Cookie Policy

Last updated: 7 September 2026

In short

e-kariyerim uses exactly two cookies, both needed for the service to work. We use no advertising cookies, no tracking pixels, no analytics tool such as Google Analytics, and no third-party cookies at all. That is why you never see a cookie consent banner here: there is no optional cookie to leave to your choice.

Under Turkish data protection law (KVKK), strictly necessary and functional cookies do not require explicit consent — what they require is disclosure. This page is that disclosure.

The cookies we use

Name	Purpose	Type	Duration
NEXT_LOCALE	Remembers which language a page opens in (Turkish/English). Our server writes it to match the language in the address bar, and updates it when you switch languages.	Strictly necessary — first party	Session: deleted when you close the browser
theme	Remembers your light/dark theme preference. Written only when you press the theme button, or when you sign in and the preference stored on your account is applied.	Functional — first party	1 year

Both store nothing but a preference: neither contains an identifier, a user number or a tracking code, and neither is sent to any third party.

Browser storage (localStorage and sessionStorage)

These are not cookies, but they store data on your device in the same way, so we list them here too:

Session tokens — aa_access_token, aa_refresh_token, their expiry times, and aa_user (your name, email address and interface preferences). They keep you signed in; they live in localStorage and are deleted when you sign out.
Sign-in security keys — aa_google_oauth and aa_linkedin_oauth. These are single-use values that block a CSRF attack during a Google or LinkedIn sign-in; they live in sessionStorage and are deleted the moment the sign-in completes.

Both are required for the service to work — without them you cannot sign in.

Third parties and tracking

None of the following exist on this site:

Google Analytics, Meta Pixel, Hotjar or any comparable analytics/tracking tool.
Advertising cookies, retargeting or profiling.
Embedded third-party content (YouTube, Google Maps and the like) — we use none, so no cookies arrive behind them either.
Externally loaded fonts or scripts: fonts are bundled into our own server at build time, so your browser never calls Google Fonts.

The site's Content-Security-Policy only lets your browser connect to our own server, our own API and the error monitoring service; that list cannot grow quietly.

Error monitoring

We use Sentry so that we can diagnose unexpected errors. Sentry writes no cookie and stores nothing in your browser, but it does create a record when an error occurs. What is sent, where it goes and which legal basis it rests on is set out in detail in the error monitoring section of the Privacy Policy. Session replay and performance tracing are switched off; your browsing behaviour is not tracked.

How to remove cookies

You can delete this site's cookies and site data from your browser's settings at any time, and you can block cookies entirely. The effect: your language and theme preferences fall back to the defaults, and if you also delete the session tokens you are signed out and have to sign in again. Nothing else about the site stops working.

Deleting the data held in your account is a separate matter — you can do that by deleting your account from the Settings page.

If this policy changes

If we ever add an optional cookie for analytics, advertising or anything similar, we will update this page before adding it and turn on a consent screen where each category can be chosen separately and everything defaults to off. No such cookie will be written without your consent.

For everything else we hold about your account, see the Privacy Policy.

Contact

For questions about cookies, write to privacy@ekariyerim.com.