Short summary
- We use cookies strictly necessary for the site to work and stay secure, and cookies that remember the theme, language and cookie choices you make.
- We use Google Analytics cookies to measure visits in aggregate only if you click "Accept" in the cookie banner; we use no advertising or tracking cookies.
- You can change your choice via the "Cookie preferences" link at the bottom of every page. Cloudflare Turnstile is used for bot protection.
1. What is a cookie?
A cookie is a small text file that a website you visit saves in your browser. The browser's local storage and session storage can also be used for similar purposes. This policy explains these technologies as used on the Ufkon site (ufkon.com) and forms part of the KVKK Privacy Notice.
2. Cookies we use
All of the cookies below are first-party cookies and need no consent. Google Analytics cookies are described separately in section 3.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| ufkon-session | Strictly necessary | Keeping your session and sign-in state; cannot be read by browser scripts | 120 minutes of inactivity |
| XSRF-TOKEN | Strictly necessary | Protecting forms against forged requests (CSRF) | Same as the session |
| device_id | Strictly necessary (security) | Preventing fraud and multiple accounts at steps such as login codes and project requests; the server stores only an irreversible hash; cannot be read by browser scripts | 2 years |
| ufkon_locale | Functional | Remembering the site language you choose (Turkish/English); written only when you pick a language in the language switcher or the language suggestion bar | 1 year |
| theme | Functional | Remembering the light/dark appearance you choose in the dashboard; written only when you change it | 1 year |
| ufkon_cerez | Functional | Remembering your choice in the cookie banner (whether you allow analytics cookies); written only when you choose | 1 year |
Under the KVKK Guide on Cookie Practices, these are cookies that do not require explicit consent: strictly necessary for the service you request (session, authentication, user-centric security) or for interface personalisation. Therefore no consent is asked of you for them. No remember-me cookie is used.
3. Analytics cookies: Google Analytics (only with your consent)
To measure, as aggregate statistics, which pages of the site are read and where visitors come from, and to improve the site based on these measurements, we use the Google Analytics 4 service of Google LLC (USA). These are third-party analytics cookies and are set only with your explicit consent (KVKK Art. 5/1): unless you click "Accept" in the cookie banner, the Google Analytics script is not loaded and no measurement data is sent to Google. The analytics option is off at first; "Reject" is as visible as "Accept", and rejecting does not limit any function of the site.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics (third party; written on our domain) | Distinguishing your browser with a random identifier to count unique visitors and visits | 1 year |
_ga_<measurement ID> |
Google Analytics (third party; written on our domain) | Measuring the number and length of sessions | 1 year |
- What is sent: the address of the page visited (without the query part), the address of the referring page (without the query part), page title, browser and device type, screen size, language, time of visit, the random identifier in the cookie and an approximate location (country/city) derived from your IP address. Google states that IP addresses are not logged in Google Analytics 4. Your name, email address, phone number or account ID are not sent.
- Where it is not loaded: member and staff dashboards; sign-in, registration and verification screens; the project request form; pre-feasibility, survey, notification and KVKK request pages. On these pages Google Analytics does not run even if you have consented.
- Restrictions: Google signals and ad personalisation are off; the data is not used for advertising, remarketing or personal targeting. In our Google Analytics account detailed event data is kept for 2 months; after that only aggregate reports remain.
- Transfer abroad: Google Analytics data is transferred to Google LLC (USA) and its servers in the USA and other countries. The ground for this transfer is explained in section 6 of the KVKK Privacy Notice.
- Withdrawing consent: choose "Reject" via the "Cookie preferences" link at the bottom of every page; measurement stops and the
_gacookies are deleted from your browser. Withdrawal does not affect the lawfulness of processing before it. You can also delete cookies in your browser settings.
4. Third party: Cloudflare Turnstile
At steps open to abuse, such as requesting a login code and publishing a project request, the Turnstile service of Cloudflare, Inc. is used to check that the request comes from a human. While running on the page, Turnstile sends browser and device signals and your IP address to Cloudflare; our server asks Cloudflare for the check result. The ground for this processing is our legitimate interest in platform security (KVKK Art. 5/2-f); for transfers abroad, section 6 of the KVKK Privacy Notice applies. The technologies Cloudflare uses in this process are subject to its own privacy policy.
5. Browser storage
| Key | Storage | Purpose | Duration |
|---|---|---|---|
| ufkon.roleCurtainSeen | Session storage | Remembering that the role transition animation in the dashboard has played once in this session | Until the tab is closed |
| Bid envelope key | Local storage | Remembering that the opening animation on the bid comparison screen has played once for the same project request | Until you delete it |
This information stays only in your browser, is not sent to the server and contains no personal data.
6. Cookies we do not use
Apart from Google Analytics in section 3 we use no analytics cookies, and we use no advertising, marketing, social media plug-in or tracking cookies or pixels; fonts and map images are loaded from our own server. If another cookie requiring consent is added in the future, this policy will be updated first, and the cookie will be set only with your explicit consent, after being asked with options that are not pre-ticked and a "Reject" option as visible as "Accept".
7. Deleting and blocking cookies
You can view, delete or block cookies in your browser settings (usually under "Privacy" or "Site data"); browser storage is cleared in the same place. If you block strictly necessary cookies, you may not be able to sign in or submit forms. If you delete the language and theme cookies, the default language and appearance are used; if you delete the cookie-choice cookie, the cookie banner is shown again.
8. Contact
For questions about cookies and your KVKK rights: KVKK request form · info@ufkon.com.
Effective: the date of publication. This English text is a courtesy translation; the Turkish version is the binding text.