Cookie Policy
Version 2026-10-30 · Effective: 30 October 2026
This policy explains the cookies and similar browser storage (localStorage, sessionStorage) used on the desktik.com website and the app.desktik.com portal (customer portal and support team panel), under article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK), the Turkish Data Protection Board’s guide on cookies and, where it applies, the GDPR and ePrivacy rules.
Data controller
The data controller for the cookies in this policy is Albiferro Software & System Limited Company (Albiferro Yazılım ve Sistem Limited Şirketi, “Albiferro”), which runs Desktik; tax office / number: Etimesgut / 0501474977; MERSİS number: 0050147497700001; address: Atakent Mah. 1472. Cad. No: 5 D: 3, Elvankent, Etimesgut / Ankara, Türkiye; registered e-mail (KEP): albiferroyazilim@hs01.kep.tr; e-mail: contact@albiferro.com.
Summary
- Desktik only uses strictly necessary cookies and browser storage: to serve the site securely, to keep you signed in to the portal and to remember choices you made (cookie choice, theme, help language).
- No analytics, statistics, advertising, marketing or social media cookies; visitors are not tracked across sites and not profiled.
- The site loads no scripts, fonts, maps or frames (iframes) from other sites; fonts and images are served from desktik.com.
- If a non-essential cookie is ever used, this policy is updated, the cookie notice is shown again and that cookie is used only with your consent.
What are cookies and similar technologies?
A cookie is a small text file a website stores in your browser. localStorage and sessionStorage are storage areas the browser gives a site: localStorage stays until you clear it, sessionStorage is cleared when the tab closes. This policy calls all of them “cookies” for short.
Website (desktik.com)
| Name | Provider / type | Purpose | Duration | Category |
|---|---|---|---|---|
cookie_consent | Desktik (first-party cookie) | Remembers your cookie choice (policy version, time of the choice, the choice), so the notice does not appear on every page. | 180 days | Strictly necessary |
__cf_bm | Cloudflare (on desktik.com; service provider) | Bot protection: tells automated and malicious traffic apart from real visitors. Set only when that security feature is on. | 30 minutes | Strictly necessary (security) |
cf_clearance | Cloudflare | Records that you passed a security check (challenge); set only when a check is shown. | As configured (default 30 minutes) | Strictly necessary (security) |
_cfuvid | Cloudflare | Tells apart visitors sharing an IP address under a rate-limiting rule; set only when such a rule is on. | Browser session | Strictly necessary (security) |
Desktik serves the site through Cloudflare’s content delivery and security service. Cloudflare cookies are set only when the related security feature is on and needed; they are not used to identify you or to track you across sites. The Cloudflare script that hides the page’s e-mail addresses from spam bots (under /cdn-cgi/, loaded from desktik.com) uses no cookies or storage.
Portal (app.desktik.com)
The portal is the service you sign in to; the cookies and storage below make it work and remember choices you made. The session key is in a cookie that JavaScript cannot read; it is never written to browser storage. Cloudflare cookies (above) may also be set on this domain.
| Name | Provider / type | Purpose | Duration | Category |
|---|---|---|---|---|
tk_session | Desktik (first-party cookie; HttpOnly, Secure, SameSite=Lax, sent only to /api) | Keeps you signed in to the customer portal after single sign-on (SSO) from your product. | 24 hours; deleted when you sign out | Strictly necessary |
tk_staff | Desktik (first-party cookie; HttpOnly, Secure, SameSite=Lax, sent only to /api/admin) | Keeps you signed in to the support team panel. | 12 hours; deleted when you sign out | Strictly necessary |
tk-theme | Desktik (localStorage) | Remembers the light/dark theme you chose. | Until you change it or clear browser data | Strictly necessary (interface choice) |
tk-help-lang | Desktik (localStorage) | Remembers the language you chose on the help page. | Until you change or clear it | Strictly necessary (interface choice) |
tk-next | Desktik (sessionStorage) | During single sign-on (SSO), holds the portal page to open after you sign in. | Deleted after sign-in; at the latest when the tab closes | Strictly necessary |
The Desktik mobile app is covered by the privacy notice, not by this policy.
Legal basis
Strictly necessary cookies rely on providing the service you asked for and performing the contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)) and on the legitimate interest in keeping the site and accounts secure (KVKK art. 5/2-f; GDPR art. 6(1)(f)). Under the Board’s guide and the ePrivacy rules, cookies strictly necessary for a service you explicitly asked for (authentication, security, user input and interface choice cookies) need no consent. Analytics, advertising and marketing cookies may only be used with your explicit consent (KVKK art. 5/1); Desktik uses none. “Reject” means that no non-essential cookie or storage is used.
Data processed through Cloudflare cookies (such as the IP address) may be processed on Cloudflare servers outside Türkiye; this transfer follows article 9 of the KVKK.
Managing your choice
On your first visit, the notice lets you choose “Accept all”, “Reject” or “Preferences”. You can change your choice at any time with the “Cookie preferences” link at the bottom of every page or the button below. Your choice is kept in the cookie_consent cookie for 180 days; when the policy version changes, the notice is shown again.
You can also delete or block cookies in your browser settings (Chrome: Settings › Privacy and security › Third-party cookies / Site data; Firefox: Settings › Privacy & Security › Cookies and Site Data; Safari: Settings › Privacy › Manage Website Data; Edge: Settings › Cookies and site permissions). Clearing site data also clears localStorage and sessionStorage. If you block strictly necessary cookies, you may not be able to sign in to the portal or use some features.
Your rights and contact
Your rights under article 11 of the KVKK and the other details of how your personal data is processed are in the privacy notice. For questions and requests: contact@albiferro.com, KEP: albiferroyazilim@hs01.kep.tr, or in writing to Atakent Mah. 1472. Cad. No: 5 D: 3, Elvankent, Etimesgut / Ankara, Türkiye.
Changes
This policy is updated when the cookies used change; the current version and its effective date are shown at the top of the page.