Cookie Policy
What is here and what is not — measured, not templated.
The list below is not boilerplate; it is the marketing site as measured in a browser. If a row is added, this page is updated in the same round.
Measured on 30 Aug 2026: the pages of this marketing site write NO cookies to your browser on their own — the visitor counter included. Instead of a cookie the counter uses an identity digest that CHANGES EVERY DAY on the server, so it leaves nothing on your device and cannot follow you across days.
What is stored
| Name | Set by | Purpose | Lifetime | Category |
|---|---|---|---|---|
| __cf_bm | Cloudflare | Bot detection. Appears ONLY on the contact page, when the form's verification widget loads; it is on no other page. | 30 minutes | Strictly necessary |
| policek_cerez_tercihi | POLİÇEK | Remembers the answer you give in the preferences panel on this page. It is not a cookie — it lives in your browser's local storage and is NEVER sent to the server. | Until you clear it | Strictly necessary |
| Visitor counter (cookieless) | POLİÇEK | Counts which pages are read. SETS NO COOKIE. Held on the server: date and hour, page path, country/region/city, time zone, the name of your internet provider, device / operating system / browser class, which site you arrived from, and campaign tags. Your identity is derived from your IP address through a one-way digest that CHANGES EVERY DAY; tomorrow the same visit produces a different digest. | 400 days | Strictly necessary |
| Raw IP and browser signature | POLİÇEK | ONLY if you choose “Accept all”. Without that consent both fields stay EMPTY — the rule is enforced not only in the software but in the database itself. You can withdraw consent at any time; from that moment on nothing is written. | 400 days | Optional |
| — | — | No advertising cookies, no heatmaps, no session recording, no third-party trackers, no social media pixels. | — | Optional |
Data that reaches third parties
-
Google Fonts
The page's typefaces load from Google's servers. That request sets no cookie, but it does send your IP address to Google. Self-hosting the fonts removes the transfer entirely, and that change is planned.
-
Cloudflare
The site is served through Cloudflare; your connection details (IP, browser) are processed for infrastructure security. The contact form's bot check also runs on Cloudflare.
-
Neon (database)
The visitor counter's records are stored in a PostgreSQL database hosted on Neon and deleted after 400 days. Your policy data is NOT in that database; the application's database is entirely separate.
-
Resend
When you submit the contact form your message is delivered as email, through Resend. The message is NOT written to any database — it only lands in an inbox.
The application is separate
This text covers the marketing site only. The POLİÇEK application you use after signing in (app.policek.ai) uses session cookies and is covered by its own privacy notice.