothing to ask you for.

What is not collected

• No account, login, or profile — there is nothing to sign up for.
• No contact form, newsletter, or email capture.
• No advertising, remarketing, or cross-site tracking.
• No session recording, heatmaps, or scroll tracking.
• No data is ever sold, rented, or shared with anyone beyond the two analytics providers and the host named here.

Fonts and assets

All fonts are self-hosted on this domain. Loading a page here makes no request to Google Fonts, so no request from your browser reaches a font CDN and no IP address is disclosed to one. Every image, stylesheet and script is served from ephesushq.com apart from the two analytics tags named above: Google’s, which loads from googletagmanager.com, and Vercel’s, which loads from /_vercel/insights/ on this same domain.

Hosting

The site is static and hosted on Vercel, which processes standard server request data — IP address, user agent, requested URL — to deliver pages and defend against abuse. That is ordinary web-server operation and is not used to profile you.

Your rights

Under the GDPR and Turkey’s KVKK you may ask what data relating to you is held, and ask for it to be corrected or erased. Given the above there is realistically nothing to retrieve — no identifier for you exists — but the request is welcome and will be answered honestly. Write to sensoymertefe@gmail.com.

You can also block analytics entirely with any content blocker, or by enabling “Do Not Track”. Nothing on this site is withheld from you if you do.

The software

This page is about the website. The Ephesus application is different: it runs entirely on your own machine, has no telemetry, and sends nothing anywhere. It drives agent CLIs that are already installed on your computer; whatever those send to their vendors is governed by their own terms and is unchanged by Ephesus being in front of them.

Changes

If this changes, the date at the top changes with it, and the change is in the git history of this page like everything else here.