Cookie Policy
Last updated: 2026-05-24 Effective: 2026-05-24 Version: 1.0
Nakliye360 ("we", "Company") uses cookies and similar tracking technologies on its website (nakliye360.com) and web admin panel to improve user experience, deliver services, and meet legal requirements. This Cookie Policy explains:
- Which cookies we use,
- The purpose of each cookie,
- Retention period,
- How you can manage cookies.
This policy complements Privacy Policy and KVKK Disclosure.
1. What is a Cookie?
A cookie is a small text file stored in your browser when you visit a website. Cookies enable the website to recognise you, keep your session active, remember your preferences, and measure site usage.
Tracking technologies other than cookies:
- Local storage (localStorage, sessionStorage)
- Web beacon (1x1 pixel)
- Tracking pixel (with explicit consent only)
- Device fingerprinting (we do not use)
This policy covers cookies and equivalent trackers.
2. Cookie Categories We Use
Per KVKK Authority guidance and GDPR, we categorise cookies into 4 types:
| Category | Explicit Consent Required? |
|---|---|
| 1. Strictly Necessary | No (legitimate interest) |
| 2. Preferences | No (user preference) |
| 3. Performance / Analytics | Yes |
| 4. Marketing / Advertising | Yes |
3. Detailed List of Cookies Used
3.1. Strictly Necessary Cookies (No Consent Required)
These cookies are essential; without them the website would not function — login, security, language preference.
| Cookie Name | Provider | Purpose | Type | Retention |
|---|---|---|---|---|
authjs.session-token | Nakliye360 (Auth.js v5) | User session | HTTP-only, Secure, SameSite=Lax | Session + 30 days |
authjs.csrf-token | Nakliye360 (Auth.js v5) | CSRF protection | HTTP-only, Secure | Session |
authjs.callback-url | Nakliye360 (Auth.js v5) | OAuth callback redirect | HTTP-only, Secure | Session |
__cf_bm | Cloudflare | Bot management, DDoS | Httponly | 30 minutes |
cf_clearance | Cloudflare | Bot challenge verification | Httponly | 1 year |
n360.cookie-consent | Nakliye360 | Cookie preference state | Standard | 12 months |
n360.lang | Nakliye360 | Language preference (tr / en) | Standard | 12 months |
3.2. Preference Cookies
Remember your preferences to improve user experience.
| Cookie Name | Provider | Purpose | Retention |
|---|---|---|---|
n360.theme | Nakliye360 | Light/dark mode preference | 12 months |
n360.sidebar | Nakliye360 (webadmin) | Sidebar collapsed state | 12 months |
n360.table-prefs | Nakliye360 (webadmin) | Table sort/filter preference | 12 months |
3.3. Performance / Analytics Cookies (Optional — Explicit Consent)
Collect anonymous/aggregate usage data for product development.
| Cookie Name | Provider | Purpose | Retention |
|---|---|---|---|
_ga | Google Analytics 4 | User identification (anonymous) | 2 years |
_ga_<ID> | Google Analytics 4 | Session state | 2 years |
_gid | Google Analytics | User identification | 24 hours |
_gat | Google Analytics | Rate limiting | 1 minute |
Note: Google Analytics loads only when the "Performance" category is enabled in the cookie banner. IP anonymisation is enabled. Data is transferred to the US under Standard Contractual Clauses.
3.4. Marketing / Advertising Cookies (Optional — Explicit Consent)
For ad effectiveness measurement and user-targeted advertising.
| Cookie Name | Provider | Purpose | Retention |
|---|---|---|---|
_fbp | Meta (Facebook) Pixel | Ad effectiveness measurement | 90 days |
fr | Meta (Facebook) | Ad-based tracking | 90 days |
IDE | Google Ads (DoubleClick) | Ad tracking | 13 months |
test_cookie | Google Ads | Cookie support test | 15 minutes |
Note: Marketing cookies load only when the "Marketing" category is enabled in the cookie banner. You may withdraw consent at any time.
4. Cookies in Mobile Apps
On iOS and Android mobile apps, standard HTTP cookies are replaced with native session tokens. Cookie policy applies partially; in addition:
- Per Apple App Tracking Transparency (ATT), iOS requests separate permission for off-app tracking.
- Android Advertising ID can be disabled in your user settings.
- Ad SDKs and analytics are enabled only with explicit consent.
For details: Privacy Policy.
5. Cookie Management
5.1. Nakliye360 Cookie Banner
On your first visit, the cookie preference banner opens. You will find:
- "Accept All"
- "Reject All" (no cookies other than strictly necessary will load)
- "Customise Preferences" (category-based selection)
You can change preferences any time: Site footer > Cookie Preferences.
5.2. Cookie Management via Browser Settings
You can also manage cookies in browser settings:
| Browser | Help Link |
|---|---|
| Google Chrome | https://support.google.com/chrome/answer/95647 |
| Mozilla Firefox | https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer |
| Microsoft Edge | https://support.microsoft.com/en-us/microsoft-edge |
| Safari (iOS) | https://support.apple.com/en-us/HT201265 |
| Safari (macOS) | https://support.apple.com/en-us/guide/safari |
Important: Refusing all cookies may break Platform functionality (login, language preference, etc.).
5.3. Do Not Track (DNT)
We respect the "Do Not Track" signal from your browser by automatically disabling subject trackers. However, DNT is not yet an international standard; our behaviour remains tied to your choice in the cookie banner.
6. Cookie Consent Management Mechanism
The cookie banner is managed by the components/cookie-banner.tsx component. Explicit consent principle:
- Opt-in model: non-essential cookies are not loaded without user approval.
- Approval/rejection records stored in
n360.cookie-consentfor 12 months. - Separate toggle for each cookie category.
- Preference changes take effect via
cookie-consent.tsinstantly; loaded cookies are removed at end of retention or immediately via "Reset Preferences".
7. Third-Party Cookie Policies
The cookie/privacy policies of the following third-party providers also apply:
- Cloudflare: https://www.cloudflare.com/cookie-policy/
- Google (Analytics, Ads, Sign-In): https://policies.google.com/technologies/cookies
- Apple (Sign-In, iOS): https://www.apple.com/legal/privacy/
- Meta (Facebook Pixel, Login): https://www.facebook.com/policies/cookies/
- Iyzico: https://www.iyzico.com/yasal-bilgiler/gizlilik-ve-cerez-politikasi
- Sentry: https://sentry.io/privacy/
8. Legal Basis
- KVKK Articles 5 and 6 (conditions for processing personal data)
- KVKK Authority decision dated 27.02.2020, No. 2020/173 (Cookie Guide)
- GDPR Article 5(3), ePrivacy Directive
- Law 5651 (traffic log)
9. Cookie Retention
| Cookie Type | Period |
|---|---|
| Session cookie | Deleted when browser closes |
| Persistent cookie | Deleted at specified period (15 minutes – 2 years) |
| Cookie consent record | 12 months (consent requested again afterwards) |
10. Policy Changes
This Cookie Policy may be updated in parallel with regulatory or service changes. On significant changes, the cookie banner reappears for fresh consent.
11. Contact
For questions about cookies or this policy:
- Email: [email protected] / [email protected]
- KEP: [TODO]
- Mail: [TODO: Registered address]