Cookie Policy
DRAFT – This text has not yet been reviewed by legal counsel. The binding version will replace it here.
What cookies are
Cookies are small text files that a website you visit stores in your browser. This policy explains which cookies are used on the firstyou.app public site and the app.firstyou.app dashboard, both operated by İsterdim Ki Dijital Platform İşletmeciliği Limited Şirketi. Cookies are used only as far as needed for the service to work; no analytics, advertising or marketing cookies are used.
Public site (firstyou.app)
The public site itself sets no cookies and contains no visitor analytics, ad network or third-party tracker.
If you have signed in to the dashboard, your browser may also send the session cookie to the public site, because that cookie is scoped to the firstyou.app domain and its subdomains. The public site does not read or use it.
Dashboard (app.firstyou.app)
The dashboard uses strictly necessary cookies only:
- __Secure-fy_refresh: session cookie. After you sign in, it keeps your session alive and renews your access token. It is HttpOnly and Secure; it is sent only over HTTPS and cannot be read by scripts running in the browser. It lasts 30 days and becomes invalid when you sign out, when your account is deleted, or when the session is revoked for security reasons.
- Consent-record cookie (invite page): a strictly necessary cookie that will record that a user arriving through an invite link has accepted the terms. Its name and lifetime will be listed here when it goes live.
The dashboard keeps the short-lived access token only in browser memory, where it is discarded when the tab is closed; the browser’s local storage is not used.
Cloudflare
firstyou.app and its subdomains are served directly from our own server; no content delivery network sits in between and no third-party security cookie is set.
Analytics and marketing cookies
First You uses no analytics, advertising, retargeting or social media tracking cookies and embeds no third-party tracking pixels. No profiling based on visitor behaviour takes place. For this reason no cookie banner is shown; strictly necessary cookies do not require consent.
Managing cookies
You can delete or block cookies in your browser settings. If you block the session cookie, you will not stay signed in to the dashboard and will have to sign in again each time; deleting the cookie has the same effect as signing out. The public site works fully without cookies.
Changes and contact
This page is updated, and the date at the top changed, whenever the cookies in use change. For questions write to halisemre@gmail.com. Details on how personal data is processed are in the Privacy Notice and the Data Processing Notice.