Cookie Policy

1. What Are Cookies?

Cookies are small text files stored on your device by your browser when you visit a website. They enable essential functions such as keeping you signed in and remembering your preferences. Similar technologies (such as local storage) may be used for the same purposes; this policy covers those as well.

2. How We Use Cookies

We use cookies on the platform for only two purposes: to let you sign in securely and keep your session authenticated (essential cookies), and to remember your language preference (functional/preference cookies). We do not perform behavioral profiling, ad targeting, or cross-site tracking through cookies.

3. Cookies We Use

As of launch, the platform uses the following cookies:

• Session cookie (next-auth): Required for authentication and session management. Created when you sign in; keeps your session securely maintained.
• Language preference cookie (locale): Stores your choice to view the interface in Turkish or English.
• Security cookies (CSRF/callback, part of the next-auth infrastructure): Used to protect the sign-in flow against forgery.

4. Essential Cookies

The session and security cookies are technically necessary for you to sign in and for your account to be protected against unauthorized access. Without these cookies, no page requiring authentication will work. Under applicable law, cookies strictly necessary to provide a service you explicitly request do not require separate consent.

5. Preference Cookies

The language preference cookie is used so that you do not have to reselect the interface language on every visit. It does not build any personal profile and stores only your selected language value (tr/en).

6. Third-Party Cookies

As of launch, the platform uses no third-party advertising, analytics, or tracking cookies. If this changes in the future, this policy will be updated and, where required by law, your consent will be obtained before such cookies are set.

7. Legal Basis

Essential cookies are used on the basis of performance of a contract and legitimate interest, as they are necessary to provide the Service. Preference cookies serve the function you request (language selection). Since no advertising or tracking cookies are used, no consent mechanism is required for those categories.

8. Retention Periods

Cookie lifetimes are as follows:

• Session cookie: valid for the duration of your session; rotated periodically for security and terminated when you sign out,
• Language preference cookie: a persistent cookie; retained until deleted from your browser or until you change your preference (maximum 12 months),
• Security (CSRF) cookies: valid for the duration of the relevant sign-in flow.

9. How to Manage Cookies

You can manage, delete, or block cookies through your browser settings. In common browsers, cookie settings can be found here:

• Chrome: Settings → Privacy and security → Third-party cookies / Site settings,
• Safari: Settings → Privacy → Manage Website Data,
• Firefox: Settings → Privacy & Security → Cookies and Site Data,
• Edge: Settings → Cookies and site permissions.

10. Consequences of Disabling Cookies

If you block the essential session cookies, you will not be able to sign in to the platform or access the dashboards. If you delete the language preference cookie, the interface will revert to the default language and you will need to reselect your preference.

11. Changes to This Policy

If the cookies we use change (for example, if a new functional cookie is added), this policy will be updated and the current version published on this page. Material changes will additionally be announced by email or within the platform.

12. Contact

For questions about our use of cookies: Graviti Labs — info@gravitilabs.com. Responsible person: Tahsin Bayraktar.