COOKIE POLICY
This Cookie Policy (the “Policy”) explains the cookies and similar technologies used on the Numji.com website and related digital services (collectively, the “Platform”), which are operated by DEVFRECO BİLİŞİM TEKNOLOJİLERİ İTHALAT İHRACAT TİCARET LİMİTED ŞİRKETİ (the “Company”) in its capacity as data controller.
This Policy describes the personal data processing activities carried out through cookies under Turkish Personal Data Protection Law No. 6698 (the “KVKK”), the types of cookies used, the purposes of processing, the legal grounds, how you can manage your cookie preferences, and the rights you possess as a data subject.
1. WHAT IS A COOKIE?
Cookies are small text files that can be saved to your device via your browser or device when you visit a website. Cookies may be used for purposes such as maintaining a session, ensuring security, remembering user preferences, and—subject to user consent—measuring Platform usage.
1.1. Cookies Based on Retention Period
- Session Cookies: Cookies that are used during the browser session and deleted when the browser is closed.
- Persistent Cookies: Cookies that remain on the device for a specific period or until deleted by the user.
1.2. Cookies by Source
- First-Party Cookies: These are cookies placed directly by the Numji.com domain.
- Third-Party Cookies: These are cookies that may be placed by third-party service providers used on the Platform.
2. TYPES OF COOKIES USED AND THEIR PURPOSES
2.1. Strictly Necessary Cookies
These are cookies necessary for the operation of the Platform's core functions, ensuring login and account security, saving user preferences, and executing purchasing and secure transaction processes. Without these cookies, certain basic features of the Platform may not function.
Strictly necessary cookies may be used without obtaining the user's explicit consent, based on the legal grounds —depending on the nature of the transaction—of being directly related to the conclusion or performance of a contract (pursuant to Article 5/2-c of the KVKK), compliance with a legal obligation (pursuant to Article 5/2-ç), or the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not prejudiced (pursuant to Article 5/2-f).
2.2. Analytical and Performance Cookies
These cookies are used to measure which pages of the Platform are visited, how long users remain on those pages, technical errors, performance information, and general usage patterns. Numji may use Google Analytics for these purposes.
Analytics and performance cookies are activated only after the user gives explicit consent through the cookie preference panel. Before consent is given, the Google Analytics tag is not loaded, Analytics cookies are not created, and no measurement data is sent to Google through Analytics.
2.3. Functionality Cookies
These are cookies that enable the system to remember the user's preferences regarding language, appearance, or similar settings. If non-mandatory functionality cookies are used, they are activated based on the user's preference or, to the extent necessary, their explicit consent.
2.4. Advertising and Conversion Measurement Cookies
To help measure visits and conversions resulting from Google advertisements, the Platform may use the
_gcl_au cookie set by Google Ads / Google tag.
This cookie helps store technical information related to ad clicks and conversion measurement.
The _gcl_au cookie and similar non-essential advertising or conversion-measurement cookies are not activated
until the user gives explicit consent through the cookie preference panel. Refusing advertising cookies does not prevent use of the Platform's core features.
3. COOKIES THAT MAY BE USED ON THE PLATFORM
| Cookie / Technology | Provider | Type | Purpose | Retention Period | Legal Basis |
|---|---|---|---|---|---|
cookieId |
Numji / Devfreco | Mandatory, first-party, session cookie | Generation of a technical identifier within the scope of the browser or session, maintaining the application flow and secure session operations. | For the duration of the browser session | KVKK Art. 5/2-c and, to the extent applicable, Art. 5/2-f |
sessionId |
Numji / Devfreco | Mandatory, first-party | Identification of the user session, maintenance of login status, prevention of unauthorized access, and ensuring secure account usage. | Approximately 50 days based on current configuration; expires when the session is closed or times out | KVKK Art. 5/2-c, Art. 5/2-ç and, to the extent applicable, Art. 5/2-f |
sessionType |
Numji / Devfreco | Mandatory, first-party | Determination of the active session type or user access level and correct presentation of relevant screens. | Approximately 50 days based on current configuration | KVKK Art. 5/2-c and, to the extent applicable, Art. 5/2-f |
UserId |
Numji / Devfreco | Mandatory, first-party | Matching the logged-in user account with the application session and execution of authorized operations belonging to the user. | Approximately 50 days based on the current configuration | KVKK Art. 5/2-c and, to the extent applicable, Art. 5/2-f |
_ga |
Google Analytics / Google LLC | Analytics; third-party service cookie set as a first-party cookie | To help distinguish visitors from one another and generate Platform usage statistics. | Subject to Google Analytics configuration and browser limitations; up to approximately 400 days in the current configuration | User's explicit consent |
_ga_JR28S0NVHB |
Google Analytics / Google LLC | Analytics; third-party service cookie set as a first-party cookie | Maintaining session state within Numji’s Google Analytics measurement stream and associating usage metrics. | Subject to Google Analytics configuration and browser limitations; up to approximately 400 days in the current configuration | User's explicit consent |
_gcl_au |
Google Ads / Google LLC | Advertising and conversion measurement; third-party service cookie set as a first-party cookie | To assist in performing click and conversion measurement associated with Google ads, and in evaluating ad performance. | Approximately 3 months in the current configuration | User's explicit consent |
4. GOOGLE ANALYTICS, GOOGLE ADS, AND CROSS-BORDER DATA TRANSFERS
If the user consents to analytics and/or ad measurement cookies, cookie identifiers, device and browser information, approximate location data, access time, pages visited, usage and interaction data on the Platform, and technical information regarding ad clicks and conversion measurement may be processed via Google Analytics and Google Ads services.
Technical and administrative measures are implemented to ensure that names, surnames, email addresses, phone numbers, dates of birth, report content, or similar personally identifiable information are not sent to Google Analytics and Google Ads services. Directly identifiable data is not used in URLs, page titles, event names, or Analytics event parameters.
Since Google Analytics and Google Ads services operate via systems located abroad, limited personal data may be transferred abroad if consent is given for the relevant analytics or ad measurement cookies. This transfer is carried out in accordance with Article 9 of the KVKK and applicable appropriate safeguard mechanisms. Detailed information Privacy Policy and KVKK Disclosure Statement is available in the linked document.
5. MANAGING COOKIE PREFERENCES
A cookie preference panel is presented to the user upon the first visit to the Platform. Non-essential cookies are not executed until the user has given explicit consent. The user is presented with the following options:
- Reject All: Prevents the execution of cookies other than essential cookies.
- Accept Analytics and Measurement Cookies: Enables the operation of Google Analytics and Google Ads conversion measurement cookies.
- Preferences and Information: Provides access to detailed information about cookies and preference options.
Rejecting analytics cookies does not prevent the use of the Platform's core features. Users may withdraw their previously given consent or change their preferences at any time. The preference panel can be reopened using the “Cookie Preferences” link located in the footer area.
If consent is withdrawn, no new analytics or ad conversion measurements will be performed; existing Google Analytics and Google Ads cookies will be deleted. Cookies can also be deleted separately via the browser.
6. BROWSER SETTINGS
Users can view, delete, or block cookies through their browser settings. If all cookies are blocked via browser settings, certain Platform features that rely on strictly necessary cookies—such as login, session management, purchasing, or report generation—may not function correctly.
Using browser settings does not replace the cookie preference panel on the Platform. It is recommended to manage preferences regarding non-essential cookies directly via the cookie panel on the Platform.
7. YOUR RIGHTS UNDER THE KVKK
Under Article 11 of the KVKK, with respect to personal data processed through cookies, you have the right to determine whether your personal data is being processed, request information about such processing, learn the purpose of the processing and whether the data is used in accordance with that purpose, learn the identities of third parties to whom the data has been transferred, request correction of incomplete or inaccurate data, request deletion or destruction of the data when the applicable conditions are met, and claim compensation for damages resulting from unlawful processing.
You may submit your requests from an email address previously registered in the Company’s systems and linked to your identity to info@devfreco.com or use another method specified in the Privacy Policy and KVKK Disclosure Statement.
8. UPDATING THE POLICY
The Company may update this Policy in the event of changes to the cookies used, service providers, technical infrastructure, or legislation. The updated Policy enters into force on the date it is published on the Platform.
Last Updated: August 1, 2026