1. What this site uses
Until you allow it, this site sets no cookies, neither its own nor any belonging to a third party.
Allow it and Google Analytics measurement starts, and two cookies are written. Section 3 says which cookies, how long they last and how to take the permission back.
There is no login, no session and no advertising here. We use no social media embeds, no external font server and no iframes. Nothing on these pages makes your browser send a request to a domain other than ours, with one exception: if you have allowed measurement cookies, a request goes to Google's tag server.
The site is published in two languages and its pages are built in advance, so our server produces nothing that is specific to you. The quote form is the only part of the site through which you send us information yourself.
The site does keep two records in your browser's local storage. Local storage is a space in your browser where a site can keep short records. Those records stay on your device and are never sent to our server, which is what separates them from cookies. Section 2 lists every record we use.
2. What this site stores in your browser
Two records can exist in your browser's local storage, each one holding a choice you have made. None of them is ever sent to our server.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| theme | Holds the light or dark theme you choose. Written when you use the theme switch, read when a page opens. | Preference, local storage | Until you clear your browser data |
| algoriel.consent | Records whether you allowed measurement cookies. Written when you press one of the two buttons on the band, or turn the switch in section 3. | Preference, local storage | Until you clear your browser data |
Our own measurement script writes nothing to your browser: no cookie, and no record of its own.
Under the guidelines on cookie practices published by the Turkish Personal Data Protection Board, two groups need no consent: records that are strictly necessary for a service you asked for, and preference records written because you used a control yourself. Each record above falls in those two groups, so we do not ask for consent before writing it.
Measurement cookies do NOT fall in those groups. The guidelines do not treat analytics cookies as strictly necessary, so we write them only after you allow them. The table below shows what reaches your browser once you do.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| _ga | Holds the identifier that tells one visitor from another. | First party cookie, written to our domain; what it carries goes to Google | Two years |
| A second cookie whose name starts with _ga | Holds the state of your session. | First party cookie, written to our domain; what it carries goes to Google | Two years |
Refuse, or take your permission back, and neither cookie exists in your browser.
3. How we measure visits
One measurement runs here: Google Analytics. It sets cookies and asks permission, and it measures nothing until you allow it.
Google Analytics runs on Google's measurement tag (gtag.js) directly, with no tag management tool in between. Allow it and the tag loads; refuse it, or take your permission back, and your browser calls no Google domain at all.
What reaches Google is this: the address and title of the page you are on, the referring address, device and browser information, an approximate location, the visitor identifier in the cookie, and the name of the interaction event you triggered (for example "quote form submitted"). No personal data such as an email address, phone number or reference code is sent to Google. The recipient is Google Ireland Limited, and Google processes the data across its own infrastructure, which includes the United States. Allowing the cookies therefore also means a transfer abroad.
The legal basis is explicit consent under Article 5(1) of Law No. 6698, and the basis for the transfer abroad is the explicit consent in Article 9(5) of the same Law. Withdrawing does not undo what came before, but no new record is made after it.
We set the retention period in our Google Analytics account to 14 months. Advertising measurement, remarketing and advertising identifier collection stay switched off; we do not share the data with advertising networks and we do not sell it.
Use the switch below to give permission or take it back. Take it back and your decision is recorded, the cookies Google Analytics wrote are deleted, and the page reloads.
Not allowed. No measurement cookie is written and nothing reaches Google.
Your decision is written to your browser's local storage as the algoriel.consent record described in section 2. It is not a cookie and it never reaches our server. The switch works per browser and per device. Turning it off deletes the cookies whose names start with _ga, and the tag never loads again. If you clear your browser data, the decision goes with it and the band asks once more.
4. Bot check and security
As section 1 says, the quote form is the only part of this site through which you send us information yourself. None of the checks described here stores anything in your browser.
The form carries a hidden field that a person never sees. If that field arrives filled in, we discard the submission silently: nothing is recorded, no email is sent and no file is kept.
We accept at most 5 submissions from the same IP address within one hour. The counter is a file named after the SHA-256 hash of the IP address, so the address itself is never held there. The counter covers a one-hour window. Counter files whose window has passed are deleted by the daily clean-up job.
The bot check uses ALTCHA, which also runs on our own server. Your browser receives a short-lived calculation task, valid for ten minutes, solves it and sends the solution with the form. Our server checks the solution, its signature and its time, and the same solution is never accepted twice. Nothing is written to your browser, no third party takes part, and no request goes to an outside domain.
That request reaches our web server like any other page request, so it appears in the ordinary access log. The access log holds the IP address, the requested address, the browser information (user agent), the referring address and the time. We keep it for 30 days and use it for security, for spotting attacks and for finding faults.
All traffic between your browser and our server runs over HTTPS.
5. Managing what is stored
You can delete what this site keeps in your browser whenever you wish, through your browser's settings for site data.
Clearing that data has two effects. Your theme choice is reset, so the site no longer remembers it. Your cookie decision is removed, so the band asks again. Clearing site data also removes any measurement cookie already written.
To stop the measurement without clearing anything else, use the switch in section 3.
We ask for no consent for the two local storage records, because neither of them needs consent. Measurement cookies are the exception, and the band at the foot of the page is where we ask. It offers Accept and Reject with equal weight, and closing it with the Esc key is neither: until you decide, nothing is written and the band comes back. It links to this policy.
6. Contact
This site is published by Fatih Çalışan, trading as Algoriel.
- Name: Fatih Çalışan
- Brand: Algoriel
- Postal address: Ferhatpaşa Mah. Gülendam Sk. Kiptaş K No: 6 K İç Kapı No: 1 Çatalca / İstanbul
- Email: info@algoriel.io
- Phone: +90 541 565 89 96
- Hosting location: Frankfurt, Germany
Write to us if anything in this policy is unclear.
If you have a question about this policy, write to Fatih Çalışan at info@algoriel.io.