1. What are cookies and similar storage?
Cookies are small records stored by your browser that may be sent with requests to the relevant site. localStorage is browser storage read by the same site origin; it is not automatically sent to the server with every request. This policy covers both.
2. Purposes and categories
Security and requested functions remember your permission choice, apply your chosen theme and protect form submissions from abuse. Statistical analytics is separate and optional. We do not install advertising, remarketing or advertising personalisation technologies.
The theme is saved only when you choose it. Language is determined by the Turkish or English address; no separate language cookie is created. Project videos are local files. Map, social network and contact links take you to external services only when you open those links.
3. Current and planned records
infinitium-consent is a first-party localStorage record created by Infinitium Teknoloji. It contains the permission version, analytics choice, decision time and expiry time. It is kept for six calendar months and regular visits do not extend it. You are asked to choose again after expiry.
infinitium-theme is a first-party localStorage key used by Infinitium Teknoloji to remember your chosen theme. It has no automatic expiry. You can remove it by selecting the system theme or clearing site data in your browser.
Google reCAPTCHA v3 connects to Google resources for risk analysis when a form is submitted. Google states that it may use the _GRECAPTCHA security cookie. Its actual domain and lifetime must be verified in the live environment; no unverified lifetime is stated here. Google may process technical connection and interaction signals.
Google Analytics 4: When enabled and analytics consent is granted, Google may set the first-party analytics cookies _ga and _ga_JHSYRJYT2R on the site domain. These cookies are configured to expire after 180 days. Later visits do not automatically extend their lifetime. Your browser may remove them sooner. Google Tag Manager manages analytics tags.
Google Analytics is configured to retain user-level and event-level data on its servers for 14 months. Each new event from a user restarts the 14-month retention period for that user’s identifier. This setting is separate from the lifetime of cookies in your browser. Standard aggregated reports fall outside the scope of this retention setting.
Form fields and attachments are not included in analytics events. The form application does not create a permanent submission archive; emails may remain in the receiving mailbox. Server abuse counters use a default enforcement window of up to ten minutes; cleanup depends on the server task. Hosting and email record retention must be verified separately.
4. Accepting, rejecting and withdrawing permission
Analytics is off on your first visit. Google Tag Manager and Google Analytics do not load before acceptance, and no cookieless analytics pings are sent. You can reject all or save your analytics preference. Continuing to use the page is not treated as acceptance.
You can change your decision using Cookie Preferences in the footer. Withdrawing permission stops new measurement and clears relevant analytics cookies accessible to this site. The page is reloaded in a controlled way to remove loaded Google code; an active submission or completed fields may delay reloading. Previously sent data cannot be recalled, and this site cannot delete cookies on Google domains.
You can delete or block cookies and localStorage through your browser privacy or site data settings. Deleting the permission record causes the choice to be requested again. If storage is unavailable, the decision is remembered only on the open page. Rejecting analytics does not block forms; reCAPTCHA security verification operates separately.
5. Providers and transfers
Google provides reCAPTCHA and, when enabled, GTM/GA4. Font files are served by this site; visitors do not send font requests to Google Fonts servers. The site application does not add names, email addresses, phone numbers, messages, filenames or IP addresses to analytics events. Network connections to Google may nevertheless involve processing technical connection data.
Google and hosting/email services may involve processing or access outside Türkiye. Applicable KVKK transfer requirements must be met separately; a cookie choice alone does not provide a legal basis for every transfer. Provider agreements, official controller details and actual record retention require legal review before publication.
6. Rights and contact
See the KVKK Privacy Notice for personal data processing, application procedures and your rights. You can send questions to info@infinitiumteknoloji.com. Reading this policy does not constitute marketing permission or an automatic newsletter subscription.