Cookie Management

Updated: 28 September 2026

This notice explains cookies and similar browser storage on Tonozz, operated by TONOZZ TEKNOLOJİ ANONİM ŞİRKETİ. Controller contact information, general processing details and rights are in the Personal Data Notice (KVKK). Cookies are small records that allow the browser to store information on your device.

1. Necessary records

PHPSESSID: Tonozz’s session identifier, used for sessions, security and forms. It is a session cookie; browser session restoration may affect its persistence. Its necessary service and security uses rely on Article 5(2)(c) or 5(2)(f) of Law No. 6698 as applicable.

tonozz_cookie_consent: A first-party preference cookie storing your analytics and advertising choices, preference version and choice time for 180 days. It only remembers and implements your choice; it is not an advertising cookie. Making a new choice restarts that period.

2. Optional analytics

Google Analytics (_ga and _ga_*): Measures visits and website use. Google may process online identifiers, page/interaction information and technical data. It loads only after you allow analytics, on the basis of explicit consent. Tonozz configures a 180-day cookie lifetime with extension on each visit disabled. Browsers may impose a shorter lifetime.

3. Optional advertising

Google Ads (_gcl_* and related campaign records): Measures advertising clicks and performance and supports personalisation within your permission. It is enabled only if you allow advertising, on the basis of explicit consent. Google’s stated general lifetime for _gcl_* records is 90 days; the records created depend on the campaign and browser. Not every visitor receives every advertising cookie.

Google describes cookies on its own domains and related account settings at https://policies.google.com/technologies/cookies. Tonozz cannot directly delete storage on other domains.

4. Security and external resources

Google reCAPTCHA on the contact form may use browser/device information and, where necessary, the _GRECAPTCHA cookie to identify automated abuse. Google determines this security cookie’s lifetime; its current expiry can be viewed in your browser’s cookie details. The service is separate from analytics/advertising choices. Requests to Google Fonts and external CDNs may also transmit IP addresses and technical data; not every third-party request is a cookie. Rejecting optional cookies does not block all these resources.

Google services may involve processing abroad. Transfer requirements are explained in the Personal Data Notice (KVKK); cookie consent does not replace the legal mechanism needed for regular overseas transfers.

5. Choosing and withdrawing

Optional categories are off on your first visit; Google Analytics/Ads tags do not load before a choice permits them. “Necessary only” rejects both, “Manage preferences” lets you choose them separately, and “Accept optional cookies” allows both. Browsing without making a choice is not acceptance.

Use “Cookie preferences” in the footer to change your choice. Saving reloads the page so subsequent loads use the new settings. When JavaScript is working, withdrawing permission clears the relevant accessible first-party analytics/advertising records. You can also delete records through your browser; blocking every cookie may affect sessions and forms. Withdrawal does not retrospectively invalidate earlier lawful processing.

The preference form also works without JavaScript. You may be asked again if the preference cookie is deleted, expires or its version changes. See the Personal Data Notice (KVKK) for rights and requests.

6. Sign in with Google

Google Identity Services provides the Google button on sign-in and registration pages; your browser connects to Google servers on these pages. Google may process your IP address, browser information and technical data relating to its own session. This service is separate from Google Workspace email and optional analytics/advertising tools; analytics or advertising consent does not accept an account agreement. Data for account creation, session management and account security is processed to establish/perform the service and protect its security, subject to applicable conditions in Article 5 of the KVKK. Google services may involve overseas processing; the necessary transfer mechanism and related rights are addressed under the Personal Data Notice (KVKK).