Cookie Policy
D-03 · v1.0 · published
| Field | Value |
|---|---|
| Document code | D-03 |
| Document name | Cookie Policy |
| Version | v1.0 |
| Publication date | 2026-09-25 |
| Legal basis | Article 11.7a of the Telecommunicatiewet; Article 6(1)(a) GDPR |
| Where shown | Cookie policy page (no login) · cookie banner · footer |
| Status | v1.0 published (2026-09-25) |
1. What this is about
This policy explains which cookies and comparable storage the mybusyness website and application use, what they are for, how long they remain and how you switch them off. How the personal data involved is processed is set out in D-01 · Privacy Notice for Website Visitors.
Controller: Topluyıldız Danışmanlık A.Ş. (Türkiye) · e-mail sales@mybusyness.com
| Item | Value |
|---|
2. Terms (defined once)
- Cookie: A small text file stored in your browser when you visit the website.
- First-party cookie: A cookie set by the website you are visiting.
- Third-party cookie: A cookie set by another company that provides a service on the website.
- Local storage: Storage in the browser that is not a cookie but works in a similar way (
localStorage,sessionStorage). This policy also covers it.
3. Categories and consent
| Category | Consent needed? | Why |
|---|---|---|
| Necessary storage | No | Strictly necessary for the operation of the website and your session (Article 11.7a of the Telecommunicatiewet). |
| Measurement | Yes | Used to understand how the website is used; loaded only with your consent. |
| Marketing | — | Not used. If this changes, this table will be updated and your consent will be asked for separately. |
Our rules:
- Choice boxes are never pre-ticked.
- The approach «by continuing to browse, you consent» is not used.
- Without your consent, no non-necessary storage is set; the measurement tag is not loaded before consent.
- «Accept» and «Decline» have the same size and weight; declining is as easy as accepting.
- You can withdraw your consent at any time as easily as you gave it.
4. Cookies and storage used
4.1 Necessary storage (no consent)
Measured in the code of the website and the application:
| Entry | Type | Purpose | Duration |
|---|---|---|---|
mb.auth.token, mb.auth.token_exp | First-party local storage | Login: keeps your session in the application | Until you log out or the session expires |
mb.auth.redirect, mb.auth.intent | First-party session storage | Login: return to the page you originally opened | Until the tab is closed |
mb.dil | First-party local storage | Chosen language | Until you delete it in the browser |
mb.bolge | First-party local storage | Chosen region | Until you delete it in the browser |
mb.cerez.karar | First-party local storage | Your cookie choice, so that the banner does not appear again | Until you delete it in the browser or the version of D-04 changes |
mb.cerez.riza, mb.cerez.ziyaretci | First-party local storage | Consent identifier and anonymous visitor identifier for the consent record | Until you delete them in the browser |
mb.copilot.session, mb.copilot.open, mb.copilot.width | First-party local storage | State of the side panel in the application (conversation identifier, open, width) | Until you delete them in the browser |
4.2 Measurement (only with consent)
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
_ga | Third party — Google Analytics | Distinguishing visitors | According to Google, up to 2 years |
_ga_<measurement ID> | Third party — Google Analytics | Keeping the session state | According to Google |
Google Analytics is provided by Google Ireland Limited and Google LLC. Through these cookies, your IP address, device and browser information and browsing data are transferred, which can mean a transfer outside the European Union. Details are set out in D-08 · International Data Transfers.
The tag starts with all consent signals set to «denied» and is loaded only after «Accept». If you do not consent, the measurement tag is not loaded at all, these cookies are not created and nothing is transferred to Google. The website keeps working in full.
4.3 Files from third-party servers
The website loads fonts, images and videos only from its own server. Your IP address is therefore not passed to third-party servers for such files when a page is opened.
5. Changing your choice
- On the website: Click the «Cookie preferences» link in the footer of any page. The banner opens again; your change applies immediately.
- In the browser: In your browser settings you can block or delete cookies and local storage. If you block necessary storage, you may not be able to log in.
Withdrawal does not make the processing carried out before it unlawful; from the moment of withdrawal, the cookies concerned are no longer loaded.
6. Consent record
Every choice — consent or refusal — is recorded as proof: consent identifier, time, document code + version + region, salted IP hash (never the raw IP address), browser summary (browser family and platform), your choice and, where applicable, the time of withdrawal. The record is protected by a hash chain and cannot be changed afterwards.
These records are used for no other purpose and never for marketing.
7. Contact
Please send questions about cookies to sales@mybusyness.com. For your rights under the GDPR, D-13 · Data Subject Request Form is available.
8. Changes
If a new cookie is introduced or the purpose of an existing one changes, this policy is updated, the version number is increased and — if the scope of consent grows — your consent is asked for again.
This document describes the behaviour of mybusyness as measured in the code. This is not legal advice.