Cookies and Similar Technologies Policy

Version date: 9 October 2026 · 2026-10-09-r3a

This English translation is provided for information only. In the event of any discrepancy between the Turkish and English versions, the Turkish version shall prevail.

1. Data controller and scope

Gloyd Teknoloji Anonim Şirketi uses cookies and similar browser storage tools on Glodely to provide account sessions, security and user-initiated actions. Address: İlkbahar Mah. Güneypark Küme Evleri No:19B/12, 06550 Çankaya/Ankara, Türkiye. Contact: kvkk@glodely.com; +90 850 840 65 78.

References to the Law in this policy mean Turkish Personal Data Protection Law No. 6698. The website has no optional cookies or cookie preference screen. The tools below are used for sessions, security and user-initiated actions; cookie consent is not requested for these uses. Advertising and marketing cookies are not used.

2. Purposes and legal bases

Tools necessary for the requested account and transaction are used under Article 5(2)(c) of the Law, concerning entering into or performing a contract. Security tools are used under Article 5(2)(f), concerning legitimate interests, with regard to the data subject's fundamental rights and freedoms. Device records containing personal data are processed only for these purposes. Cookieless usage and performance measurement is explained in section 6.

3. Cookies used

The following are Gloyd's first-party cookies. On a secure connection, cookie names may carry the prefix __Secure- or __Host-. The periods indicate browser storage duration.

Cookie name	Purpose	Duration
__Secure-glodely.session_token	Maintaining the account session.	30 days
__Secure-glodely.device	Recognising a known device through a signed device identifier and sending new-device security notifications.	365 days
__Secure-glodely.two_factor	Linking steps in two-step sign-in.	10 minutes
__Secure-glodely.reset_proof	Completing password reset verification.	5 minutes
__Secure-glodely.state	Securing the selected social sign-in process.	5 minutes
glodely_guest · __Host-glodely_guest on a secure connection	Linking a guest file action to the session.	72 hours

Article 5(2)(c) of the Law applies to session, guest transaction and sign-in verification cookies; Article 5(2)(f) applies to the device security cookie. Language preference is not stored in a cookie: glodely.com is used for Turkish and glodely.com/en for English.

4. Similar storage tools

Tool	Purpose and retention
glodely-auth-flow-v1 · sessionStorage	Maintains sign-in steps. Deleted when the tab closes or after 1 hour at the latest.
Keys beginning with glodely-draft: · localStorage	Stores the request draft being completed. Deleted when the request is submitted, BOM rows are added to the list, or the draft is cleared. An unsubmitted draft can be removed by clearing browser data.
better-auth.message · localStorage	Synchronises sign-out status across other open tabs. Updated on each sign-out; can be deleted from the browser.
glodely-sourcing-files · IndexedDB	Holds files to be attached to a request. A file is deleted when it is attached to the request. Unsubmitted files can be removed by clearing browser data.

These are Gloyd's first-party tools. Records containing personal data are processed under Article 5(2)(c) of the Law to carry out the requested action. Deleting a browser copy does not automatically delete a copy previously sent to the server.

5. Third-party security service

Cloudflare Turnstile is a third-party script used to check the registration, sign-in, verification-code and password-reset forms for bots. The service does not write cookies on Glodely's behalf; it processes IP addresses, browser and connection information. Article 5(2)(f) of the Law applies to Gloyd's transaction security purpose. Cloudflare acts as a processor for form checks and as a controller when improving its own bot detection. The provider's processing practices are explained in the Cloudflare privacy policy; overseas services and relevant recipients are explained in the Personal Data Processing Notice.

6. Cookieless analytics and performance measurement

Vercel Web Analytics and Speed Insights are used for usage and performance measurement only on the production website. The information transmitted comprises the page path with order numbers and link codes replaced by placeholders and the query string removed; the referring site's address (browsers mostly pass only its origin); country, device type, operating system, browser, and page loading and response times.

These measurement tools do not write cookies or other information to the device and do not track users across other websites. Sign-in, registration, operator and administration pages are excluded from measurement. Processing is based on the legitimate interest condition in Article 5(2)(f) of the Law to assess website use and improve performance, provided that the data subject's fundamental rights and freedoms are not harmed. Transfers relating to Vercel are explained in the Personal Data Processing Notice.

7. Browser settings and rights

You can delete or block cookies and other stored records through your browser settings. Blocking session and transaction tools may end a session, prevent security steps from being completed or cause unsaved actions to be lost. You can exercise your rights under Article 11 of the Law using the request channels explained in the Personal Data Processing Notice.