Cookie Policy and Cookie Notice
Last updated: 3 November 2026
This notice explains the cookies and similar technologies used on www.nesilsoft.com, under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK). The data controller is NesilSoft Yazılım Sanayi ve Ticaret A.Ş. The site's general notice is on the Privacy page; this notice gives its detail on cookies. If the Turkish and English versions differ, the Turkish version prevails.
Data controller
- Company: NesilSoft Yazılım Sanayi ve Ticaret A.Ş.
- Address: Ataköy 7-8-9-10. Kısım Mah. Çobançeşme E-5 Yan Yol Cad. No: 22/1 (Nef Ataköy 22), Bakırköy / İstanbul, Türkiye
- E-mail: info@nesilsoft.com.tr
What is a cookie?
A cookie is a small text file that a website writes to your browser. The browser's local storage (localStorage) keeps information in a similar way. On this site both are used only for the purposes described below.
Which cookies we use, and why
We sort cookies into three groups. Strictly necessary is always on. Analytics and Ad measurement stay off until you allow them; if you don't, Google's code is never loaded and no request goes to Google.
- Strictly necessary: to remember your cookie choice. Without this record we would have to ask you again on every page.
- Analytics (Google Analytics 4): to measure which pages are opened, where visitors come from (for example a search engine or an ad), how many people visit, whether WhatsApp, phone and e-mail links are clicked and how the site is used, so we can improve it.
- Ad measurement (Google Ads): to report the pages you open and clicks on WhatsApp, phone or e-mail links to Google Ads, so we can measure whether people who clicked our ads on Google reached the contact page and tried to get in touch, and manage our ad budget accordingly. If you allowed it, this data goes to Google Ads even if you did not come from an ad. Personalised ads, remarketing (showing ads elsewhere to people who visited our site) and Google signals are switched off.
For WhatsApp, phone and e-mail we measure only the click on the link; it does not show that a message was sent or a call was made. What you type into the contact form or a WhatsApp message, your name and your e-mail address are not sent to Google.
List of cookies
These are the cookies and similar records used on this site. Those in the Analytics and Ad measurement groups are written only if you allowed them.
| Name | Set by | What it does | Lifetime | Party | Group |
|---|---|---|---|---|---|
| ns-consent (local storage) | NesilSoft | Remembers your cookie choice (analytics yes/no, ad measurement yes/no, date). Holds no identifier and is never sent anywhere. | 12 months | First party | Strictly necessary |
| _ga | Google Analytics | Keeps a random identifier to tell visitors apart. | Up to 12 months from your last visit | First party | Analytics |
| _ga_… (ends with our measurement ID) | Google Analytics | Keeps information about the visit (session). | Up to 12 months from your last visit | First party | Analytics |
| _gcl_au | Google Ads | Measures the results (conversions) of visits from ads. | 90 days | First party | Ad measurement |
| _gcl_aw and other records starting with _gcl_ / _gac_ (Google may also write some to local storage) | Google Ads | If you arrived by clicking an ad, keeps the identifier of that click. | 90 days | First party | Ad measurement |
| Cookies on Google's domains (google.com, doubleclick.net, googleadservices.com) | Cookies Google may set on its own domains for ad measurement and security. | As set by Google | Third party | Ad measurement |
Browsers may shorten these lifetimes; for example, Safari deletes records written by a site's code within 7 days if the site is not visited. Google publishes the list and lifetimes of the cookies on its own domains at business.safety.google/adscookies.
What data is processed, and how it is collected
For the groups you allow, Google's code runs in your browser and automatically sends this information to Google: the random identifiers in the cookies, the address and title of the pages you open, where you came from (the previous page), the ad click identifier if you came from an ad, browser, device, screen and language information, whether you scroll to the end of a page, your approximate location, and clicks on WhatsApp, phone or e-mail links.
According to Google, Google Analytics does not store your IP address; it uses it only to derive an approximate location (country, city). If you allow ad measurement, Google Ads does collect the IP address.
Legal basis
- The strictly necessary record: it is needed so that we can follow the rule on consent for cookies and apply your choice on every page (KVKK Art. 5(2)(ç) and 5(2)(f)). The record stays in your browser only; it is not sent to us or anyone else.
- Analytics and Ad measurement: these rely only on your explicit consent (KVKK Art. 5(1)). You give it by pressing "Accept" in the bar at the bottom, or by switching the option on in "Cookie settings" and saving. Entering the site, scrolling, moving between pages or closing the settings window is not consent.
Who receives it? Transfer abroad
Analytics and Ad measurement data is transferred to Google (Google LLC and its affiliates). Google states that it acts as a processor on our behalf for Google Analytics, and that for Google Ads it also processes the data on its own account (as a controller).
This data is processed on Google's servers abroad, mainly in the USA; this is a transfer abroad under Article 9 of the KVKK. The Personal Data Protection Board has made no adequacy decision for the USA, and we have not signed the Board's standard contract with Google. So the transfer relies only on the explicit consent you give after being told about the risks below (KVKK Art. 9(6)(a)).
Possible risks: there may be no data protection authority in the USA like Türkiye's, and no remedies with the same protection; your data may be accessible to authorities under US law. You do not have to consent; if you reject, this transfer never happens and the site works just the same.
How long it is kept
The lifetimes of the records in your browser are in the list above. In Google Analytics we have set the retention of detailed visit data to 2 months, the shortest period Google offers; Google deletes this data when the period ends. Aggregate reports that do not show any individual (for example monthly visit counts) may stay longer. Google keeps the data sent to Google Ads under its own retention periods.
How to change your choice
You can change your choice or withdraw your consent at any time under "Cookie settings" at the bottom of every page. When you withdraw, no further measurement data is sent to Google for the groups you withdrew, and we delete this site's matching Google cookies (those starting with _ga, _gcl_ and _gac_). The page reloads unless you have typed something into the contact form; in that case it does not reload, so you don't lose your text. Google's code is not loaded on any later page.
Withdrawing does not delete information already sent to Google; it is deleted when the periods above run out. We cannot delete the cookies on Google's own domains; you can delete them in your browser settings. You can delete or block cookies in your browser; this site still works when cookies are blocked.
We ask for your choice again every 12 months, and earlier if this notice changes materially.
Your rights
Your rights under Article 11 of the KVKK (for example to learn whether your data is processed, or to ask for it to be deleted), and how to apply to us, are explained on the Privacy page.
Changes to this notice
If we add a new cookie or measurement tool, we will update this notice first and ask for your choice again. The current version is always on this page; the date at the top shows when it last changed.