This English text is a translation provided for convenience; in case of any discrepancy, the Turkish version (Çerez Politikası) prevails.
1. Scope and data controller
This Cookie Policy explains the cookies and similar technologies used in connection with the GOSpock service operated by Neden Olmasın Reklam ve İlet. Hiz. Dan. Tic. Ltd. Şti. (the "Company", "we"). It covers three separate contexts:
- the gospock.com website (this site),
- the GOSpock panel (the administration panel used by our customers' employees),
- the GOSpock SDK (the software development kit our customers place on their own websites).
For the gospock.com website and the GOSpock panel, the Company is the data controller. For data stored through the GOSpock SDK on our customers' websites, the relevant customer is the data controller; the Company processes that data as a data processor on the customer's instructions (see Section 5 for details).
For general information on how your personal data is processed, please see our Privacy Policy and our KVKK Privacy Notice.
2. What are cookies and similar technologies?
A cookie is a small text file that is saved in your browser when you visit a website and is sent back to that website with later requests. Cookies are used, for example, to keep you signed in, for security, and to remember your preferences. A cookie set by the site you are visiting is a "first-party" cookie; one set by another domain is a "third-party" cookie. Cookies deleted when the browser is closed are "session cookies"; those kept for a set period are "persistent cookies".
Other browser technologies work in a similar way:
- localStorage (local storage): lets a website keep small pieces of data in your browser. Unlike cookies, it is not sent to the server automatically with every request and does not expire on its own; it is kept until the site removes it or you clear your browser data.
- IndexedDB: a database in the browser for storing structured data. It is used, for example, to hold values needed by components running in the background, such as a notification service worker.
In this policy, "cookies" also covers these similar technologies unless stated otherwise.
3. The gospock.com website
gospock.com is a static website and sets no cookies. No analytics, advertising or tracking cookies and no third-party trackers are used on this site. A single value is saved in your browser's local storage only to remember the site language you have chosen:
| Name | Type / Where | Purpose | Duration | Category |
|---|---|---|---|---|
gs_site_lang | localStorage (first party) | Remembers the site language you chose (Turkish / English) | Until you clear your browser data | Strictly necessary (functional preference) |
All of the site's resources, including fonts, are served from gospock.com. The site loads no third-party resources, so no visitor data is passed to third parties when a page loads.
In addition, the hosting service keeps server access logs (IP address, time, requested page, browser information) for security purposes. These logs are not cookies; details are in our Privacy Policy.
4. The GOSpock panel
The GOSpock panel is the administration panel used by team members invited by our customers. The panel uses only first-party, strictly necessary cookies needed for the panel to work and stay secure. No analytics, advertising or third-party tracking cookies are used in the panel.
| Name | Type / Where | Purpose | Duration | Category |
|---|---|---|---|---|
gospock-session | Cookie (first party) | Keeps you signed in and secures your session | Session; ends after 2 hours of inactivity | Strictly necessary |
XSRF-TOKEN | Cookie (first party) | Protection against cross-site request forgery (CSRF) | 2 hours | Strictly necessary |
remember_web_* | Cookie (first party) | Remembers your sign-in if you ticked "Remember me"; set only when this option is chosen | Until you sign out, at most 400 days (browser maximum) | Strictly necessary (function you requested) |
appearance | Cookie (first party) | Remembers your light / dark / system theme preference | 1 year | Strictly necessary (functional preference) |
sidebar_state | Cookie (first party) | Remembers whether the side menu is open or closed | 1 week | Strictly necessary (functional preference) |
If you block or delete these cookies in your browser, you may not be able to sign in to the panel, or your preferences may be reset.
5. The GOSpock SDK on customers' websites
Our customers may place the GOSpock SDK on their own websites to send push notifications and measure usage events. In that case the cookie and storage entries below are created by the customer's website, under the customer's own domain (first party from the customer's perspective). GOSpock does not set cookies on customer sites from the gospock.com domain.
For these entries, the relevant customer is the data controller. It is the customer's responsibility to describe them in its own cookie notice and privacy notice and, where required, to obtain and manage explicit consent through its own consent mechanism. The Company processes the data obtained through these entries as a data processor on the customer's instructions; details are in the Data Processing Agreement. The list below is provided for transparency.
| Name | Type / Where | Purpose | Duration | Category |
|---|---|---|---|---|
gs_udid | Cookie + localStorage (customer domain) | Random device id generated by the SDK | Cookie: 1 year; localStorage: until browser data is cleared | Analytics / notification service |
gs_sid, gs_sid_last | localStorage (customer domain) | Session id and time of last activity | Until browser data is cleared (values are updated per session) | Analytics |
gs_uid | localStorage (customer domain) | The customer's own user id, passed by the customer through an identify() call | Until browser data is cleared | Analytics |
gs_queue, gs_inflight | localStorage (customer domain) | Events waiting to be sent | Until the events are sent | Analytics |
gs_attr | localStorage (customer domain) | Links events after a notification click or campaign link to the campaign (campaign attribution) | 30 minutes | Analytics |
gs_config | localStorage (customer domain) | Cached app configuration | 1 hour | Functional |
gs_device_id, gs_push_sub | localStorage (customer domain) | Web push registration (subscription details) | Until the subscription ends or browser data is cleared | Notification service |
gospock | IndexedDB (customer domain) | Values needed by the notification service worker | Until browser data is cleared | Notification service |
The categories are indicative only; the customer assesses, based on its own use, which category these entries fall into and whether they require explicit consent. For requests about these entries and the related data, you should first contact the owner of the relevant website (the customer acting as data controller). Requests sent to the Company are forwarded to the relevant customer.
6. Legal basis and consent
The cookies and storage entries used on the gospock.com website and in the GOSpock panel are strictly necessary for the site and the panel to work, for security, and to provide functions you request (such as language, theme or "Remember me"). Personal data processed through them is processed on the legal ground in Article 5(2)(f) of the Turkish Personal Data Protection Law No. 6698 ("KVKK") (legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject). Where the panel user is the customer that has itself concluded the service contract with the Company, the legal ground in Article 5(2)(c) (processing is directly related to the conclusion or performance of a contract) also applies. This approach is in line with the Guide on Cookie Practices (Çerez Uygulamaları Hakkında Rehber) published by the Personal Data Protection Authority in 2022, under which explicit consent is not required for strictly necessary cookies. For visitors from the European Union, strictly necessary cookies likewise fall under the exemption from consent in Article 5(3) of the ePrivacy Directive 2002/58/EC.
GOSpock does not use analytics, advertising or third-party tracking cookies on the gospock.com website or in the GOSpock panel. For this reason, no cookie consent banner is shown there. If we ever plan to use a cookie or similar technology that requires explicit consent, this policy will be updated and such entries will be used only after your explicit consent has been obtained.
For the GOSpock SDK entries on customers' websites, determining the legal basis and, where required, obtaining explicit consent is the obligation of the customer as data controller, as explained in Section 5.
7. Managing cookies and site data
You can view, delete or block cookies and other site data (localStorage, IndexedDB) in your browser settings. Menu names may differ depending on browser version and device; the general steps are:
- Google Chrome: Settings → Privacy and security → "Delete browsing data", then select "Cookies and other site data". To delete data for a specific site, use Settings → Privacy and security → Site settings → "View permissions and data stored across sites".
- Safari (macOS): Safari → Settings → Privacy → "Manage Website Data" to remove data for individual sites or all sites. Safari (iOS / iPadOS): Settings → Safari → Advanced → Website Data.
- Mozilla Firefox: Settings → Privacy & Security → "Cookies and Site Data", then use "Clear Data" or "Manage Data".
- Microsoft Edge: Settings → Cookies and site permissions → "Manage and delete cookies and site data" to view or delete data; for all browsing data use Settings → Privacy, search, and services → "Clear browsing data".
In most browsers you can also click the icon to the left of the address bar to manage the cookies, site data and permissions for that site only. Deleting cookies and site data usually also deletes the related localStorage and IndexedDB entries; you may need to sign in to the panel again and re-select your preferences. If you block strictly necessary cookies, the panel may not work properly.
8. Stopping web push notifications
Receiving push notifications from a website starts with the notification permission your browser asks you for. You can withdraw this permission at any time in your browser's site settings:
- Google Chrome and Microsoft Edge: on the relevant site, click the icon to the left of the address bar → Site settings (or Site permissions) → Notifications → "Block". For all sites: Site settings / Site permissions → Notifications in the browser settings.
- Mozilla Firefox: remove the notification permission from the icon in the address bar, or go to Settings → Privacy & Security → Permissions → Notifications → "Settings" to block or remove the relevant site.
- Safari (macOS): Safari → Settings → Websites → Notifications, and choose "Deny" for the relevant site. You can also manage notifications in macOS System Settings → Notifications.
- Web apps added to the Home Screen (iOS / iPadOS): turn off notifications for the relevant app in Settings → Notifications.
Notifications from a mobile app can be turned off for that app in your device's Settings → Notifications. Once you withdraw notification permission, the relevant site or app can no longer send you notifications; your notification registration is also deactivated in GOSpock when the push service reports it as invalid. The owner of the site or app sending the notifications is the data controller for this data; you can contact them with requests about your data.
9. Changes
We may update this Cookie Policy when the cookies we use or the applicable legislation change. The current text is always published on this page and the "last updated" date at the top of the page is changed. If a new cookie requiring explicit consent is to be used, it will be used only after your explicit consent has been obtained, as stated in Section 6.
Last updated: 8 October 2026.
10. Contact
For questions about this policy or our use of cookies, and for requests under the KVKK, you can reach us at:
Neden Olmasın Reklam ve İlet. Hiz. Dan. Tic. Ltd. Şti.
İstiklal Mah. Piyalepaşa Bulv. No:22/1 B-C Blok, Beyoğlu / İstanbul, Türkiye
Kasımpaşa Vergi Dairesi (Tax Office) — Tax no (VKN): 6300431044
E-mail: info@gospock.com
For your rights under the KVKK and how to exercise them, see the KVKK Privacy Notice; for general information on the processing of personal data, see the Privacy Policy.