Cookie Policy
Related: Privacy notice →Translation notice. This English translation is provided for information only. In case of any discrepancy, the Turkish version (Çerez Politikası) prevails.
This policy explains the cookies and similar browser storage technologies (localStorage, sessionStorage) used on Courino's website (courino.com) and web applications (company panel admin.courino.com, customer portal client.courino.com, platform console developer.courino.com). It is prepared under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and the Turkish Personal Data Protection Board's Guide on Cookie Practices.
1. Data controller
The data controller for the cookies in this policy is Albiferro Yazılım ve Sistem Limited Şirketi (Albiferro Software & System Limited Company) (Tax office: Etimesgut, Ankara, Türkiye; Tax No: 0501474977; MERSİS (Central Registry) No: 0050147497700001; address: Atakent Mah. 1472. Cad. No: 5 D: 3, Elvankent, Etimesgut, Ankara, Türkiye; registered e-mail (KEP): albiferroyazilim@hs01.kep.tr; e-mail: destek@courino.com), which operates Courino.
2. Summary
- Courino uses only strictly necessary cookies and browser storage: to serve the site securely, keep you signed in and remember choices you make (language, theme, branch, cookie choice).
- No analytics, statistics, advertising, marketing or social media cookies are used; visitors are not tracked across sites and no profiles are built.
- The website loads no scripts, fonts, maps or frames (iframes) from other sites; fonts and images are served from courino.com.
- If a non-essential cookie is ever introduced, this policy will be updated, the cookie notice will be shown again and that cookie will be used only with your explicit consent.
3. What are cookies and similar technologies?
A cookie is a small text file a website stores in your browser. localStorage and sessionStorage are storage areas a browser sets aside for a site: localStorage stays until you clear it, sessionStorage is deleted when the tab is closed. In this policy all of these are called "cookies".
4. Website (courino.com)
| Name | Provider / type | Purpose | Duration | Category |
|---|---|---|---|---|
cookie_consent | Courino (first-party cookie) | Remembers your cookie choice (policy version, time of choice, selected categories) so the notice does not reappear on every page. | 180 days | Strictly necessary |
__cf_bm | Cloudflare (on the courino.com domain; service provider) | Bot protection: tells automated and malicious traffic apart from real visitors. Set only if the related security feature is enabled. | 30 minutes | Strictly necessary (security) |
cf_clearance | Cloudflare | Records that you passed a security check (challenge); set only when a check is shown. | As configured (default 30 minutes) | Strictly necessary (security) |
_cfuvid | Cloudflare | Distinguishes visitors sharing the same IP address under a rate-limiting rule; set only if such a rule is enabled. | Browser session | Strictly necessary (security) |
Courino serves the site through Cloudflare's content delivery and security service. Cloudflare cookies (__cf_bm, cf_clearance, _cfuvid) are set only when the related security feature is enabled and needed; they are not used to identify you or to track you across sites. The enterprise quote form stores nothing in your browser.
5. Web applications (company panel, customer portal, console)
These applications are the service you sign in to; the cookies and storage below are needed for the application to work and to remember choices you make. The access token is kept in memory only and never written to the browser. Cloudflare cookies (section 4) may also be set on these domains.
| Name | Provider / type | Purpose | Duration | Category |
|---|---|---|---|---|
kos_refresh | Courino (first-party cookie; HttpOnly, Secure, SameSite=Strict, sent only to /api/v1/auth) | Keeps you signed in securely after login (session refresh key). JavaScript cannot read it and it is not sent with requests coming from other sites. | 30 days; deleted when you sign out | Strictly necessary |
kos.locale | Courino (localStorage) | Remembers the interface language you chose (Turkish/English). | Until you change it or clear browser data | Strictly necessary (interface preference) |
kos-theme | Courino (localStorage) | Remembers the light/dark theme you chose. | Until you change or clear it | Strictly necessary (interface preference) |
kos.branch | Courino (localStorage) | Remembers the branch you selected in the panel (multi-branch companies). | Until you change or clear it | Strictly necessary (interface preference) |
kos.agreement.later | Courino (localStorage) | Remembers the day (version and date) you chose "Later" on an agreement-update notice; it lapses the next day and on sign-out. | Deleted on sign-out | Strictly necessary |
kos.aidat.unpaid.dismissed, kos.aidat.trial.dismissed | Courino (sessionStorage) | Remembers that you closed the subscription-fee banner in this session. | Deleted when the tab is closed | Strictly necessary (interface preference) |
kos.support | Courino (sessionStorage) | Only in the tab where the platform support team opens a company panel as a support session: the key of that support session. | Until the tab is closed or the support session ends | Strictly necessary |
kos_console_refresh | Courino (first-party cookie; developer.courino.com only, HttpOnly, Secure, SameSite=Strict) | Keeps the session in the console used only by platform administrators. | 12 hours; deleted on sign-out | Strictly necessary |
kos-api-docs-lang | Courino (localStorage; API documentation page client.courino.com/api/docs only) | Remembers the language (Turkish/English) you chose on the documentation page. | Until you change it or clear browser data | Strictly necessary (interface choice) |
authorized | Courino (localStorage; API documentation page only, Swagger UI) | Remembers the API key you enter in the documentation page's "Authorize" dialog so it can be used for try-outs when you reopen the page. Written only if you enter one; sent only with try-out requests you start. | Until "Logout" or until you clear browser data | Strictly necessary (user input) |
kos-api-docs-consent | Courino (localStorage; API documentation page only) | Remembers your choice in the documentation page's cookie notice (policy version, time, choice). The documentation page sets no cookies. | Until you clear it; asked again when the policy version changes | Strictly necessary |
- Sign in with Google: if "Continue with Google" is enabled, the sign-in and sign-up screens load the Google Identity Services script from accounts.google.com to show the button. Courino sets no cookie for this; Google's own cookies on its domain and its processing are governed by Google's privacy policy. You do not have to use the button.
- Maps: map tiles are loaded from Courino's server; no cookies are used for maps.
6. Legal basis
Strictly necessary cookies are based on providing the service you request and performing the contract (KVKK Art. 5(2)(c)) and on the legitimate interest in keeping the site and accounts secure (KVKK Art. 5(2)(f)). Under the Board's cookie guide, explicit consent is not required for cookies strictly necessary to provide a service you explicitly request (such as authentication, security, user-input and interface-preference cookies). Analytics, advertising and marketing cookies may only be used with your explicit consent (KVKK Art. 5(1)); Courino does not use them. "Reject" means no non-essential cookie or storage is used.
Data processed through Cloudflare cookies (such as your IP address) may be processed on Cloudflare servers outside Türkiye; such transfers are made in accordance with KVKK Art. 9.
7. Managing your choices
On your first visit you can choose "Accept all", "Reject" or "Preferences" in the notice. You can change your choice at any time with the Cookie preferences link at the bottom of every page. Your choice is stored in the cookie_consent cookie for 180 days; the notice is shown again when the policy version changes.
You can also delete or block cookies in your browser settings (Chrome: Settings › Privacy and security › Third-party cookies / Site data; Firefox: Settings › Privacy & Security › Cookies and Site Data; Safari: Settings › Privacy › Manage Website Data; Edge: Settings › Cookies and site permissions). "Clear site data" also removes localStorage and sessionStorage. If you block strictly necessary cookies you may not be able to sign in or use some features.
8. Your rights and contact
For your rights under KVKK Art. 11 and other information on the processing of your personal data, see the Privacy notice. Questions and requests: destek@courino.com, KEP: albiferroyazilim@hs01.kep.tr, or in writing to Atakent Mah. 1472. Cad. No: 5 D: 3, Elvankent, Etimesgut, Ankara, Türkiye.
9. Changes
This policy is updated whenever the cookies in use change; the current version and effective date are shown at the top of the page.