Privacy

This is a personal site run by Diyaz Yakubov. It collects as little as it can. Last updated September 26, 2026.

If you subscribe by email

What I store: your email address and which topics you chose ("New posts on diyaz.dev", and "Programmes" only if you ticked the box). Your address is added to the list only after you open the link in the confirmation email and press Confirm. If you never do, no subscriber record is created, though the confirmation email itself stays in Resend's delivery log for a while.

Why: to send you what you asked for. The legal basis is your consent, which you can withdraw at any time with the link at the bottom of every newsletter email, or by replying to one.

Who processes it:

• Resend (Resend, Inc., a US company) keeps the subscriber list and delivers the emails, sending from its EU region. Because Resend is based in the US, your address may be processed there under Resend's data processing terms.
• Cloudflare runs the small service behind the form and the Turnstile check that tells people from bots. Turnstile loads only when you use the form (the first time you click, tap or tab into one of its fields or buttons; the Privacy link doesn't count), and its check runs when you press Subscribe. It looks at signals from your browser for that one purpose; in this setup it sets no cookies.

How long: while you're subscribed. After you unsubscribe, your address stays in Resend marked as unsubscribed, so no more newsletters are sent to it. If someone enters it in the form again, one confirmation email is sent, and nothing more unless it's confirmed. Ask me and I'll delete it completely.

Tracking: emails have no open or click tracking. Links in newsletter emails carry a campaign tag (like utm_source=newsletter) so I can count visits that came from the newsletter; it doesn't identify who clicked.

Analytics

The site uses PostHog (EU cloud) in cookieless mode: no cookies, no local storage, IP addresses anonymised, and a visitor identifier that is a daily-rotating hash. It records things like page views, searches and whether a post was read to the end, so I can see what's useful.

Hosting and comments

The site is served by GitHub Pages (GitHub, Inc.), which, like any web server, sees your IP address and browser details when you load a page.

Post pages load the Giscus comments script from giscus.app, so giscus.app sees each post view; the comments themselves load as you scroll to them and are stored as GitHub Discussions. Reading them needs no account; commenting means signing in with GitHub, under GitHub's own privacy terms.

Your rights

You can ask to see, correct or delete what's stored about you, or object to its use. If you're a subscriber, reply to any email; otherwise message me on LinkedIn. You can also complain to your data protection authority (in Finland, the Data Protection Ombudsman).