POLÍTICA DE COOKIES
1. What is a Cookie and Why Is It Used?
A cookie is a small text file saved on your device through your browser when you visit a website. Cookies are used to ensure that the website functions properly, to remember user preferences, to provide session security, to measure site performance and to continuously improve the user experience.
Within the scope of the services operated on bogahost.com and bogahost.com.tr, Bogahost undertakes to fully comply with its transparency obligations regarding the use of cookies pursuant to Personal Data Protection Law No. 6698, the EU GDPR and the EU ePrivacy Directive.
2. Categories of Data Processed via Cookies
Depending on their types and purposes of use, cookies may collect data in the following categories:
- Session and identity information: Customer panel login, cart status, language and currency preference
- Device and technical information: IP address, browser type, operating system, screen resolution, referring URL
- Interaction data: Pages visited, links clicked, session duration, page-view sequence
- Measurement and analytics data: Site performance, error logs, conversion goals and campaign effectiveness
- Security data: Verification tokens against bot and phishing attacks, session integrity checks
3. Types of Cookies by Function
Strictly Necessary Cookies: Indispensable for the basic functions of the website (session management, customer panel access, cart and order, security verification, prevention of forged requests). If they are blocked, use of the service is not possible and user consent is not required.
Functional Cookies: Used to remember user preferences that enhance the experience, such as language preference, currency selection and live support session continuity. If blocked, basic functions continue to operate but personalization is lost.
Analytics and Performance Cookies: Cookies that anonymously measure visitor behavior, analyze page performance and prioritize development. Used by analytics platforms, primarily Google Analytics 4.
Marketing and Retargeting Cookies: Used to measure advertising effectiveness, track conversion goals and serve content based on areas of interest. Activated only with the user's explicit consent.
4. Types of Cookies by Retention Period
Session Cookies: Valid only for the duration of the browser session and automatically deleted when the browser is closed. Generally used for session management, cart information and security verification.
Persistent Cookies: Continue to be stored on the device for a specific period (minutes, days, months or years) even after the browser is closed. They expire at the end of the period or when deleted by the user.
First-Party Cookies: Created directly by the bogahost.com domain and readable only by this site.
Third-Party Cookies: Created by service providers other than Bogahost (Google, Cloudflare, Tawk.to, iyzico, etc.) and subject to the privacy policy of the relevant provider.
5. Cookies Used on Bogahost Platforms
Below are the main cookies actively used on bogahost.com and bogahost.com.tr, together with their providers, purposes and retention periods. The list may be updated within the scope of infrastructure, analytics and security integrations.
| Cookie Name | Provider | Purpose | Type / Duration |
|---|---|---|---|
| WHMCS* | bogahost.com | Customer panel session, cart, order and security operations | Strictly Necessary / Session |
| PHPSESSID | bogahost.com | Server-side session management | Strictly Necessary / Session |
| csrf_token | bogahost.com | Form security, protection against forged request (CSRF) attacks | Strictly Necessary / Session |
| WHMCSLanguage | bogahost.com | Remembers the user's selected language preference | Functional / 1 year |
| currency | bogahost.com | Remembers the user's currency preference | Functional / 1 year |
| bogahost* | bogahost.com | User preferences, site experience and session continuity | Functional / 30 days |
| __cf_bm | Cloudflare | Detection of bot traffic and protection against automated attacks | Strictly Necessary / 30 minutes |
| cf_clearance | Cloudflare | Access session following security verification | Strictly Necessary / 1 hour |
| _ga | Google Analytics 4 | Anonymous visitor identification and traffic analysis | Analytics / 2 years |
| _ga_* | Google Analytics 4 | GA4 property-level session state | Analytics / 2 years |
| _gid | Google Analytics | Daily identification for page-view statistics | Analytics / 24 hours |
| _gcl_au | Google Ads | Measurement of advertising conversion effectiveness | Marketing / 3 months |
| NID | Google reCAPTCHA | Bot verification and form security | Strictly Necessary / 6 months |
| iyzicocookie | iyzico | Payment session verification and virtual POS security | Strictly Necessary / Session |
| TawkConnectionTime | Tawk.to | Live support connection management | Functional / Session |
| twk_idm_key | Tawk.to | Maintaining live support session across browser tabs | Functional / 1 year |
| twk_uuid* | Tawk.to | Matching live support history with the unique visitor | Functional / 6 months |
| WHMCSURLLanguage | bogahost.com | Remembering language preference upon URL-based language change | Functional / 1 year |
| trustedDeviceToken | bogahost.com | Device identification when "Trust this device" is checked during two-factor authentication | Strictly Necessary / 30 days |
| __Secure-ENID | Google reCAPTCHA Enterprise | Bot verification and abuse protection (modern NID equivalent) | Strictly Necessary / 13 months |
Note: The "*" symbol indicates that the cookie may be created with different suffixes depending on the integration or version (e.g., WHMCSV7-, twk_uuid_xxxxx).
6. Third-Party Service Providers
In order to improve service quality and meet operational needs, Bogahost cooperates with the following trusted third-party service providers. Each provider's own privacy policy and cookie usage terms apply.
- Cloudflare: Web application firewall (WAF), bot management and DDoS protection
- Google (Analytics 4, Ads, reCAPTCHA): Traffic analysis, advertising conversion measurement and form security
- iyzico: Virtual POS, payment collection and PCI-DSS-compliant card transactions
- Tawk.to: Live support messaging infrastructure
7. How to Manage Your Cookie Preferences
The use of all cookies other than strictly necessary ones is subject to user consent. You can change your cookie preferences at any time via your browser settings or via the cookie preference panel provided on the site. If you block the strictly necessary cookies, basic services such as the customer panel, cart, order and session may operate with limitations.
The cookie management steps you can use in your browsers are summarized below. Menu steps may differ depending on the browser version.
8. Browser-Based Cookie Management
Google Chrome: By following the path Settings → Privacy and security → Third-party cookies from the browser menu, you can adjust your cookie preferences and add blocking for specific sites.
Mozilla Firefox: Via Settings → Privacy and Security → Cookies and Site Data, you can choose a detailed protection level and manage site-based permissions.
Apple Safari: Under Preferences → Privacy, you can adjust cross-site tracking protection and cookie management options.
Microsoft Edge: Via Settings → Cookies and site permissions → Manage cookies and site data, you can configure cookie settings.
Mobile browsers (Chrome, Safari, Samsung Internet): You can access the cookie management options under the "Privacy" or "Site settings" section of the relevant application's settings menu.
9. Legal Basis and International Data Transfers
Personal data processed via cookies may be processed without requiring explicit consent under Articles 5/2-(c), (ç) and (f) of Personal Data Protection Law No. 6698 (KVKK). Data processing activities carried out for marketing and targeting purposes rely solely on the explicit consent of the user.
Some cookies (Google Analytics 4, Google Ads, Cloudflare) are processed on servers located abroad due to the infrastructure of the service provider. Such transfers are carried out in accordance with the provisions of Article 9 of KVKK and the EU GDPR Standard Contractual Clauses (SCC).
10. Data Controller and Contact
Company Title: Bogahost Bilişim ve Telekomünikasyon Hiz. San. ve Tic. Ltd. Şti.
Address: Fevzipaşa Mahallesi, Erek Caddesi, 127/E Erbaa/TOKAT
Phone: 0356 606 02 45
Web: bogahost.com / bogahost.com.tr
Email: info@bogahost.com
Verbis Registration No: Bogahost is registered in the VERBIS Data Controllers Registry Information System.