1. About This Notice

This Cookie & Local Storage Notice explains which cookies and similar browser storage technologies SOSPITA YAZILIM LIMITED ŞİRKETİ (“Sospita”, “we”, “us”) uses on its corporate website, why we use them and how you can control them.

It supplements our Privacy Policy, which explains how we process personal data more generally.

2. Cookies and Browser Storage We Use

Cookies are small text files that a website stores in your browser. Websites can also keep information in your browser using local storage (which remains until it is deleted) and session storage (which is deleted when the browser tab or window is closed).

Sospita does not set its own cookies on the public pages of this website. We use a small number of local storage and session storage entries, listed below. We do not use advertising, marketing or cross-site tracking technologies.

Name

Type

Party

Purpose

Retention

Category

sospita_privacy_consent

Local storage

First party

Remembers your privacy choice and the version of the choice you made

Up to 12 months, or until you change your choice or clear your browser storage

Strictly necessary

sospita_campaign

Session storage

First party

Keeps the campaign source (UTM parameters), landing page and referring website of your visit so they can be attached to analytics events and forms

Until the browser tab is closed, and no longer than 24 hours

Optional analytics

sospita_lpv:…

Session storage

First party

Notes that a campaign page view has already been counted in this tab, so it is not counted twice

Until the browser tab is closed

Optional analytics

Optional analytics entries are created only after you allow analytics, and are removed when you withdraw that choice.

3. Strictly Necessary Technologies

Some technologies are needed to deliver the website securely and to provide the services you request. They are always active and do not require your consent. They include:

  • delivery of the website and its content, including images and documents;

  • protection of forms and the website against spam, abuse and automated traffic;

  • storing your privacy choice;

  • sending the contact, demo or privacy request you submit.

Authentication cookies are used only for authorized administrative access to the restricted administration area of the website. They are not set for public visitors.

4. Privacy Preference Storage

When you accept or reject optional analytics, we store your choice in your browser under sospita_privacy_consent, so we do not ask you again on every page. The entry contains your choice, the version of the choice and the date it was made. It does not identify you.

We ask again after 12 months, or earlier if we materially change how optional analytics works.

5. Optional First-Party Analytics

If you allow analytics, we record a limited set of first-party measurement events to understand how our campaign and product pages are used:

  • views of campaign landing pages;

  • clicks on App Store, Google Play and web application links;

  • resource downloads;

  • successful submission of demo and contact forms.

These events are stored by Sospita in our own database. They do not include your IP address, browser user agent or any persistent visitor identifier, and they are not used to build advertising or cross-site profiles. They are retained for approximately 18 months and are automatically deleted on a daily schedule.

If you do not allow analytics, or if you reject it, these events are not recorded.

6. Campaign Attribution

If you allow analytics and you arrive through a campaign link, we keep the campaign source (UTM parameters such as source, medium and campaign), the landing page and the domain of the referring website in session storage for the current browser tab. This information is attached to the analytics events described above so we can understand which campaigns are useful.

It is deleted when you close the tab, after 24 hours, or immediately when you withdraw your analytics choice.

7. Forms and Campaign Information

Your contact, demo or privacy request is always delivered and stored, whatever your analytics choice. The information you enter in a form is processed as described in our Privacy Policy.

Campaign source information (UTM parameters, landing page and referring domain) is attached to a form submission only if you have allowed analytics. If you have not, the form is sent without this information, and no analytics event is recorded for the submission.

8. Third-Party Services

We use the following service providers to operate the website. They act on our behalf and are listed in our Subprocessors and Service Providers information.

  • Cloudflare delivers and protects the website. Its Turnstile service protects our forms against spam and automated abuse; to do so it processes technical signals from your browser and device, and it may use browser storage needed for that check.

  • Supabase provides our database, authentication and file storage, including images and documents shown on the website. These files are delivered through Cloudflare’s network, which may set a security cookie such as __cf_bm to distinguish legitimate visitors from automated traffic.

These technologies are strictly necessary for security and delivery and are managed by the respective providers.

Links to the App Store and Google Play take you to external websites. Their own privacy terms apply once you leave our website.

9. Global Privacy Control and Do Not Track

If your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, we treat it as an objection to optional analytics. Optional analytics and campaign attribution stay off, we do not show the analytics prompt, and campaign information is not attached to your forms, even if you previously allowed analytics. Strictly necessary technologies continue to work.

10. How to Change Your Privacy Choices

You can allow or withdraw optional analytics at any time on our Privacy Settings page, which is linked in the footer of every page. Withdrawing your choice stops further analytics and removes the optional analytics entries from your browser.

You can also delete cookies and browser storage, or block them, in your browser settings. If you block strictly necessary technologies, some parts of the website, such as forms, may not work.

11. Retention

  • Your privacy choice: up to 12 months in your browser.

  • Campaign attribution and page view markers: until the browser tab is closed, and campaign attribution no longer than 24 hours.

  • First-party analytics events: approximately 18 months in our database, automatically deleted on a daily schedule.

  • Form submissions: as described in our Privacy Policy.

12. Changes to This Notice

We may update this Notice when the technologies we use or the applicable requirements change. The current version and its effective date are shown on this page. Where a change affects your choices, we will ask for your choice again.

13. Contact

If you have questions about this Notice or our use of cookies and browser storage, please contact us:

SOSPITA YAZILIM LIMITED ŞİRKETİ
Email: info@sospita.io