What is a cookie?
A cookie is a small text file saved to your device by your browser when you visit a website. It allows the site to recognise you within the same session, to remember your preferences or to measure visitor behaviour. Similar technologies include the local storage area of the browser; this page explains our use of local storage alongside cookies.
Our use of cookies on this site
As Karaca Technology, we use only technically necessary cookies on the site. There is no ad network, remarketing code, social media tracking pixel or behavioural analytics tool on the site. Apart from the necessary cookies, no cookie runs without your consent — if you have no consent record, all optional categories are deemed to be switched off.
Two of the necessary cookies are created only in the administration panel at /yonetim, that is, when a content manager logs in; they are not written to the browser of a visitor who merely browses the site. The third cookie is the record that remembers your cookie preference on this page and is written only when you state a preference. In addition, as the site is served through Cloudflare, Cloudflare may write its own necessary security cookies (__cf_bm, cf_clearance) to your browser when its security features are enabled.
Cookies and similar technologies we use
Necessary cookies
- authID — Administration panel session cookie. It is created when an administrator logs in and is deleted when the browser is closed. It is not created on the visitor side.
- OtrmID — The cookie written when “remember me” is selected in the panel. It is valid only on the /yonetim path and lives for at most 60 days. It is not created on the visitor side.
- ktCerezRiza — Stores your cookie preference (which categories you have consented to, the date of the preference and the version of the text). It expires after 180 days, after which your preference is requested again. So that it can be read without being sent to the server, the same record is also held in your browser’s local storage area under the name ktCerezRiza.
- __cf_bm — Cloudflare’s bot management cookie; it tells whether a request comes from an automated tool or from a real visitor. It is written only if Cloudflare’s bot protection features are enabled and expires after 30 minutes of inactivity. Written by Cloudflare (third party).
- cf_clearance — Records that you have passed a Cloudflare security check so that you are not challenged again on every page. The check may be a visible one or a JavaScript detection running in the background. It is written only if Cloudflare’s security checks or JavaScript detections are enabled. Written by Cloudflare (third party).
- cf.turnstile.u — Not a cookie but a local storage record. The Cloudflare Turnstile verification widget on the contact form runs only once its key is defined in the administration panel; it is loaded when you interact with the form and writes this record to your browser’s local storage area on Cloudflare’s domain (challenges.cloudflare.com). The record holds a value generated by Cloudflare and the time the record was written; it is not written on our site’s domain and cannot be read by our site. A local storage record has no expiry date of its own; you can delete it with your browser’s cookie and site data clearing settings. Written by Cloudflare (third party).
Categories not in use
- Functional cookies: there is currently no cookie of this kind on the site.
- Analytics cookies: no measurement tool is installed on the site; the measurement tag is never loaded. If a measurement identifier is defined in the administration panel, the tag is printed only from that point on and runs only if you have consented.
- Marketing cookies: no ad network or remarketing code is used.
The cookie inventory table further down this page is the current list of the cookies defined in the system, updated from the panel. If you notice a difference between the text and the table, the table is the one to be taken as the basis; please let us know.
Legal basis
Under the Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and European Union legislation, cookies that are strictly necessary for the site to work do not require consent; they fall within the scope of legitimate interest. Explicit consent is required for every other cookie category. Consent is not deemed to have been obtained through pre-ticked boxes or by continuing to use the site; for this reason, optional categories arrive switched off by default in our cookie window, and the “Reject” button is just as prominent as “Accept”.
How do you manage your preference?
On your first visit to the site you will see a cookie notice at the bottom of the screen. From there you may accept all, reject all, or make a category-by-category choice in the Cookie Settings window. Once you have given your preference, you may reopen the window at any time using the cookie button that appears in the bottom left corner, and change or entirely withdraw your consent. The Cookie Settings button in the left-hand column of the legal documents opens the same window.
Your preference record becomes invalid after 180 days, or when the scope of this text changes; in both cases you will be asked again. If you wish to delete your record, you may use your browser’s cookie and site data clearing settings — this deletes both the ktCerezRiza cookie and the local storage record.
Managing cookies from browser settings
You may also block or delete cookies from your browser settings. The relevant sections are usually found under these names: Chrome — Settings › Privacy and security › Third-party cookies; Firefox — Settings › Privacy & Security › Cookies and Site Data; Safari — Settings › Privacy; Edge — Settings › Cookies and site permissions. Blocking the necessary cookies makes it impossible to log in to the administration panel; on the visitor side, as your cookie preference cannot be remembered, the notice will be shown again on every visit. When Cloudflare asks you to complete a security check, you may be asked to complete it again as you move between pages if the cf_clearance cookie is blocked.
Third-party content and links
There is no third-party advertising or tracking code on our site. A YouTube or Vimeo video may be embedded in article content; on a page containing such a video the platform concerned may write its own cookies, and this is subject to that platform’s policy. We also give plain links to platforms such as WhatsApp, LinkedIn, Instagram, Facebook and GitHub; no data reaches these platforms until you click the link.
The site is served through Cloudflare’s content delivery network and security layer. When its security features are enabled, Cloudflare may write the __cf_bm and cf_clearance cookies listed above; these cookies are necessary for the site to run securely, do not depend on your consent and are subject to Cloudflare’s own cookie disclosures. On the Contact page, once its key is defined in the administration panel, the Cloudflare Turnstile verification widget is also loaded: it is loaded only when you interact with the form (for example, when you click into a field or move to one with the keyboard), runs inside a frame on Cloudflare’s domain (challenges.cloudflare.com) and writes no cookie or local storage record on our site’s domain; on its own domain it leaves the cf.turnstile.u local storage record listed above.
Changes
Whenever a new feature requiring cookies is added to the site, this policy and the inventory above are updated, and your consent is requested again if necessary. For your questions you may write to [email protected], and for detailed information you may read our Privacy Notice (KVKK) and Privacy Policy pages.
Last updated: October 26, 2026
Cookies used on this site
| Cookie | Provider | Purpose | Duration | Category | Party |
|---|---|---|---|---|---|
| authID | Karaca Technology | Administration panel session cookie (PHP session). It is created only when a /yonetim panel address is opened; no session is started on visitor-facing pages. | Session (deleted when the browser is closed) | Essential | First party |
| OtrmID | Karaca Technology | Recognises your device when the remember me option is selected in the administration panel. It is valid only under the /yonetim path and is never sent to visitor-facing pages. | 60 days | Essential | First party |
| ktCerezRiza | Karaca Technology | Stores the choice you make in the cookie consent window so that you are not asked again on every visit. It holds no identity information and no tracking data. | 180 days | Essential | First party |
| __cf_bm | Cloudflare, Inc. | Cloudflare bot management cookie: it tells whether a request comes from an automated tool or from a real visitor. The site is served through Cloudflare; this cookie is written only when Cloudflare’s bot protection features (Bot Fight Mode / Bot Management) are enabled and expires after 30 minutes of inactivity. | 30 minutes | Essential | Third party |
| cf_clearance | Cloudflare, Inc. | Records that you have passed a Cloudflare security check (a visible check or a background JavaScript detection) so that you are not challenged again on every page. The site is served through Cloudflare; this cookie is written only while Cloudflare’s checks or JavaScript detections are enabled. The contact form’s Turnstile widget does not write it as it is not used in pre-clearance mode. | Per challenge validity setting (30 minutes by default) | Essential | Third party |