Cookie Notice
Last updated: 25 September 2026
This notice follows the Turkish Data Protection Authority's Guideline on Cookie Practices (July 2025) and the ePrivacy principles applied under the GDPR. Photonza uses no advertising, marketing, analytics or tracking cookies. It only uses cookies and browser storage that are strictly necessary for the service to work; under the Guideline these need no explicit consent, which is why the site shows no cookie banner. Version: 2026-09-25.
1. What is a cookie?
Cookies are small text files a website places in your browser. localStorage, sessionStorage and IndexedDB entries used for the same purposes are also referred to as "cookies" in this notice.
Data controller: Ali Mert Güleç (Photonza). Email: info@alimertgulec.com.
2. Strictly necessary cookies and browser storage (no consent required)
Without these the service does not work, or an action you started (uploading, downloading, joining an event) cannot be completed. All of them are first-party (photonza.com), are not used for advertising or profiling and do not recognise you on other sites. The legal basis is the provision of the service under Article 5/2(c) (performance of a contract) and 5/2(f) (legitimate interest) of KVKK.
- sb-*-auth-token (cookie, Supabase authentication): Keeps you signed in; used for organizer and photographer sign-in and for guests' anonymous sessions. Extended as the session refreshes; deleted when you sign out. A temporary sb-*-auth-token-code-verifier cookie may also be set during a sign-in step.
- photonza_language (cookie + localStorage): Your language preference (TR/EN). Duration: 1 year.
Browser storage (localStorage, sessionStorage, IndexedDB):
- photonza_event_session (localStorage): Remembers which event you joined. Duration: until you leave the event.
- photonza_pending_event (sessionStorage): Carries the step between scanning the QR code and entering your name. Duration: until the tab closes.
- photonza_create_event (sessionStorage): Carries the organizer's event creation form to the payment step. Duration: until payment completes or the tab closes.
- wm_myphotos:<event> and wm_welcome_dismissed_<event> (sessionStorage): Whether the "My photos" view is open and the welcome card was dismissed. Duration: until the tab closes; contains no personal data.
- wm_findme_collapsed (localStorage): Whether the "Find Me" box is collapsed. Duration: persistent; contains no personal data.
- photonza-uploads (IndexedDB): The draft of an unfinished upload (selected files and caption), so you can resume it even if the page closes. The files stay on your device only. Duration: until the upload completes or is cancelled.
- photonza_bulk_done:<event> (localStorage): Which files of a photographer's bulk upload have already been uploaded (file name, size, date), so the same file is not uploaded twice when the folder is selected again. Duration: until browser data is cleared.
- photonza-archive-v1:<event> (localStorage): Parts already completed in a "Download all" run, so an interrupted download can resume. Duration: 7 days.
3. Cookieless visit measurement (Vercel Web Analytics)
To see in aggregate which pages of the site are visited and how often, we use the Web Analytics service of our hosting provider Vercel (a US company). It uses no cookies and writes no identifier to your device; the script and measurement requests run through the photonza.com domain.
Only the following is recorded with each page view: time, page address, referring site, location at country/city level, browser and operating system version, device type. According to Vercel's documentation, records are not tied to an individual or an IP address; a hash derived from the request is used to tell visits apart and is discarded after 24 hours. Photonza sees this data only as aggregate statistics and cannot see who visited which page.
The legal basis is our legitimate interest in monitoring the operation and use of the site in aggregate (Article 5/2(f) of KVKK). Information on the transfer to Vercel and transfers abroad is in the Privacy Policy.
4. No advertising or analytics cookies; managing storage
Photonza does not use third-party analytics tools, advertising pixels, social media plug-ins or similar tracking tools. For this reason no cookie preference is asked for or stored. If a cookie requiring consent is ever added, this notice will be updated first and your explicit consent will be requested before it is used.
You can delete or block the entries above at any time in your browser settings; you may then be signed out, your language preference may reset and unfinished uploads may not be able to resume.
5. Your rights
Your rights under Article 11 of KVKK and the application procedure are described in the Privacy Policy.