Cookie Policy
This policy explains the cookies and similar technologies (browser localStorage) used on czay.dev and links.czay.dev, their categories, durations and the consent mechanism. For complete information on how personal data is processed, see the Privacy Policy.
- Dokumentnr.
- CZ-HUK-003
- Version
- 3.3
- Gültig ab / zuletzt aktualisiert
- 25. Oktober 2026
- Nächste Überprüfung
- 25. Oktober 2027
- Verantwortlich
- Furkan Özay
- Verbindlicher Text
- Türkisch
1. What Is a Cookie?
A cookie is a small text file stored in your browser when you visit a website. It is used to remember preferences, run the site and measure traffic. You can delete or block cookies in your browser settings at any time.
2. Categories and Legal Basis
- Essential cookies: needed for the site's basic functions and to remember a choice you asked for. No consent is required; the legal basis is KVKK Art. 5/2-(f) legitimate interest.
- Analytics cookies: used to measure traffic and usage. They run only with your explicit consent (KVKK Art. 5/1); if you do not consent, they are never loaded.
- Marketing cookies: used to measure which social content (e.g. Instagram) visits come from and whether they lead to actions like a contact request or a booking (Meta Pixel). They run only with your explicit consent (KVKK Art. 5/1); if you do not consent, they are never loaded and no data is sent to Meta.
No advertising is shown on the site.
3. Cookies We Use
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
czay_milli | czay.dev (first party) | Essential | Keeps a national-holiday window you closed from reopening; stores only "which holiday, which year" | 400 days |
_ga | Analytics | Random identifier that distinguishes visitors (Google Analytics 4) | 2 years | |
_ga_<id> | Analytics | Maintains session state (Google Analytics 4) | 2 years | |
_clck | Microsoft | Analytics | Random identifier that distinguishes visitors and keeps preferences (Microsoft Clarity) | 1 year |
_clsk | Microsoft | Analytics | Joins page views into one session (Microsoft Clarity) | 1 day |
_fbp | Meta | Marketing | Random identifier that distinguishes the browser (Meta Pixel) | 90 days |
_fbc | Meta | Marketing | Identifier from a Meta ad/link click; only when the link carries fbclid | 90 days |
| Turnstile | Cloudflare | Essential | Verification that tells automated submissions apart on forms; active only when a form is opened | Session / provider-defined |
Your language preference is kept in the address (/tr, /en), not in a cookie. The Google Analytics durations above are its defaults; the provider may change them.
4. localStorage Use
Separately from cookies, the following is stored in your browser's localStorage. This data is not sent to a server, stays on your device, and you can remove it by clearing browser data:
| Key | Purpose | Category |
|---|---|---|
cookie-consent | Your cookie consent choice | Essential |
theme | Light/dark theme preference | Essential (preference) |
attribution | Where the visit came from (utm_source, utm_medium, utm_campaign, fbclid) and the first page landed on; added to the contact form as its source. Always for the session; a 30-day persistent copy only with analytics or marketing consent | Session / Analytics or Marketing |
czay:roadmap:<map> | Topics you mark as learned on roadmaps (your progress) | Essential (preference) |
liked:<post> | That you liked a blog post (browser only; never sent to the server) | Essential (preference) |
czay:dismissed-video | The new-video announcement you closed | Essential (preference) |
5. Third-Party Services
- Google Analytics 4: loaded only with your analytics cookie consent; sets the cookies above.
- Microsoft Clarity: loaded only with your analytics cookie consent; collects clicks, scrolling and cursor movement as heatmaps and session recordings. See Microsoft's privacy policy for details.
- Google Tag Manager: loaded if you consented to analytics or marketing cookies; the tags inside follow your consent state (Consent Mode).
- Meta Pixel (Meta Platforms): loaded only with your marketing cookie consent; sets the cookies above. When you submit the contact form, again only with this consent, the submission (with your name and email address hashed using SHA-256) is passed to Meta by our server.
- Cloudflare: form security verification (Turnstile) and image delivery. It collects no personal data; it uses short-lived technical data to tell bots apart.
- YouTube: where content includes an embedded video, YouTube may set its own cookies.
6. Managing and Withdrawing Consent
In the consent banner shown on your first visit you can accept or reject analytics and marketing cookies. You can change your choice and withdraw consent at any time through the Cookie settings link at the bottom of the page; withdrawal does not affect the lawfulness of earlier processing. You can also delete existing cookies or block all of them in your browser settings. If essential cookies are blocked, some site functions may not work.
7. Policy Changes
When the cookies in use change, this policy is updated and the version and date at the top of the document are renewed. Before a new analytics or marketing cookie is added, your consent is requested again.