Cookie Policy

Cookies are small text files placed on your device (computer, tablet, or smartphone) by a website you visit. They allow the website to recognize your device, remember your preferences, and collect information about how you interact with the site.

In addition to traditional cookies, we may use similar technologies including:

• Local storage: a browser-based key-value store used to persist your cookie consent choices
• Session storage: temporary in-browser storage that expires when you close the tab
• Pixel tags / web beacons: tiny invisible images used to track interactions with marketing content (only if Marketing cookies are enabled)

References to "cookies" in this policy cover all of the above technologies.

Cookies on menupoints.com.tr are set by two types of parties:

• First-party cookies: set directly by Menu Points (menupoints.com.tr). These are used to operate the site and remember your preferences.
• Third-party cookies: set by external services integrated into the site, such as analytics platforms or advertising networks. Third parties have their own privacy and cookie policies that govern how they use the data they collect.

You can identify who set a cookie by checking the "Provider" column in the Cookie Inventory table in Section 5.

We group cookies into four categories based on their function:

• Strictly Necessary / Zorunlu: essential for the website to function correctly. Cannot be disabled. No consent required.
• Functional / İşlevsel: enhance your experience by remembering choices you make (e.g., language preference). Require consent under KVKK Board 2022 guidance.
• Analytics / Analitik: help us understand how visitors use the site so we can improve it. All analytical data is anonymized or pseudonymized. Require consent.
• Marketing / Pazarlama: track visits across websites to deliver targeted advertising and measure campaign effectiveness. Require consent and, where combined with email marketing, require İYS compliance under Law 6563.

Strictly Necessary: maintain your login session, prevent cross-site request forgery (CSRF), store your cookie consent choices (so we do not ask again), and ensure basic site security and stability.

Functional: remember your preferred language (EN / TR), persist any display settings you configure in the dashboard.

Analytics: count page visits, measure time spent on pages, identify which menu items attract the most interest, detect navigation drop-off points, and produce aggregated reports for the Menu Points engineering and product teams. No personal identification data is included in analytics reports.

Marketing: track which advertising campaigns led visitors to the site, build retargeting audiences for ad platforms, and measure campaign return on investment. Marketing cookies are disabled by default and only activated with your explicit consent.

The table below lists all cookies currently used on menupoints.com.tr. The list is updated whenever new cookies are added.

We rely on the following legal bases for cookie processing:

• Strictly Necessary cookies: no consent required. Legal basis is legitimate interest / contract performance — these cookies are technically indispensable to deliver the service you have requested (KVKK Art. 5/2-f; ePrivacy Directive Art. 5(3) exemption).
• Functional, Analytics, and Marketing cookies: require your prior explicit opt-in consent (açık rıza) under KVKK Board's 2022 Çerez Uygulamaları Hakkında Rehber and the EU ePrivacy Directive / EDPB Guidelines 05/2020.

Consent is obtained through the cookie consent banner displayed on your first visit. Pre-ticked boxes and "continued browsing = consent" interpretations are not used — both are invalid under applicable guidance.

You can withdraw consent at any time (see Section 8). Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

If you consent to Analytics or Marketing cookies, data may be transmitted to {{ANALYTICS_PROVIDER_TBD}} or {{MARKETING_PROVIDER_TBD}}, which may process data outside Turkey and the EU/EEA.

Such transfers are subject to the international transfer mechanisms described in Section 8 of the Privacy Policy (KVKK Law 7499 standard contractual clauses; GDPR Art. 46 SCCs). Confirm the specific mechanism with each provider before enabling these cookies in production.

Where IP anonymization is available (e.g., in Google Analytics), it will be enabled by default before any analytics cookie is activated.

{{TBD_NOTE}}: Complete this section with specific provider names, transfer destinations, and confirmed transfer mechanisms before going live with analytics or marketing cookies.

You have several ways to manage or withdraw your cookie consent:

• Cookie preference center: click the "Cookie preferences" link in the footer of any page at any time to open the preference center and change your choices
• Banner: click "Reject non-essential" on the initial consent banner to decline all non-strictly-necessary cookies
• Browser settings: most browsers allow you to block or delete cookies via the privacy or settings menu. Note that blocking strictly necessary cookies may prevent the site from functioning correctly.
• Opt-out links for third-party tools: if Analytics or Marketing cookies are enabled, you can also opt out directly via the provider (e.g., Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout)

Withdrawing consent will take effect immediately for future processing. It does not affect cookies already stored by your browser; use your browser settings to delete existing cookies if required.

Cookie retention periods are listed in the "Duration" column of the Cookie Inventory (Section 5). In general:

• Session cookies expire when you close your browser
• Persistent cookies remain for the period shown in the inventory, or until you delete them via browser settings or the preference center
• Your consent record (stored in mp_cookie_consent_v1) is kept for 3 years from the date of consent, after which you will be asked to confirm your preferences again

We may update this Cookie Policy when we add new cookies, change analytics providers, or when legal guidance changes. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Re-display the cookie consent banner if the change requires fresh consent (e.g., adding a new cookie category)

We recommend checking this page periodically to stay informed about our cookie practices.

For questions about our use of cookies or to exercise your rights under the Privacy Policy, please contact:

• Email: hello@menupoints.com.tr
• Address: Menu Points, {{REGISTERED_ADDRESS_TBD}}, Izmir, Turkey

You may also lodge a complaint with the Kişisel Verileri Koruma Kurumu (KVKK) at www.kvkk.gov.tr or with your local EU Data Protection Authority.