Cookie notice

DRAFT — not legal advice. Requires review by a qualified lawyer before use.

• Document: Cookie Notice (website and panel) · Language: English · Version: 0.1 draft · Date: 2026-10-27
• Basis: docs/design/landing.md §6.8 (cookie notice and banner); docs/research/12-auth.md (strictly necessary session cookie of the panel); docs/research/15-payments-tr.md F2 (a cookie policy is part of the PayTR page set). All placeholders were closed on 2026-10-27 (F1-64); sentences marked † still await lawyer confirmation. Nothing here is a final commitment.
• Published as the “Cookie notice” page of the website (/legal/cookies/).

1. What this notice covers

1.1 This notice covers the Gondero marketing website and, in section 4, the sign-in panel. Who we are and how to contact us: see the Privacy Policy, section 1.

2. The website

2.1 Decision (TODO-Faruk 2p-b): the website is completely cookie-free. The website is made of static pages. It has no account, no contact form, no analytics, no advertising and no third-party resources: fonts and scripts come from our own host, and no map, video or social button is embedded.

2.2 Language choice. The language is chosen by the page address (/en/ or /tr/). The website does not store your choice on your device.

2.3 No cookie or similar technology is used to measure, profile or track visitors.

3. If this changes

3.1 If we ever add analytics or any other non-essential technology, we will ask for your consent first, before anything is stored, with a refusal as easy as acceptance and no pre-ticked choices. This notice will be updated before that happens.

4. The panel (after launch)

4.1 When you sign in to the panel, it uses a session cookie that keeps you signed in. It is strictly necessary for the service you asked for and expires when the session ends or after the session limit. The session lasts at most 24 hours and ends after 1 hour of inactivity; if you mark a device as trusted, a trusted-device cookie lasts up to 30 days (authentication defaults of 2026-10-27).†

4.2 The panel does not use advertising cookies. The panel uses no other cookies or similar technologies except those strictly necessary for sign-in and security.†

5. Your choices

5.1 You can delete or block cookies in your browser settings. Blocking the strictly necessary session cookie prevents you from signing in.

6. Notes for the reviewing lawyer

• Open question (TODO-Faruk 2o-d): is a consent banner required for a site that sets no cookies or only strictly necessary storage? The design assumes “not required” on the basis of the ePrivacy exemption for strictly necessary storage and the Turkish cookie guidance (secondary source, not verified here). This draft states the facts only; it does not state that no banner is required. No banner is built (landing.md §6.8); a reserve component exists if analytics is ever added.
• Landing.md §6.8 and this draft agree: the website sets no cookies (decision of 2026-10-27). The language is chosen by the page address only. If a language entry is ever added, clause 2.2 and Privacy Policy section 5.1 and 5A.2 change together.
• Confirm the wording on the host: the hosting provider’s own logs and any cookie its platform sets are outside our control and belong in the Privacy Policy section 5A and the sub-processor list.
• Confirm that the panel session cookie text matches the final authentication design (12-auth.md; __Host- prefixed cookie proposed).
• Filled 2026-10-27 (F1-89) from content-input/company.md: name, tax office and number, address and e-mail addresses. It is a sole proprietorship, so there is no MERSIS number; the tradesperson or trader status is for the accountant to confirm. The mailboxes hello@, support@, privacy@, billing@ and security@gondero.com are open. legal@, abuse@, postmaster@, dmarc@ and no-reply@ do not exist yet, so hello@gondero.com is used for legal notices and abuse reports until they do. Statements in the header that the company country is unknown are superseded (Türkiye); the options were decided on 2026-10-27. All placeholders were closed on 2026-10-27 (F1-64); the status table is in README.md.
• † Clauses awaiting lawyer confirmation: 4.1, 4.2.