# Cookie Policy

Cookies used on the Arslanlı Yatırım & Danışmanlık website, advertising measurement, data transfer to Google and managing your cookie preferences.

*This is an English translation for information; the Turkish version prevails.*

## In brief

This website uses cookies and similar technologies, other than those strictly necessary to run the site, only with your consent. When you first open the site, you see "Accept", "Reject" and "Preferences" options in the banner at the bottom; no option is pre-selected. If you reject, the site works exactly the same.

For advertising measurement we use the Google Ads tag (Google tag, gtag.js): it lets us measure which ad click turned into a form submission, a phone call or a WhatsApp contact. We also count visits separately with our own counter, which does not use cookies. How information from forms and data transferred to Google are processed is explained in the [KVKK Privacy Notice](https://arslanlidanismanlik.com/en/legal/privacy-notice).

## What are cookies?

Cookies are small text files saved on your device by your browser when you visit a website. Websites may use them to remember your session, store your preferences, or measure visitor behavior or the results of advertisements. In this policy, "cookie" also covers similar technologies such as the browser's local and session storage.

## Cookie categories

- **Necessary:** Required for the site and forms to work securely and for your cookie preference to be remembered. It cannot be turned off; it does not require consent.
- **Analytics:** To understand how the site is used through Google's measurement cookies; it works only if you allow it (Google Consent Mode: analytics\_storage).
- **Advertising:** To measure the results of Google Ads advertisements; it works only if you allow it (Google Consent Mode: ad\_storage, ad\_user\_data, ad\_personalization).

The legal basis for these categories is your explicit consent (KVKK Art. 5/1). You can withdraw your consent at any time through the "Cookie preferences" link in the footer.

## The cookies we use

Below are the name, purpose, duration and provider of each cookie. Google cookies are written only if you allow the relevant category; cookie names and durations may be changed by Google, so please refer to Google's official documentation for the current list.

- **\_gcl\_au** (Advertising, provider: Google, on our site's own domain): Attributes conversions made after an ad click. Duration: as set by Google (usually 90 days).
- **\_gcl\_aw** (Advertising, Google, on our own domain): Stores the information of a Google ad click (gclid). Duration: as set by Google (usually 90 days).
- **\_gcl\_gb** (Advertising, Google, on our own domain): Stores the gbraid information of the click. Duration: as set by Google (usually 90 days).
- **\_gcl\_dc** (Advertising, Google, on our own domain): Stores the click information of Google's ad management system (DoubleClick/Floodlight); it is written only if this system is used. Duration: as set by Google (usually 90 days).
- **\_gac\_\<id>** (Advertising, Google, on our own domain): Stores Google Ads campaign information if used together with Google Analytics. Duration: as set by Google (usually 90 days).
- **IDE, test\_cookie** (Advertising, Google, on Google domains such as doubleclick.net): Used for ad delivery and measurement; test\_cookie tests whether the browser accepts cookies. Duration: as set by Google (test\_cookie is short-lived). These cookies may appear only if you interact with Google's advertising domains and have given advertising consent.
- **\_ga, \_ga\_\<id>** (Analytics, Google, on our own domain): If the Google Analytics tag is also used on the site, it distinguishes visitors and measures usage. If only the Google Ads tag is currently used, these cookies are not written. Duration: as set by Google.

Your cookie preference is also stored in your browser's local storage under the name "arsl-cerez" (Necessary; not a cookie; duration 12 months; provider: us; not sent to the server). This record contains only your preference, its date and the text version.

## Visit counter

To see how many people visit our site, we use a counter that runs on our own server and does not use cookies; no external analytics service such as Google Analytics is used. When you open a page, your browser tells our server the address of that page, which site you came from, and, if you came from an advertising link, the campaign details in that link. On some pages (for example the eligibility check and form on the YTAK page), completing the steps is also counted as an anonymous counter notification.

So that the same visitor can be counted once a day, your IP address and browser information are converted into a short digest together with a random value that is renewed every day. Your IP address and browser information are not stored; the digest is kept only for that day, is deleted at the first count of the next day, and cannot be matched across days. Campaign details and in-page steps are counted without being linked to a person. Only daily totals are kept permanently. The counter does not leave a cookie or any other persistent identifier; details are in the [KVKK Privacy Notice](https://arslanlidanismanlik.com/en/legal/privacy-notice).

The counter only checks whether the admin panel has left a marker in your browser's local storage; if it has, that browser's visits are not counted. The counter does not write anything to this storage.

## Forms and security records

On the contact, newsletter and job application forms, a signed, single-use token is added to the form to tell that the submission was made by a human; when you first touch the form, your browser performs a small calculation and also writes the result into the form. The form also contains a hidden field that people do not see. This information is not stored as a cookie; it stays inside the form and is sent to us only when you submit the form. A digest of used tokens is kept on our server for two hours at most.

To prevent a large number of submissions in a short time, when a form is submitted, a digest (hash) of your IP address and the submission times are kept on our server. This record is used only for this purpose; records older than one day are deleted during the server's daily maintenance. How the form you submit itself (including your IP address) is stored, and how the submission is passed through the spam filter, is explained in the [KVKK Privacy Notice](https://arslanlidanismanlik.com/en/legal/privacy-notice).

## Browser storage

For the site to run smoothly, a few short pieces of information that contain no personal data are kept in your browser's session memory (sessionStorage): whether the transition effect between pages should be played; that a featured announcement you have closed is not reopened during the same visit; on advertising pages, the campaign details and click identifiers in the address bar (such as gclid; so that they can be added to the form record even if you go to another page and come back); and a marker so that, on the thank-you page, the same conversion is not counted a second time when the page is refreshed. This information stays only on your device and is deleted automatically when you close the browser tab; except for what is added to the form record, it is not sent to our server.

If enhanced conversions are enabled and you have given advertising consent, when you submit the YTAK or Capacity form, your email address and phone number are placed in session memory to be carried to the thank-you page; they are deleted immediately after being passed to the Google tag on the thank-you page. If you have not given advertising consent, this information is never stored.

On visitor pages, apart from these, only your cookie preference ("arsl-cerez") is written to local storage (localStorage). This storage is also used by the browsers of our employees who use the admin panel (see "Admin panel and AI access").

## Admin panel and AI access

The site's admin panel (at the /yonetim address) is for our authorized employees only and is not part of the visitor pages. Every browser that opens this address is given a session cookie named "arsl\_yonetim" the moment the sign-in page opens. This cookie is strictly necessary: it is used to maintain the session and to protect actions against forged requests; it is sent only on admin panel addresses, is deleted when you close the browser, cannot be read by scripts in the browser, and is not sent with requests coming from other sites. If no action is taken in the panel, the session also becomes invalid on the server after 8 hours.

The authorization page (/oauth/authorize) that our employees use when connecting AI assistants to the site also leaves a session cookie named "arsl\_oauth" to protect the form against forged requests; this cookie is sent only on that page and is deleted when you close the browser.

In the local storage of a browser that uses the panel, two small markers are also kept: a marker so that this browser's own visits are not written to the visitor counter, and the preview preference on the search engine screen. These markers are created only in the browser of the employee using the panel; they are not created by your browsing of the site and are not sent to the server.

## External links and Google

Fonts, images and code files on the site are loaded from our own server. The only exception is the Google tag: it is loaded from googletagmanager.com each time a page is opened, and your browser connects to Google servers at that time. If you have not given advertising and analytics consent, no cookies are written; even so, as with every internet request, Google sees your IP address and browser information. Details are in the "Cookies and ad measurement" section of the [KVKK Privacy Notice](https://arslanlidanismanlik.com/en/legal/privacy-notice).

When you click links to WhatsApp, Google Maps, our social media accounts and the institution pages in announcements, the cookie and privacy policies of the relevant site apply. As long as you do not click these links, no information goes to those sites.

## Transfers abroad

If you have given advertising consent, measurement data is transferred to Google LLC (USA) and Google Ireland Limited (Ireland). This transfer is based on your explicit consent under KVKK Art. 9; details are in the [KVKK Privacy Notice](https://arslanlidanismanlik.com/en/legal/privacy-notice). For Google's data processing terms, see the [Google Privacy Policy](https://policies.google.com/privacy).

## Managing your preferences and withdrawing consent

You can change your choice at any time: the "Cookie preferences" link at the very bottom of the page reopens the preferences panel. When you withdraw your consent, the Google tag stops using your cookies, and the measurement cookies it wrote to our site's domain are deleted from your browser. Your choice is asked again after 12 months; if there is a significant change in the cookie categories or in the text, it is asked earlier.

You can also view, delete or block cookies and site data in your browser settings. Blocking cookies does not affect how the site works; you will only be unable to sign in to the admin panel. If you delete your browser's local storage, your cookie preference is deleted as well and the banner appears again.

## Changes

We update this policy as the cookie categories or the services we use change; the update date is written at the end of the page. In the case of significant changes, your consent is requested again.

## Contact

If you have questions about our cookie policy, you can contact us at info@arslanlidanismanlik.com.

Last updated: 27 October 2026

## Contact

- Phone: +90 501 699 42 77, +90 501 678 42 77
- Email: info@arslanlidanismanlik.com
- Address: Starport Residence, Yenişehir Mah. Millet Cad. Sümbül Sk. No:10 D:28, 34912 Pendik / İstanbul
- Contact page: https://arslanlidanismanlik.com/en/contact

HTML version of this page: https://arslanlidanismanlik.com/en/legal/cookie-policy
