Cookie Policy
What is here and what is not — measured, not templated.
The list below is not boilerplate; it is the marketing site as measured in a browser. If a row is added, this page is updated in the same round.
Measured on 30 Aug 2026: the pages of this marketing site write NO cookies to your browser on their own — the visitor counter included. Instead of a cookie the counter uses an identity digest that CHANGES EVERY DAY on the server, so it leaves nothing on your device. Since 31 Aug 2026, however, non-bot visits also carry your raw IP address; records can be linked across days through that field. The detail and the legal basis are in the Privacy and Data Protection Notice.
What is stored
| Name | Set by | Purpose | Lifetime | Category |
|---|---|---|---|---|
| __cf_bm | Cloudflare | Bot detection. Appears ONLY on the contact page, when the form's verification widget loads; it is on no other page. | 30 minutes | Strictly necessary |
| policek_cerez_tercihi | POLİÇEK | Remembers the answer you give in the preferences panel on this page. It is not a cookie — it lives in your browser's local storage and is NEVER sent to the server. | Until you clear it | Strictly necessary |
| Visitor counter (cookieless) | POLİÇEK | Counts which pages are read. SETS NO COOKIE. Held on the server: date and hour, page path, country/region/city, time zone, the name of your internet provider, device / operating system / browser class, which site you arrived from, campaign tags, and — on non-bot visits — your raw IP address. Counting also uses a one-way digest derived from your IP address that CHANGES EVERY DAY. | 400 days | Strictly necessary |
| Browser signature (User-Agent) | POLİÇEK | ONLY if you choose “Accept all”, your browser's full signature string is recorded as well. Without that consent the field stays EMPTY — the rule is enforced not only in the software but in the database itself. You can withdraw consent at any time; from that moment on nothing is written. NOTE: since 31.08.2026 the raw IP address is no longer tied to this switch; it is recorded on every non-bot visit on the legitimate interest basis. | 400 days | Optional |
| — | — | No advertising cookies, no heatmaps, no session recording, no third-party trackers, no social media pixels. | — | Optional |
Data that reaches third parties
Web fonts — no longer leave this site
Until 31.08.2026 the page loaded its typefaces from Google's servers, and that request carried your IP address to Google. On that date the files were moved to our own server: the page now sends no font request to any third party. This entry stays to record that the transfer was removed.
Cloudflare
The site is served through Cloudflare; your connection details (IP, browser) are processed for infrastructure security. The contact form's bot check also runs on Cloudflare.
Neon (database)
The visitor counter's records are stored in a PostgreSQL database hosted on Neon and deleted after 400 days. Your policy data is NOT in that database; the application's database is entirely separate.
Resend
When you submit the contact form your message is delivered as email, through Resend. The message is NOT written to any database — it only lands in an inbox.
The application is separate
This text covers the marketing site only. The POLİÇEK application you use after signing in (app.policek.ai) uses session cookies and is covered by its own privacy notice.