Privacy policy (Datenschutz)

This is an English translation for convenience. The German version is the binding one: Datenschutzerklärung.

1. Controller

Sina Kashani, address see Impressum. Email: contact@sinakashani.com

2. Hosting

This is a static website hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When a page is requested, Cloudflare processes technically necessary data, in particular the IP address, date and time of the request, the requested page and browser information. This is needed to deliver the site and protect it from attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).

Cloudflare may process data in the USA. Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement with standard contractual clauses also applies.

3. Contact form and email

When you submit the contact form, your name, email address and message are sent to a program of this website running at Cloudflare (a Cloudflare Worker). It checks the details and forwards the message by email through Cloudflare Email Routing to my mailbox, with your email address set as the reply-to address. The details are not stored in a database on this website. The receiving mailbox is hosted by Google (Gmail), where the message is then kept like any other email. To limit mass submissions, Cloudflare briefly counts requests per IP address.

Emails to contact@sinakashani.com are also forwarded to the same mailbox through Cloudflare Email Routing.

Details from enquiries are used only to answer the enquiry and are deleted when no longer needed for that. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for enquiries about a contract.

Spam protection with Cloudflare Turnstile

Pages with the contact form load Cloudflare Turnstile from challenges.cloudflare.com. Turnstile processes technical data such as the IP address, browser and device information and characteristics of the check to tell whether a person is sending the form. The result is a token that the Worker has Cloudflare verify when the form is sent. According to Cloudflare, Turnstile is not used for advertising or tracking. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against spam and abuse).

4. No cookies, no tracking

This website sets no cookies and uses no analytics or tracking tools. Apart from Cloudflare Turnstile on pages with the contact form (see 3.), it embeds no third-party content. Fonts are served by this website itself, not by external services.

5. External links

Links to GitHub, LinkedIn and other sites lead to services run by other providers. Data is processed there only once a link is clicked; their own privacy policies apply.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can also complain to a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.

Status: draft, 2026