What this policy covers
This policy describes the cookies and similar technologies used on sendthecanary.com and in the customer panel.
Personal data processing in general is covered by the Privacy Policy; here we focus only on data stored in your browser.
What a cookie is
A cookie is a small text file your browser saves on your device when you visit a site. On your next visit the site reads it to recognise you, or to remember your preference.
Similar technologies exist too: local storage, session storage and pixel tags. Because they also store data in your browser they follow the same rules, and this policy treats them all under the heading "cookie".
Strictly necessary cookies
The service does not work without these and they are not subject to consent; you cannot refuse them because without them you cannot sign in to the panel.
Session cookie: carries your identity in the panel, deleted when you close the browser or sign out.
Security cookie: prevents cross-site request forgery on form submissions, lasts for the session.
Load balancing cookie: routes your requests to the same server, lasts for the session.
Earlier opt-out record: if you said "do not allow" during the period when we asked for measurement consent, that choice sits in a cookie and is still applied. We write no new records; visitors who never made such a choice have no such cookie.
Preference cookies
Theme preference: stores your light, dark or system choice in your browser. It persists until you change it.
When "system" is selected nothing is stored at all; the page follows your operating system setting directly.
Language preference: the address already carries the language, so we keep no separate cookie for it.
Measurement cookies
On the marketing site and in the customer panel alike, these start working the moment you arrive and we do not ask separately. They tell us which pages were viewed, how long a visit lasted and which route brought you here.
WHAT THE PANEL COLLECTS IS NARROWED: the address is never sent; the matched route goes instead (for example "/test-requests/:id/report"), the query string is discarded entirely and the page title is supplied as a fixed value. That keeps test record identifiers, and your name in the dashboard title, away from the measurement provider.
We do not offer a banner or a switch that turns measurement off. You can delete or block measurement cookies from your browser settings; that is always available and applies to every site.
If you told us "do not allow" measurement on this site back when we asked, that choice STILL STANDS: measurement does not run for you, and the measurement cookies written until then (_ga and _ga_*) are deleted on your next visit. To have the data collected before that point deleted as well, write to us.
We do not attempt to tie measurement data to an individual, and we do not use it for advertising.
Cookies we do not use
We use no advertising cookies. There is no ad network, retargeting pixel or social media tracker on the site.
We place no third-party cookie that follows you across other sites.
We do not identify devices through fingerprinting.
Third-party cookies
When you are taken to the payment page, the payment provider may write its own cookies. Those follow that provider’s policy and are outside our control.
Fonts are served from our own servers rather than fetched externally, so no request reaches a font provider.
We use Google Analytics 4 for measurement (Google Ireland Limited). The tag loads when the page opens. The cookies it writes are first-party (_ga and _ga_*); they do not track you across sites and last at most 13 months.
Google Analytics data is processed on Google's servers, which means an international transfer; the transfer section of the Privacy Policy applies. We send the advertising personalisation and advertising data signals switched OFF.
How long they last
Session cookies: deleted when the browser closes.
Security and load balancing cookies: for the session.
Earlier opt-out choice (if any): 12 months.
Theme preference: until you change it or clear your browser data.
Measurement cookies: 13 months at most.
How to block measurement
Measurement is on by default on the site and in the panel alike, and we show you no banner. That is a deliberate choice, so that we can see which pages do their job.
We do not offer a switch that turns measurement off. You can delete or block measurement cookies from your browser settings.
If you said "do not allow" back when that choice was offered, it still stands; we did not delete that record and measurement does not run for you.
Browser settings
You can also block or delete cookies from your browser settings. That setting applies to every site.
If you block strictly necessary cookies you will not be able to sign in to the panel or submit forms. That is not a fault; it is the direct result of the block.
We do not act on browser "do not track" (DNT) or Global Privacy Control (GPC) signals; they do not switch measurement off. To block measurement cookies, use your browser's cookie settings.
Earlier opt-out records
Visitors who said "do not allow" during the period when we asked for consent still have that choice stored in their browser, and we keep READING it: measurement does not run for them.
We no longer write new records, because we no longer ask. What we removed is the question; we did not void the answers already given.
The record is not sent to our servers.
Changes
If we add a cookie we update this list. Should we ever add one for advertising or cross-site tracking, we will announce it separately and ask for your explicit consent.
The date at the top of the page shows when it was last revised.
These documents are published in English and Turkish. In the event of conflict the Turkish text prevails.