Cookie Policy
Turquoise Stays (https://turquoisestays.com) uses cookies and browser storage only to the extent necessary. No cookie for measurement or advertising purposes is written to or read from your device without your consent — the same rule applies whichever country you connect from. If you decline, the site keeps working in full.
Strictly necessary cookies (no consent required)
- hr_riza — stores your cookie choice (Accept / Decline); what is stored is your choice itself. 180 days.
- hr_sepet — links your basket to your browser; ordering is impossible without it. 30 days.
- hr_odeme_g — single-use key so that the result of your order can be shown when you return from paying by card (3D Secure). 2 hours.
- hr_talep — protects the request form against misuse and ensures that the security question does not change when the page is refreshed. Written only on the request page. 1 day.
- hr_sayma — stores your "Do not count this browser" request (see the "On-site traffic measurement" section below). 13 months.
- hr_kur — remembers the currency you want approximate prices shown in; it is a preference like language selection and is not passed to measurement or advertising. 180 days.
- A browser storage entry that remembers that you closed the introductory window. 7 days.
Cookies subject to consent
The following are written only when you select "Accept" in the cookie banner. The banner asks for a single decision: "Accept" enables all of the analytics and marketing cookies below, "Decline" enables none of them.
Analytics
- hr_sid — randomly generated identifier, used to count unique visitors. It does not contain your name, contact details or device information. 180 days.
- Short markers written to browser storage so that measurement events are not counted twice (add-to-basket, payment and purchase steps). For the duration of the session; the purchase marker remains until you delete it or withdraw your consent.
- Google Analytics 4 cookies (
_ga,_ga_*) — set by Google when Google tags (via Google Tag Manager) are installed on the site. 2 years.
Marketing
- hr_attr — the source of the ad click or link that started your visit: Google Ads click identifier, campaign details, entry channel (e.g. Google ad, e-mail campaign), the domain name of the site that referred you, the first page you opened and the time it was opened. If you make a purchase, it is linked to your order to measure whether the ad brought a sale. 30 days.
- Google Ads cookies (
_gcl_aw,_gcl_au) — match an ad click with a sale; set by Google when Google tags are installed on the site. 90 days.
If you do not give consent
- The analytics and marketing cookies and browser storage entries above are not written or read; if they were written earlier, they are deleted.
- When Google tags are installed on the site, Google Consent Mode v2 is used: without your consent, Google tags neither write nor read cookies; they send only a signal without any identifier (page, time, browser type, consent status). Google uses these signals for aggregate modelling without identifying individuals.
- On-site traffic measurement still takes place, but without anything being written to your device and without identifying you (see below).
On-site traffic measurement
When you open a page, only the following are recorded in our own database, from the request your browser already sends to our server, for aggregate statistics: time, page viewed, device type (phone, tablet or computer), language of the page, whether you arrived at the site from outside, the domain name of the site that referred you (e.g. google.com), the type and label of an advertising or campaign marker if present in the link (e.g. "Google ad", campaign name) and whether you gave cookie consent. Add-to-basket, payment and purchase steps are counted in the same way, with product, date, number of guests and amount information.
- Your IP address and your browser identification string (user-agent) are not stored under any circumstances. The ad click identifier itself (e.g. gclid) is stored only if you have given consent to cookies.
- If you have not given consent to cookies, the record contains nothing that identifies you or your device; records are not combined with other data on a per-person basis and are not shared with third parties. If you have given consent, your unique visitor identifier (hr_sid) is also added to the record; in addition, the ad click identifier held in hr_attr is added to the add-to-basket, payment and purchase records.
- Records are used only to see how many visits the site and the product pages receive, through which channels, and whether the visits turn into sales.
- Search engine crawlers, link previewers, page prefetches and other automated programs are not counted as visitors; automated programs are counted separately, by name only. Visits by staff who have an administration panel session open are not counted either.
- Records are retained for at most 25 months and then deleted.
- If you do not want this, you can use the "Do not count this browser" link in the page footer to stop the counting of visits made from this browser; your choice is stored in the hr_sayma cookie. You can undo this at any time with the same link.
Transfer abroad
If you have given consent to cookies and Google tags are installed on the site, analytics and marketing data are transferred to Google (Google Ireland Limited / Google LLC, USA). If your order began with a click on a Google ad, the ad click identifier, together with the time and amount of the order, may be reported to Google Ads to measure whether the ad brought a sale; your name, e-mail or phone number is not included in the notification. These transfers take place only with your consent (explicit consent under KVKK art. 9); for visitors in the EU, Google's EU–US Data Privacy Framework certification and standard contractual clauses are relied upon. On-site traffic measurement records stay on our own server and are not shared with anyone.
Changing your choice
Use the "Cookie preferences" link in the page footer to withdraw your decision at any time: your measurement and advertising cookies are deleted and the cookie banner appears again. Withdrawing your consent is as easy as giving it. You may also delete all cookies from your browser settings.
Administration panel cookies (staff only)
For staff who log in to the administration panel, the session (ycp_session), panel language (ycp_dil) and two-step verification set-up (ycp_totp_pending, 10 minutes) cookies are used. These are not written to site visitors; visits made while a panel session is open are not included in traffic measurement.
Your rights and contact
Under KVKK article 11 and, for visitors in the EU, GDPR articles 15–22, you have the right to access your data, to request its correction or erasure, to object to processing and to complain. To lodge a complaint, you may apply, in Turkey, to the Turkish Personal Data Protection Board (KVKK Board) and, in the EU, to the data protection authority of the country where you are located. You may send your requests to info@ycfdigital.com. Details on the processing of your personal data are in the KVKK Privacy Notice.
Last updated: 1 October 2026 · Text version: v2-2026-10