Cookie Policy

A cookie is a small text record placed in your browser by the website you visit and read back on subsequent requests. Cookies are used to maintain sessions, remember language preferences, provide security and measure site traffic. This policy explains the cookies used on the website served at wxdigitals.com, together with browser local storage (localStorage) and session storage (sessionStorage) records which, although not cookies, serve a similar function. It has been prepared following the transparency approach of the Guidelines on Cookie Practices published by the Turkish Personal Data Protection Authority, and should be read together with our Privacy Policy. The information here is derived from the site's current technical setup.

We operate as a sole proprietorship trading under the name WxDigitals. As there is no separate legal entity, these documents use the term "business" rather than "company". Our tax office is Ümraniye and our tax identification number is 6560576690. For the purposes of Law No. 6698 on the Protection of Personal Data, the data controller is the natural person merchant who owns the business. Our place of business is in Ümraniye, Istanbul. You may reach us at [email protected] for general matters and at the separate address [email protected] for personal data requests. This policy covers only wxdigitals.com and its sub-paths; we are not responsible for the cookie practices of third-party websites you reach through links on our site.

Only one first-party cookie, for which no explicit consent is required, is necessary for the site to work: the NEXT_LOCALE cookie that remembers the language you selected. Its value can only be "tr" or "en", it carries no data capable of identifying you, it is written with sameSite=lax and its lifetime is 31,536,000 seconds, that is 365 days. If this cookie is blocked, your language preference resets on every visit.

The dl_ prefixed cookie used for free resource downloads, described as a second strictly necessary cookie in the previous version of this text, is no longer created; the download flow carries its token in a request header rather than in a cookie. Blocking cookies therefore does not prevent file downloads.

Three cookies are created by the authentication library in the browser of staff who sign in to the administration panel: authjs.session-token, which carries the session (prefixed __Secure- over secure connections); authjs.csrf-token, which protects against cross-site request forgery (prefixed __Host- over secure connections); and authjs.callback-url, which holds the address to return to after sign-in. All three are written as httpOnly with sameSite=lax. The session cookie's lifetime is not customised in our code and therefore follows the library default of 30 days; the other two are deleted when the browser session ends. These cookies are never created for site visitors, as the site offers no public registration, account creation or sign-in flow.

Some records that are not cookies but require the same transparency are held in your browser's local storage and are not sent to our server on their own:

• wxd_cookie_consent — stores your choice in the cookie banner as "accepted" or "rejected".
• theme — your light or dark theme preference.
• ann-dismissed — the text of the announcement bar you dismissed.
• wxd_exit_intent — when the exit-intent dialog was last shown; prevents it reopening for seven days.
• wxd_kaynak — which campaign or referral link brought you to the site. This record is kept persistently only if you choose "Accept" in the cookie banner; details are in the next section.

Session storage holds two records: wxd_kaynak, carrying the source information within the same tab, and a key prefixed kaynak-goruldu that stops a resource page's view counter from counting again. Both are deleted when you close the tab.

If you arrived through an advertising or referral link, the utm_source, utm_medium and utm_campaign parameters in the address, the first 40 characters of any ?ref= referral code and the first 500 characters of the first external address that referred you are collected in a single record named wxd_kaynak. Referrals from our own domain are not recorded.

By default this record is held ONLY in session storage: it is deleted when you close the tab and leaves no persistent trace on your device. It is stored persistently only if you choose "Accept" in the cookie banner; if you choose "Reject", any persistent copy left earlier is deleted as well.

The source information reaches our server only when you submit a form on the site of your own volition, and is then added to your request record; knowing which channel a request came through is the legitimate interest on which this processing relies. The keys wxd_utm, wxd_refcode and wxd_ref described in the previous version of this text are no longer written, and any old copies on your device are deleted when you visit the site again.

Tools that measure visitor behaviour and evaluate advertising performance are loaded only if you select "Accept" in the cookie banner. Until consent is given, none of their scripts is added to the page, and therefore none of their cookies is created. The tools that may be activated where used are: Google Analytics 4, Google Tag Manager, the Google Ads conversion tag, Meta (Facebook) Pixel, Microsoft Clarity and Yandex Metrica. Their measurement identifiers are not hard-coded; they are configured from the administration panel and only those actually configured will run. These tools set their own cookies under their own rules; the names and lifetimes of those cookies are set out in the relevant provider's own cookie documentation.

Unless you give consent, no third-party cookie is created on the site. The NEXT_LOCALE cookie and the administration panel cookies listed above are all first-party, that is, written directly by wxdigitals.com. If you do give consent, the measurement and marketing tools may write third-party cookies from their own domains.

The site contains no embedded maps, no embedded video players, no social media feeds, no third-party live-chat widget and no bot verification service. The AI chat assistant on our pages is our own and sends no request from your browser to a third party; the text you type is passed through our server to a language model located abroad, and that transfer is explained in the KVKK Disclosure Statement.

The typeface we use is downloaded to our own server at build time, so your browser sends no request to an external font server. Social media and WhatsApp links are plain links; no request reaches those platforms unless you click them.

Strictly necessary and technical cookies rest on Article 5(2)(c) of Law No. 6698, being directly related to the formation or performance of a contract, and on Article 5(2)(f), our legitimate interest; no separate explicit consent is required for them. Analytical and marketing cookies are processed only with your explicit consent under Article 5(1) of the same law, and withholding that consent does not prevent you from using any service. Server traffic logs kept at the hosting infrastructure level rest on the obligation introduced by Law No. 5651 and on the ground of express provision by law in Article 5(2)(a). Our duty to inform as a service provider under Law No. 6563 on the Regulation of Electronic Commerce is also discharged through this policy.

On your first visit, a cookie banner with "Reject" and "Accept" options is shown at the bottom of the screen. Your choice is stored not in a cookie but in your browser's local storage under the key wxd_cookie_consent; our server therefore cannot read your choice, and the choice applies only to that browser and device. The banner offers no category-by-category selection: all measurement and marketing tools depend on a single preference, so the banner works on an accept-all or reject-all basis.

You can withdraw your consent at any time, as easily as you gave it. The "Change my cookie preferences" button at the end of this page and in the footer of every page of the site reopens the cookie banner and shows your current preference; the new choice you make replaces the previous one. If you have already made a choice, you can close the banner without making a new one by using the close button or pressing the Esc key, in which case your previous preference remains unchanged.

When you withdraw your consent, the measurement and marketing scripts may already have loaded on the page you are viewing. So that they do not keep running, we reload the page immediately after saving your choice and tell you so in the banner; after the reload, none of those scripts is added to the page. Third-party cookies created earlier do, however, remain in your browser; to delete them you can use the browser settings described in the next section. Because your choice is held in local storage, clearing your browser data also deletes your preference, and the banner is shown again on your next visit.

You can also manage cookies at browser level. In Google Chrome, use the "Privacy and security" section of Settings; in Mozilla Firefox, the "Cookies and Site Data" area of the "Privacy & Security" tab; in Apple Safari, the "Privacy" tab of the Settings or Preferences menu; and in Microsoft Edge, the "Cookies and site permissions" section. There you can block cookies, delete existing cookies or allow them on a per-site basis. Mobile browsers use similar headings. Please note that blocking strictly necessary cookies may cause functional loss, such as your language preference not being retained and free resource downloads not completing. Browser tracking-protection settings may also block measurement scripts independently.

Web server access logs kept at the hosting infrastructure level inherently contain IP addresses, timestamps, request paths, status codes, referrer addresses and browser information. Our business uses its own internal counter, which converts these logs into day-level counts only: unique visitors, page views, bot requests, referral source type, most-viewed pages and status code distribution. Raw IP addresses and browser information are not written to the database; an IP address is held only temporarily in memory to derive the unique count, and summary rows older than 365 days are deleted automatically. This counter is not a third-party analytics service and the data never leaves our server.

All measurement and marketing tools that may load if you give consent in the cookie banner belong to providers established abroad. In that case your browser's IP address and browsing information are transmitted directly to that provider's servers as you view the page, and this transmission constitutes a transfer abroad. If you do not give consent, no script belonging to these tools is added to the page and no transfer takes place.

The strictly necessary cookie and the local and session storage records are not sent anywhere on their own. However, when you submit a form, the source information reaches our server together with the other fields of your request; as the channel to which our request notifications are delivered is located abroad, this data is also transferred abroad.

The scope and recipients of transfers abroad, and their position under Article 9 of Law No. 6698, are explained in the KVKK Disclosure Statement.

In line with the principle of transparency, we also set out here two transfers that operate entirely independently of cookie consent. The first is that text you type or paste into the artificial intelligence tools and chat assistant on the site is sent to Google's generative AI service so that a response can be produced. The second is that when you submit a contact or enquiry form, your first name, surname, e-mail address, telephone number, service and budget details and part of your message are sent through the Telegram Bot infrastructure so that we receive an instant notification. Both flows occur even if you have rejected cookies, whenever you use the relevant tool or submit the form. We therefore recommend not entering personal or confidential information into the AI tools; details are set out in our Privacy Policy.

The lifetimes of cookies and similar records are as follows:

• NEXT_LOCALE language preference cookie: 365 days.
• Administration panel session cookie: the library default of 30 days. The other two administration panel cookies last until the end of the browser session.
• The local storage records wxd_cookie_consent, theme, ann-dismissed and wxd_exit_intent do not expire on their own; they remain on your device until you clear your browser data.
• wxd_kaynak: in session storage it is deleted when you close the tab. The persistent copy kept if you give consent is deleted when you withdraw that consent.
• The view record in session storage is deleted when you close the tab.
• Our own traffic summaries are deleted automatically after 365 days.

The lifetimes of third-party cookies loaded if you give consent are determined by the relevant provider's own policies; these cookies are not deleted by us when you withdraw consent and must be cleared from your browser settings.

Under Article 11 of Law No. 6698 you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether the data is used in line with that purpose; to know the third parties to whom the data is transferred in Türkiye or abroad; to request correction if the data is incomplete or inaccurate; to request erasure or destruction where the conditions are met; to request that such operations be notified to third parties to whom the data was transferred; to object to a result against you arising from analysis solely by automated systems; and to claim compensation for any loss you suffer. You may send your application to [email protected], or in writing to our address in Ümraniye, Istanbul using the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller; requests are concluded within thirty days at the latest.

This Cookie Policy is updated where legislation changes, where a new measurement or marketing tool is introduced, or where the site's technical setup changes. The current version is published on this page and takes effect upon publication; the applicable version is determined by the update date shown at the top of the page. If a material change is made to our use of cookies, the consent banner may be shown again so that your preference can be obtained afresh. You may send questions and comments about this policy to [email protected], and requests concerning personal data to [email protected]. The courts and enforcement offices of Istanbul (Anatolian) shall have jurisdiction over any dispute arising from this policy.