1. What is a cookie?
Cookies are small text files that websites place in your browser. Browser storage (localStorage / sessionStorage) serves similar purposes and remains on your device.
2. What does this website use?
There are two categories:
a) Necessary storage: always active
Small records on your device keep the cart populated, remember entries in the order form and prevent a dismissed announcement banner from reappearing. These records are not sent to the server or transferred to third parties. Under the Turkish Personal Data Protection Board's Guidelines on Cookie Applications, explicit consent is not required for necessary storage.
b) Advertising and usage measurement: on, and you can switch it off
We use Meta (Facebook) Pixel and Google Tag Manager to measure advertising effectiveness, and Microsoft Clarity to analyse usage of our parent-facing website. These services start when you open the page. Our legal basis is the legitimate interest ground in Article 5(2)(f) of the Turkish Personal Data Protection Law (KVKK): we cannot manage an advertising budget we cannot measure. At the same time we show a small notice card on screen; it shrinks once you start reading the page and becomes a cookie button in the bottom-left corner. If you select “Turn it off” in that card, or through that button, no further requests are sent to these services and the page reloads without measurement; the website continues to work the same way. Cookies written before that moment stay on your device — nothing reads them once measurement stops loading, but you can clear them from your browser settings (section 6 below). That refusal has no expiry date and is never reversed on its own. If your browser sends a Global Privacy Control (GPC) signal, measurement never starts and is treated as refused. You may change your choice at any time through the cookie button in the bottom-left corner or “Cookie preferences” at the bottom of the website; while measurement stays on, we show the card again every 6 months.
Fonts load from our own server; some images and videos load from our content delivery network.
3. Storage table
| Name | Type | Purpose | Content | Duration |
|---|---|---|---|---|
cv_cart_v1 | localStorage (necessary) | Cart | Only package ID and timestamp; no personal data | Until you delete it or complete the order |
cv_checkout | sessionStorage (necessary) | Order form draft | Name, email, telephone and order number: not sent to the server | Deleted when the browser tab closes |
cv_consent_v3 | localStorage (necessary) | Remember your cookie choice | Acceptance/rejection and date | 6 months |
_fbp | Meta cookie (only if accepted) | Advertising measurement: recognise the browser | Random identifier generated by Meta | 3 months |
_fbc | Meta cookie (only if accepted) | Associate an advertisement click with an order | Advertisement click identifier (fbclid) | 3 months |
_clck, _clsk | Microsoft Clarity cookies (only if accepted) | Associate the browser and page visits in the same session | Generated user/session identifier | Provider's current durations: Clarity cookies |
4. Meta Pixel: exactly what is sent?
Unless you have switched measurement off, and only the following:
- Visited page address, referring address, browser/device information and IP address;
- Actions: viewing pages, reviewing packages, adding to cart, proceeding to payment, completing orders, submitting an information form and clicking WhatsApp/telephone/email links;
- The relevant package's name, ID and price.
Never sent under any circumstances: your name, email, telephone, card information or any data belonging to your child. Advanced matching is disabled. Recipient: Meta Platforms Ireland Ltd. (Dublin); Meta may transfer data abroad, including to the USA. See Meta's Privacy Policy. You can also manage advertising choices through Meta Ad Preferences.
Microsoft Clarity
Unless you switch measurement off, clicks, scrolling, visited pages, browser/device information and masked session recordings are processed with Microsoft Clarity. Heatmaps and usage analyses help us improve the parent-facing website. Forms and order summaries are masked. Clarity is not added to the children's application. Microsoft advertising consent remains disabled for Clarity. Microsoft may process data abroad, including in the USA. See the Microsoft Privacy Statement.
5. Other third parties
Google Tag Manager manages website measurement tags and loads when you open the page. Its loading request shares your IP address and browser information with Google; data may be processed abroad. When you turn measurement off, it never loads again and the page reloads without these services; cookies written earlier stay on your device but are not read.
Payment takes place on the secure payment provider's (iyzico) page; its cookies are subject to its own policy. WhatsApp's own terms apply when you click a WhatsApp link. Our website is hosted on Vercel Inc. infrastructure; access logs are retained for a limited period for security (see the Privacy Policy).
6. Browser controls
You can view, delete or block website data (cookies and storage) through your browser settings. Blocking storage may prevent the cart and order form from working.
7. Changes and contact
The update date is revised when this policy changes. Questions: cosmoverseofficialapp@gmail.com.