Cookie Policy

1. Cookies and browser storage

Cookies are small data files stored in your browser that can be transmitted with requests made to the relevant domain name. localStorage and sessionStorage are records stored directly in your browser by the web application; unlike cookies, they are not automatically attached to every network request.

In our current platform version, only strictly necessary records required for session management, transactional security, and requested shopping cart / favorites functions are utilized. No tracking tools or third-party analytics are operated for advertising, marketing, profiling, or behavioral analytics purposes. Consequently, no cookie consent banner or preference center is required for optional cookies. If optional tracking technologies are introduced in the future, this policy and the necessary consent mechanisms will be updated prior to deployment.

2. Strictly necessary first-party cookies

These cookies are maintained directly under our domain name. Customer and management session cookies are strictly protected against JavaScript access (HttpOnly). Cookies are created dynamically according to the actions you perform; not all cookies are placed on every visitor’s device.

• seckin_customer_session
  Maintains the authenticated customer account session securely.
  Created upon logging in to a customer account.
  Duration: Up to 30 days; removed upon sign out. May expire earlier on server.
• seckin-checkout
  Associates the checkout process with the browser and secures access to order results.
  Created upon requesting an order summary; visiting pages alone does not set this cookie.
  Duration: 24 hours.
• seckin_management_session / seckin_shop_session
  Maintains staff management and store panel sessions; not used for customer browsing.
  Created upon signing in to authorized administrative panels.
  Duration: Up to 30 days; removed upon panel logout.
• seckin_shop_branch
  Remembers the active store branch context selected by authorized staff.
  Created when a branch is chosen in the management panel.
  Duration: Up to 30 days; cleared upon resetting branch choice.
• seckin_panel_device
  Recognizes verified devices previously used for staff logins for enhanced security.
  May be created upon staff panel authentication.
  Duration: Up to 400 days; subject to browser limits.

3. Shopping cart, favorites, and local records

• seckin-shop (localStorage)
  Stores your bag and favorites list on this device. Retains product IDs and quantities; authoritative prices originate from the server.
  Used during bag or favorite actions and when synchronizing account favorites.
  Duration: Persistent; retained until browser site data is cleared or updated by the application.
• seckin-account-owner / seckin-guest-favorites (localStorage)
  Differentiates account favorites from guest favorites and maps lists accurately upon login.
  Used during login/logout and favorite synchronization.
  Duration: Persistent; updated or cleared when site data is reset or during account actions.
• seckin-checkout-request (sessionStorage)
  Stores request digests and idempotency keys to prevent accidental duplicate order submissions.
  Used while submitting an order.
  Duration: Session only; cleared upon closing the browser tab.

Favorites associated with your customer account are also securely stored on the server. Clearing records from your browser does not automatically delete saved favorites or order history associated with your registered account.

Photos uploaded to the “See in My Room” visualizer are processed entirely in your browser and are not uploaded to our servers. No advertising or analytics cookies are set by this feature.

4. Third-party media and __cf_bm

Certain product and living space images are delivered via external content delivery networks. Across inspected pages, the following hosts may be utilized: cdn.myikas.com, cdn.shopify.com, images.unsplash.com, www.fustatlife.com, www.sanathali.com, www.seyranhali.com.tr. Depending on your browser and the specific products viewed, requests may vary. During these requests, the respective CDN provider receives IP address and browser/header metadata and may place essential security cookies in accordance with your browser settings.

__cf_bm is observed in Cloudflare-protected responses when images are loaded from cdn.myikas.com. This cookie belongs to the .myikas.com domain; it does not identify your Seçkin Halı customer account or cart. It is placed solely to distinguish automated/bot traffic from legitimate visitors and safeguard image availability. According to Cloudflare’s public documentation, it is never used for cross-site advertising tracking and expires automatically after 30 minutes of continuous inactivity.

This strictly security-focused usage is evaluated separately from optional advertising/analytics cookies; being third-party does not automatically necessitate an opt-in consent banner under data protection regulations.

Cloudflare cookie documentation (opens in a new tab)

5. Managing and disabling cookies

You can block first-party or third-party cookies and clear stored site data at any time through your browser’s Privacy, Cookies, or Site Data settings. Blocking third-party cookies will encompass external image providers as well. Cookies with HttpOnly flags or belonging to external domains cannot be cleared via web page JavaScript; browser settings must be utilized.

Blocking strictly necessary session cookies may impair login and order confirmation access. Clearing browser storage will reset guest carts and guest favorites. Deleting existing records will not prevent necessary records from being recreated upon subsequent active interactions.

Marketing email and SMS preferences on our platform are not cookie-based; they are managed independently via your account Communication Preferences.

6. Inquiries and updates

For inquiries regarding cookies and your personal data, you may contact us at seckin.hali24@gmail.com. When providers or technical purposes change, this policy and inventory are updated accordingly.

For comprehensive details regarding data processing and your statutory rights, please review our Personal Data Protection Notice (KVKK).