Revelo

LEGAL INFORMATION

Cookie Policy

Last updated: 27 October 2026

This policy explains which cookies and similar technologies getrevelo.com (“Revelo”) uses, why, and how you can manage your choices. Data controller: Sabri VATAN (Revelo), Derebahçe Mah. Semahane Sk. No: 29B İç Kapı No: 5 İlkadım / Samsun, Türkiye, [email protected].

1. What is a cookie?

Cookies are small text files saved in your browser when you visit a website. They let the site remember, for example, that you are signed in or what you chose about cookies. Some information is kept in your browser's local storage (localStorage / sessionStorage) instead of a cookie; this policy covers that too.

2. The cookies we use

Necessary cookies (no consent needed)

The site needs these to work; they cannot be switched off and do not require your consent.

  • Session cookies (sb-…-auth-token, Supabase): keep you signed in to your account. Kept until you sign out or they expire.
  • Cookie choice (revelo_consent): remembers your cookie choice. Kept for 6 months; after that we ask again.
  • Security cookies (Cloudflare and Cloudflare Turnstile, e.g. __cf_bm): protect the site against malicious traffic and fake sign-ups. Usually kept from 30 minutes to a few days.
  • Payment cookies (iyzico): used by iyzico so the payment form works securely during checkout. See iyzico's own policy for details.

Analytics cookies (only with your consent)

These load only after you choose “Accept” in the cookie banner or allow analytics cookies in the preferences. If you do not, Google Analytics is not loaded at all.

  • Google Analytics 4 (_ga, _ga_K2LMBG25RT; Google Ireland Ltd. / Google LLC): measures which pages are visited, where visitors come from (e.g. a search or an ad), device and browser type, approximate location and steps on the site (reaching checkout, signing up, completed orders). Kept for up to 2 years.
  • Meta Pixel and the Conversions API (_fbp, _fbc; Meta Platforms Ireland Ltd.): helps us measure our Facebook and Instagram ads and show them to people who may be interested. Events such as the pages you visit, opening the editor, starting checkout and purchases (order amount and currency) are sent to Meta. The purchase may also be sent from our server through Meta's Conversions API so it is measured correctly; identifiers such as your email address and phone number are sent only as one-way hashes. Kept for 90 days. Without your consent Meta Pixel is not loaded at all and nothing is sent to Meta.
  • Completed orders: if you allowed analytics or marketing cookies, when your order is completed its number, amount and product are sent from our server to Google Analytics. If you did not, this is not sent.
  • Test flag (revelo_notrack): used only by the Revelo team to keep their own tests apart from real data; it is not set for visitors.

Google Analytics data is processed on Google's servers outside Türkiye (including the USA). Allowing analytics cookies means you give your explicit consent to this transfer.

Marketing cookies (only with your consent)

These are used only after you choose “Accept” in the cookie banner or allow marketing cookies in the preferences.

  • Google Ads (_gcl_au, _gcl_aw; Google Ireland Ltd. / Google LLC): measures whether a visitor who came from a Google ad placed an order, and helps show ads to people who are interested. Kept for up to 90 days.
  • Meta Pixel and the Conversions API (_fbp, _fbc; Meta Platforms Ireland Ltd.): helps us measure our Facebook and Instagram ads and show them to people who may be interested. Events such as the pages you visit, opening the editor, starting checkout and purchases (order amount and currency) are sent to Meta. The purchase may also be sent from our server through Meta's Conversions API so it is measured correctly; identifiers such as your email address and phone number are sent only as one-way hashes. Kept for 90 days. Without your consent Meta Pixel is not loaded at all and nothing is sent to Meta.
  • Completed orders: if you allowed marketing cookies, when your order is sent to Google, Google Ads may also use it to measure its ads.

If you reject marketing cookies, no advertising cookie is written. If you allowed analytics cookies and came from an ad, the ad click id travels only in the page address instead of a cookie, so orders can be counted per ad in total.

Data processed through marketing cookies is also processed on Google's and Meta's servers outside Türkiye; allowing marketing cookies means you give your explicit consent to this transfer.

Other information kept in your browser (local storage)

Your design draft in the editor, an id that recognises your device on the note collection page, the ready-made note pack you picked and flags that stop some measurement events from being sent twice are kept in your browser's local storage. They stay on your device and are there for the site to work.

3. How to manage your choices

  • On your first visit, the banner offers “Accept”, “Reject” and “Preferences”. Rejecting is as easy as accepting and does not stop you using the site.
  • You can change your choice at any time from the “Cookie preferences” link at the bottom of the page. When you withdraw consent for analytics cookies, the Google Analytics cookies are deleted and not loaded again.
  • You can also delete or block cookies in your browser settings. If you block necessary cookies, signing in and payment may not work.

4. Your rights

For your rights under Article 11 of the Turkish Personal Data Protection Law No. 6698 and details on how your personal data is processed, see the KVKK Information Notice, or write to [email protected].