Cookie Policy

1. What Are Cookies & Browser Storage?

Websites use client-side storage technologies to support technical functionality and remember visitor preferences:

• HTTP Cookies: Small text files placed in your browser when you visit a website. They are sent back to the server with subsequent HTTP requests.
• Local Storage (localStorage): A modern browser storage mechanism that stores key-value data directly on your device without transmitting it to the web server with every network request.

This Cookie Policy explains how RKX Dizayn Bilişim ve Teknoloji Hizmetleri Ltd. Şti. (operating as RKX Design) utilizes cookies and browser storage technologies on this website. We follow strict data minimization principles and do not deploy advertising cookies, cross-site trackers, or commercial profiling mechanisms on this website.

2. Necessary Storage (No Tracking by Default)

When browsing our website, no advertising or tracking cookies are placed on your device. We use a single necessary storage entry solely to remember your consent choices:

• Storage Key: rkx_consent
• Technology: Browser Local Storage (localStorage — not an HTTP cookie).
• Purpose: Stores your consent preferences (accepted categories, consent ID, timestamps, and policy revision) so your decisions are respected across page views on this device in both English and Turkish.
• Duration: 30 days. This duration is an interim technical value approved by studio management for the current development phase; it is not a statutory duration or legal determination.
• Essential Nature: Technically necessary to operate the consent mechanism required by privacy regulations.

3. Optional Analytics Cookies (Google Analytics 4)

We integrate Google Analytics 4 (Measurement ID: G-V4PYXWRZP1), operated by Google LLC.

Analytics measurement is strictly optional and disabled by default. Only if you explicitly grant permission through our consent interface, Google Analytics sets first-party measurement cookies:

• _ga: Distinguishes unique browser sessions anonymously for aggregate reporting. Lifespan: up to 2 years (or configured Google default).
• _ga_V4PYXWRZP1: Maintains session state for our specific Google Analytics 4 stream. Lifespan: up to 2 years.

Our configuration disables advertising signals (ad_storage, ad_user_data, ad_personalization) and Google Signals permanently. Analytics cookies are used solely to generate aggregated traffic reports.

4. Storage & Cookie Inventory

5. How We Obtain Your Consent

When you visit our website for the first time, a consent banner appears at the bottom of the screen:

• Accept All: Grants permission for optional analytics measurement.
• Reject Optional: Keeps optional analytics completely disabled; no tracking cookies are set.
• Customize: Opens the detailed preferences modal so you can inspect individual categories.

Both primary actions (“Accept All” and “Reject Optional”) have equal visual prominence. Continuing to browse, scrolling, or closing the preferences window without making a choice does not grant consent.

6. Changing Preferences & Withdrawing Consent

You can change your mind or withdraw consent at any time. Clicking the “Cookie Preferences” button in the footer of any page reopens the preferences modal.

When you withdraw consent or toggle off the Analytics category:

1. The Google Analytics disable flag (ga-disable) is immediately enabled.
2. First-party Google cookies (_ga, _ga_V4PYXWRZP1) are erased from your browser across local and parent domain scopes.
3. Your updated choice is recorded in local storage.
4. The page reloads cleanly into an un-tracked state.

7. Technical Architecture of Our Consent Manager

Our consent management follows these design principles:

• First-Party & Self-Hosted: We use the pinned, MIT-licensed vanilla-cookieconsent library (version 3.1.0), bundled as a first-party static asset without remote CDN or third-party CMP dependencies.
• Basic Consent Mode: Under Google’s Basic Consent Mode v2, no network connections or cookieless pings are sent to Google servers before consent is granted.
• Revision Management: Our implementation enforces revision tracking (currently Revision 1). If our tracking categories or purposes change, returning visitors are automatically prompted to review their choices.
• Cross-Tab Synchronization: Changes made in one browser tab are synchronized across open tabs in real time via local storage events.

8. Third-Party Technologies

The third-party technologies deployed on our website include:

• Cloudflare Turnstile: Deployed on our contact page to prevent automated spam submissions. Turnstile evaluates connection telemetry; clearance tokens or cookies depend on Cloudflare account-level edge settings.
• Google Analytics 4: Deployed solely for aggregate traffic measurement and strictly gated behind your opt-in consent.

9. Browser-Level Controls

You can manage or delete cookies and site storage at any time through your browser settings (Chrome, Safari, Firefox, Edge, etc.).

10. Policy Updates

This Cookie Policy may be updated to reflect changes in technical implementations, services, or legal standards. Updates will be published on this page with an updated “Last updated” date.