This Cookie Policy explains the cookies used on the sora-ik.com website operated by Sora Yazılım Teknolojileri ("Sora Yazılım", "we") and the processing of personal data carried out through cookies. General information on personal data processed through cookies is set out in the KVKK Privacy Notice, and information on other data processing activities on the website in the Privacy Policy.
1. What is a cookie?
A cookie is a small text file that the website you visit places in your browser and that is sent back to the website with subsequent requests.
- By duration: Session cookies are deleted when you close the browser; persistent cookies are deleted automatically after a set period.
- By party: First-party cookies are placed directly by the website you visit (sora-ik.com), third-party cookies by another domain. When a service provider's script creates a cookie on the sora-ik.com domain, the cookie appears as first-party, but the data is processed by that provider; in such cases, the provider is also indicated in the table below.
- By purpose: Necessary cookies are required for the website to operate and stay secure; analytics cookies produce visit statistics; marketing cookies are used for advertising. No marketing cookies are used on our website.
2. Which cookies do we use?
| Cookie name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
sik_at |
Sora İK (first party; sora-ik.com and subdomains) | Access token that authenticates your session when you log in | For the session; the token inside is valid for 15 minutes | Necessary |
sik_rt |
Sora İK (first party; sora-ik.com and subdomains) | Renews the session without re-entering your password when the access token expires | 30 days | Necessary |
sik_csrf |
Sora İK (first party) | Protection against cross-site request forgery (CSRF) in forms and account operations | For the session | Necessary |
sik_invite |
Sora İK (first party) | Moves the code in a team invitation link out of the address bar to the invitation acceptance page; set only when an invitation link is opened | Up to 1 hour | Necessary |
sik_consent |
Sora İK (first party) | Remembers your cookie preferences; ensures that analytics scripts load only with consent | 12 months | Necessary |
sik_theme |
Sora İK (first party) | Remembers your light or dark theme choice; placed only when you choose a theme | 12 months | Necessary (a preference you chose) |
__cf_bm |
Cloudflare (on the sora-ik.com domain) | Distinguishes bot traffic from human visitors; placed only when Cloudflare bot protection is enabled | Expires after 30 minutes of inactivity | Necessary |
cf_clearance |
Cloudflare (on the sora-ik.com domain) | Remembers that you passed the Cloudflare security check; placed only when a check is shown | — | Necessary |
| Cloudflare Turnstile | Cloudflare | Bot verification on form submissions | — | Necessary |
_ga |
Google (Google Analytics 4; on the sora-ik.com domain) | Produces statistics by distinguishing visitors from one another | 2 years | Analytics (only with consent) |
_ga_<ID> |
Google (Google Analytics 4; on the sora-ik.com domain) | Maintains session state | 2 years | Analytics (only with consent) |
The durations of the Google Analytics cookies are the default durations published by Google. If, depending on our configuration, Cloudflare places another security cookie listed in Cloudflare's cookie documentation, this table will be updated. Ahrefs Web Analytics does not appear in the table because it does not use cookies (Section 4).
3. On which legal grounds do we use cookies?
The Çerez Uygulamaları Hakkında Rehber (Guide on Cookie Practices) of the Personal Data Protection Authority (KVK Kurumu) states that explicit consent may not be required where a cookie is used solely to carry out communication or is strictly necessary for a service explicitly requested by the user.
| Category | What for? | Legal ground | Consent required? |
|---|---|---|---|
| Necessary | Session, security, CSRF protection, bot protection, remembering cookie and theme preferences | Article 5/2-c of Law No. 6698 (KVKK, Türkiye's Personal Data Protection Law): providing the service you requested; Article 5/2-f: legitimate interest (website security) | No; cannot be switched off |
| Analytics | Visit and usage statistics | Article 5/1: explicit consent | Yes; off by default |
| Marketing | Not used | — | — |
Necessary cookies are not used for marketing purposes or to track your behavior across different websites.
4. Ahrefs Web Analytics and cookieless measurement
We also use Ahrefs Web Analytics to measure website traffic. According to Ahrefs' product page, this service does not use cookies and does not store IP addresses together with analytics data. Even so, the Ahrefs Web Analytics script is treated as part of the analytics category and is loaded only if you consent to analytics cookies.
5. Local storage (localStorage)
Your cookie preference is also stored in your browser's local storage (localStorage) for use if the sik_consent cookie is deleted or cannot be read. This record contains only your preference; it contains no information that identifies you and is deleted when you clear your browser data.
6. How can you manage your cookie preferences?
- First visit: The banner at the bottom of the page offers "Accept", "Reject" and "Customize" equally. The banner does not prevent you from using the page; analytics scripts are not loaded until you make a choice.
- Customization: In the panel opened with "Customize", necessary cookies are listed for information; analytics cookies are off by default and are activated only if you switch them on.
- Changing your preference or withdrawing consent: The "Cookie preferences" link at the bottom of the page reopens the panel. When you switch off analytics cookies and save, analytics scripts are no longer loaded; you can also delete previously placed analytics cookies in your browser settings.
- Browser settings: You can delete or block cookies in your browser settings. If you block necessary cookies, functions such as login and form submission may not work.
Your preference is stored in the sik_consent cookie for 12 months; at the end of this period, the banner is shown again.
7. Transfer abroad
Cloudflare and, if you consent, Google and Ahrefs deliver their services through servers located abroad. The transfer of data processed through these cookies and scripts to these providers qualifies as a transfer abroad within the scope of Article 9 of Law No. 6698. Information on the basis for the transfer is set out in Section 5 of the KVKK Privacy Notice.
8. Your rights
Regarding your personal data processed through cookies, you can exercise your rights under Article 11 of Law No. 6698 through the KVKK request form or at kvkk@sora-ik.com. All request channels are listed in Section 8 of the KVKK Privacy Notice.
9. The Authority's cookie guide
You can find the recommendations of the Personal Data Protection Authority on the use of cookies in the Çerez Uygulamaları Hakkında Rehber (Guide on Cookie Practices).
10. How does this policy change?
When the cookies we use change, we update this policy and the cookie table. If a new analytics or marketing cookie is added, it is not placed without your consent. The current version is always published on this page, and the "Last updated" date at the top of the page changes. Version of this policy: 1.1.
This text is a translation of the Turkish original; in case of any discrepancy, the Turkish version prevails.