Cookie Policy

1. What Cookies and Browser Storage Are

A cookie is a small text file that a website asks your browser to store on your device when you visit. localStorage and sessionStorage are similar mechanisms provided by modern browsers; they keep information in your browser without using classic cookies.

These mechanisms let a site remember things, such as keeping your session active or storing a preference. In this policy we refer to all of them collectively as cookies and browser storage.

2. The Strictly-Necessary Storage We Use Today

When you sign in to the panel, we store strictly-necessary authentication data in your browser so that we can keep your session active. This is technically required for the service to work and does not require consent.

The strictly-necessary keys we use are: dw_refresh -- holds the token used to renew your session; if you choose "Remember me" it is kept in localStorage so it survives the browser closing, otherwise it is kept in sessionStorage only for that session or tab. dw_remember -- a small flag that records your "Remember me" choice (on or off). dw_consent -- records your cookie choice (whether you allowed analytics and which policy version you answered); it is kept in localStorage until you change it or clear your browser data.

This storage keeps you signed in and remembers your "Remember me" choice; it is not used for advertising, profiling, or tracking you across other sites. The session (authentication) token is removed from your browser when you sign out, while the "Remember me" choice remains until you change it or clear your browser storage.

3. Analytics Cookies (Only With Your Consent) and First-Party Channel Measurement

Google Analytics 4: if you allow analytics in the cookie preferences, Google LLC's Google Analytics 4 service is loaded and places the _ga and _ga_<id> cookies on your device (for up to 2 years). These cookies hold a random identifier used to link your visits. The pages you view, the referring site and campaign parameters, scrolls, clicks on links leaving our site, file downloads, device and browser type, language and an approximate location (city/country) derived from your IP address are sent to Google. Your name, email address and account ID are not sent; link tokens in addresses and ad click identifiers are removed before sending. The data is kept in Google Analytics for 14 months. If you do not allow it, Google Analytics is never loaded; if your browser sends a Global Privacy Control signal, you are not asked and analytics does not run. Analytics is never loaded on pages opened from a link, such as check-in, survey, invitation, trip and company website pages. Google Analytics data is transferred to Google LLC (USA), acting as a processor, on the basis of the explicit consent you give when allowing analytics (KVKK Art. 5/1 and Art. 9/6(a)); the receiving country may not offer the same level of protection as Türkiye. For users in the EU/EEA, the transfer to the USA relies on the EU-US Data Privacy Framework, in which Google LLC participates.

We keep first-party channel measurement: dw_attr_first and dw_attr_last store (in localStorage) the first page you visited, the domain of the site that referred you and -- if you arrived through a campaign or referral link -- its campaign parameters (UTM) and referral code, so that we can understand which channel or partner led to a sign-up. It does not identify you, is read only when you create an account and is never shared with third parties; its legal basis is our legitimate interest (KVKK Art. 5/2(f)), and you can remove it at any time by clearing your browser data or object at contact@firstpoint.com.tr.

Click identifiers that an ad platform adds to a link (such as Google gclid, Microsoft msclkid or Meta fbclid) are neither read nor stored, and are not sent to Google Analytics either.

4. Changing Your Choice

On your first visit a cookie consent banner is shown. “Reject” and “Accept analytics” are offered in the same way, and “Choose” lets you see each category. You can change your choice at any time from the “Cookie preferences” link at the bottom of every page. When you withdraw consent to analytics, the Google Analytics cookies are deleted from your browser and no new data is sent; data already sent is not affected. When this policy changes, the banner asks again.

The strictly-necessary authentication storage always stays active and cannot be turned off, because the service needs it to work.

5. How to Clear Your Storage

You can delete site data and cookies at any time from your browser settings. In most browsers this is done under history or privacy settings, using an option such as "clear site data" or "delete cookies".

If you delete the strictly-necessary authentication storage, your session ends and you will need to sign in to the panel again. Signing out of the panel also clears this data automatically.

6. Contact

For questions about this Cookie Policy, you can reach us at contact@firstpoint.com.tr. The data controller's registry details will be completed in line with official records before publication.