Legal
Cookie Policy
This is an English translation provided for convenience. In case of any discrepancy, the Turkish version prevails.
Version: cerez-2026-10-20-en · Effective: 20 October 2026
Source (TR): https://heygigo.app/cerez/ (version 2026-10-19)
1. Cookies and similar technologies
Cookies are small files that a site you visit stores in your browser. GIGO also uses browser storage (localStorage) and a cache for offline use (service worker). This policy covers all of them.
Data controller: Onur Yılmaz (natural person), info@heygigo.app. Company details: [To be updated upon incorporation of the company]
2. What we use
a) Strictly necessary (no consent required)
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
gigo_consent | localStorage | GIGO | Remembering your cookie preference (accept/reject, version, time) | Until you delete it |
sb-…-auth-token (Supabase session) | localStorage | GIGO / Supabase | Keeping you signed in if you have signed in | Until you sign out |
| Saved venues (without an account) | localStorage | GIGO | Keeping venues you saved without an account on your device | Until you delete it |
| Service worker cache | Browser cache | GIGO | Opening pages you previously visited when offline | Until a browser/version update |
| Cloudflare Turnstile and security cookies | Cookie/storage | Cloudflare | Bot protection on sign-up/sign-in forms, attack prevention | Determined by Cloudflare |
Cloudflare Turnstile processes strictly necessary technical data for bot protection and may, where needed, use Cloudflare's security cookies (e.g. cf_clearance). These cookies are strictly necessary; their durations are determined by Cloudflare.
b) Analytics (only with your consent)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishing visitors with an anonymous identifier, usage statistics | 2 years (Google default); may be shorter due to browser restrictions. |
_ga_YCFKM46DR1 | Google Analytics 4 | Maintaining session state | 2 years (Google default); may be shorter due to browser restrictions. |
We do not use advertising, remarketing or profiling cookies.
c) Third-party requests (not cookies, for information)
Map tiles are loaded from OpenFreeMap; with this request, your IP address and the map area viewed are passed to the provider.
3. How consent works
- On your first visit, a "Cookie preferences" banner opens; Accept and Reject are given equal weight.
- Before you give consent, the Google Analytics script is not loaded and no request is sent to Google.
- Google's consent mode defaults to everything "denied"; "Accept" enables only analytics storage. Ad storage, ad personalisation and Google signals are off.
- Analytics runs only on heygigo.app and www.heygigo.app; no data at all is sent from test (preprod), local or admin panel domains.
- If you Reject or later withdraw consent, measurement stops and the
_ga,_ga_*(and, if present,_gid,_gat) cookies are deleted. - To change your preference: the "Cookie preferences" link at the bottom of the page.
- There are no cookies or analytics in the mobile app (as of 2026-10-19).
4. Transfer abroad
Google and Cloudflare process data on servers abroad. Details and legal basis: Privacy Notice, section 4.
5. Managing via your browser
You can delete or block cookies and site data in your browser settings; if you block strictly necessary storage, sign-in and saving may not work.