Cookie Policy

1. Scope

This Cookie Policy applies to the public website at corlucepte.com, operated by […], and to the administration panel and the web business panel attached to the same domain (the "Site"). The Çorlu Sosyal Şehir mobile app uses no cookies; it keeps the session in the device's own secure storage, and the data the app processes is described in the Privacy Policy. This policy forms part of the Privacy Policy and is read together with it.

The Site is installed for one city (Çorlu); cookies are written only on this installation's domain and are not shared with any other city's installation.

2. What a cookie is

A cookie is a small piece of text that a site you visit writes to your browser and reads back on your later visits. Cookies are divided into first-party cookies, written by the party operating the site, and third-party cookies, written by another domain; by lifetime there are session cookies, deleted when the browser closes, and persistent cookies, which remain for a set period. The browser's local storage (localStorage) can be used for similar purposes; this policy covers it as well.

3. Cookies the Site uses

The complete list of cookies the Site writes is below. None is used for advertising, profiling or cross-site tracking.

• theme — public site. Holds your chosen appearance (light/dark) so that the page is rendered from the server with your preference and does not change colour while loading. It carries no identity, only a theme name. It is persistent, with a lifetime of one year; when the page is loaded over an encrypted connection it is sent only over encrypted connections. It is not written if the theme switch is never used.
• Session cookies — administration panel and web business panel. When you sign in to a panel, the authentication layer writes a session cookie to recognise your session. Without it the panel cannot keep you signed in; it cannot be read from JavaScript and is sent only over encrypted connections. Its lifetime depends on the session settings and it is deleted when you sign out. The public site requires no sign-in and therefore has no session cookie.
• locale — administration panel and web business panel. Holds the language you chose in the panel (Turkish/English); the interface and server requests use that language. On the public site the language is in the address itself and no cookie is needed.
• Appearance preference (localStorage) — web business panel. Your dark-mode choice is kept in the browser's local storage so the page opens in the right colour. It is not sent to the server.

Beyond these, the Site allows the authentication layer to write short-lived technical cookies for session integrity (for example protecting a request against forgery); these too are first-party and strictly necessary.

4. What is not used

We state these explicitly because most sites have them by default and this one does not:

• No analytics or measurement cookies. The Site uses no third-party service for visitor counting, heat maps or session recording. The server keeps short-lived, aggregated technical logs to monitor the health of the service; these arise from the request itself, not from a cookie.
• No advertising cookies. The Site contains no ad network, retargeting pixel or social media plugin. Social media links are plain links; nothing is loaded before you click.
• No third-party fonts or scripts. Fonts and scripts are served from the Site's own domain.
• No cross-site tracking. The Site's cookies are read only on its own domain; no cookie is shared with any other site.

5. Requests that go to third parties

There is a single case in which your browser makes a request to a third party even without a cookie: the map in the administration panel loads its map tiles from OpenStreetMap servers. In that request the IP address of the panel operator's browser and the requested tile reach OpenStreetMap; no resident data goes and OpenStreetMap writes no cookie. The public site and the web business panel make no third-party requests. A business paying by card is redirected, at the payment step, to the payment institution's own page (iyzico or PayTR); that page's cookies belong to the payment institution and are subject to its cookie policy.

6. Legal basis

All the cookies above are either necessary for the Site to work or used solely to remember a preference you gave (theme, language). Cookies of this kind rest, under Article 5/2 of the KVKK, on the legitimate interest of the controller and on being necessary to provide the service; they do not require explicit consent. That is why the Site has no cookie consent banner: since there is no consent-based cookie, there is no question to ask. If a cookie requiring consent is ever added, this policy is updated and your consent is requested before that cookie is written.

7. Managing cookies

• Theme: changed with the theme switch on the public site; if you delete the theme cookie in your browser, the Site returns to the installation's default appearance.
• Language: changed with the panel's language button.
• Session: signing out of the panel deletes the session cookie.
• Browser settings: every browser lets you view cookies, delete them individually and block them for specific sites. If you block the Site's cookies entirely, the public site keeps working (your theme preference is not remembered); you cannot sign in to the panels, because a session cannot be maintained without a cookie.
• Local storage: your browser's option to clear site data also deletes the web business panel's appearance preference.

No special handling is done for the browsers' "Do Not Track" signal, because the Site does no tracking in the first place.

8. Personal data

The session cookie is associated with your panel account and to that extent personal data is processed; the purpose is solely to maintain and secure your session. Session records (token, IP address, browser information) are kept as described in the Privacy Policy. The theme and locale cookies carry no identity. For your rights and how to apply, see the Privacy Policy and the KVKK Disclosure Notice; the contact for requests is […], support destek@corlucepte.com.

9. Changes

When a new cookie or third-party request is added to the Site, this policy is updated at the same time and the version date is refreshed. If you notice a difference between what this policy says and what the Site does, write to destek@corlucepte.com; the text changes when the code changes, and a visitor who tells us is part of that.