1. What Is a Cookie?
Cookies are small text files placed on your device (computer, phone, tablet) by your browser when you visit a website. They enable the site to recognize you, remember your language preferences, maintain your session and measure performance.
Local storage (localStorage), session storage (sessionStorage) and similar tracking technologies are also covered by this policy.
2. Types of Cookies
Cookies can be classified along several dimensions:
- By duration — Session cookies (deleted when the browser closes) / Persistent cookies (stored for a specified period)
- By party — First-party (set by the site itself) / Third-party (set by embedded service providers)
- By purpose — Strictly necessary / Functional / Analytics / Marketing
3. Cookies We Use
3.1 Strictly Necessary Cookies
These cookies are required for the core functionality of the site and cannot be disabled. They are typically set as a result of user actions (such as logging in or changing language). They may be processed without explicit consent under KVKK Article 5/2-c (necessary for the establishment or performance of a contract) and 5/2-f (legitimate interest), and GDPR Article 6(1)(f).
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| i18n_redirected | Ecolarium (1st-party) | Stores the user's language preference (TR/EN/SW) so they are not redirected on every visit | Session |
| strapi_jwt | Ecolarium (1st-party) | Authentication token for the Strapi admin panel (currently not used on the public website; would activate only if user login is enabled) | 30 days |
3.2 Analytics Cookies — Consent-Based
A Google Analytics 4 integration may be used to understand site usage and improve content quality. These cookies are activated only after explicit user consent. If declined, the site's core functionality continues to work unaffected.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google LLC (3rd-party) | Distinguishing unique visitors | 2 years |
| _ga_<container> | Google LLC (3rd-party) | Session state and interaction tracking | 2 years |
| _gid | Google LLC (3rd-party) | Distinguishing unique visitors | 24 hours |
3.3 Marketing / Advertising Cookies
We do **not** use marketing or advertising cookies on our website. We do not engage in behavioral advertising, retargeting or transfer of data to third-party advertising networks.
4. Third-Party Services That Do Not Set Cookies
The following third-party services are used on our website and **do not set cookies**, but limited technical data (notably your IP address) is transmitted to the relevant provider's servers when the page is rendered:
- OpenStreetMap (map display via Leaflet) — Map tiles are loaded from tile.openstreetmap.org; no cookies are set; your IP address is recorded in OSM Foundation server logs.
- Google Fonts — Font files are loaded from fonts.googleapis.com / fonts.gstatic.com; no cookies are set; your IP address is transmitted to Google.
5. Legal Grounds
Our cookie processing is based on the following legal grounds:
- Strictly necessary cookies: KVKK Art. 5/2-c (establishment/performance of a contract) and 5/2-f (legitimate interest) — GDPR Art. 6(1)(f)
- Analytics cookies: KVKK Art. 5/1 (explicit consent) — GDPR Art. 6(1)(a)
- Third-party service access (OpenStreetMap, Google Fonts): legitimate interest (delivering the content the user has requested)
6. Managing Your Cookie Preferences
You may accept, reject or later change your preferences for consent-based cookies (analytics, marketing etc.) via the consent interface displayed on our site. As we currently do not use any non-essential cookies, no consent banner is shown; once analytics cookies are activated, the banner will appear.
We retain your refusal even after the browser is closed. You may withdraw your consent at any time.
7. Managing Cookies Through Your Browser
In addition, all browsers allow you to view, delete and block future cookies:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Preferences → Privacy & Security → Cookies and Site Data
- Apple Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions
If you disable strictly necessary cookies (e.g., language preference), parts of the site may not function correctly; the language selection may reset on every page load.
8. Third-Party Policies
You can find the privacy and cookie policies of the third-party services used on our website at the following addresses:
- OpenStreetMap Foundation: osmfoundation.org/wiki/Privacy_Policy
- Google (Fonts and, when activated, Analytics): policies.google.com/privacy
9. Data Retention Periods
Retention periods for cookie-based data are specified in the tables above. Server access logs (IP address, visit time, requested URL) are retained for a maximum of 12 months for security and audit purposes, then automatically deleted.
10. Data Subject Rights
Pursuant to KVKK Article 11 and GDPR Articles 15-22, you have the right to: be informed whether your personal data is being processed, request information thereof, request correction of inaccurate data, request deletion or destruction, object to processing, and seek redress for damages arising from automated decision-making. For details, see our "Personal Data Protection Notice" page.
11. Updates to This Policy
This policy may be updated due to legislative changes, technology renewals or business process changes. Material updates will be published on this page and the "Last updated" date at the top will be refreshed. We recommend reviewing this policy periodically.
12. Contact
You may direct questions, requests or complaints regarding our cookie usage to [email protected] or in writing to [Address]. Pursuant to KVKK Art. 13/2, applications are answered within 30 days at the latest.