Cookie Policy
Cookies, local storage technologies, and preference management across our website and platform interfaces.
Service Provider: EMRE ALAY — CREATO AI • Karşıyaka / İzmir
CREATO AI Cookie Policy
Document version: 2.0 — Date of preparation: September 30, 2026.
1 Scope
This policy describes cookies, local storage, tracking pixels, tags, and related technologies utilized across the website and web interfaces operated by EMRE ALAY under the trade brand CREATO AI. External network requests executed without cookies may also result in the transmission of IP or device metadata. Detailed personal data processing disclosures are set forth in the KVKK Information Notice.
2 Technology categories
Strictly necessary technologies are essential for secure platform operation, authentication sessions, and honoring basic user choices. Their essential nature cannot be extended to justify advertising or behavioral profiling. Remembering selected language or interface theme settings to display requested views is evaluated based on actual functionality and technical scope.
Non-essential analytics technologies measure site visits, user journeys, and feature performance. Marketing technologies evaluate advertising campaigns, audience retargeting, and attribution. These non-essential categories require prior affirmative consent and are disabled by default. Connecting a Google or Meta account to the platform does not imply consent to advertising cookies on the public website.
3 Technology inventory
| Technology | Provider and Type | Purpose and Data | Retention and Condition |
|---|---|---|---|
| creato_consent | CREATO AI, First-party Cookie | Strictly Necessary; stores category choices, consent version, and timestamp | 365 days; set when user saves cookie preferences |
| creato_consent Local Storage | CREATO AI, localStorage | Synchronizes identical preference choices locally in the browser | Persists until updated or browser cache is cleared; localStorage does not auto-expire |
| Session, security, and appearance settings | Relevant active platform features | Authenticated session maintenance, CSRF protection, and UI state | Lifespan and exact identifier keys are detailed in active technology registries prior to launch |
| Activated analytics or marketing tags | Relevant provider (e.g., Google, Meta) | Device, traffic, and event interaction telemetry per tag specification | Subject to active consent and valid cross-border transfer grounds; provider, domain, and lifespan detailed in active inventory |
This inventory does not assert that unconfigured tags (such as _ga or _fbp) are active if not actually deployed. Maintaining a tag management container does not imply that consent has been obtained for all potential tags. The lifespan of a client cookie and the evidentiary retention period of server-side consent audit logs are evaluated separately.
4 Preference management and revocation
Upon first visit, the consent banner provides clear and accessible options to “Accept All”, “Reject Non-Essential”, and “Manage Preferences”. Non-essential categories are toggled off by default. Pre-ticked checkboxes, scrolling, continued navigation, or inactivity do not constitute valid legal consent.
Category choices may be updated or revoked at any time via the “Cookie Preferences” link in the footer. Revocation takes effect prospectively, immediately halting non-essential tracking scripts. Clearing browser cookies provides additional client control but does not substitute for the platform consent preferences manager. Rejecting non-essential technologies will not impede access to core website services.
5 Cross-border data transfers and statutory rights
Transmitting tracking data to foreign technology providers is subject to applicable legal bases and cross-border transfer safeguards under Article 9 of KVKK / GDPR. Cookie consent alone does not automatically satisfy all statutory criteria for systematic international data transfers. Vendors and hosting jurisdictions are linked to specific technology entries. New vendors or analytical purposes prompt updated notices and renewed user consent.
Inquiries and data subject rights requests may be directed to hello@creato.digital and the contact procedures detailed in the KVKK Information Notice.
Have a Legal Question?
Contact us directly regarding contracts, data protection and rights requests.