Cookie and Local Storage Policy

1. Scope

This policy explains cookies and browser-local storage used on public pages, the admin panel, checkout, and protected publication viewer surfaces.

2. Essential session records

• Authentication cookies maintain a secure admin session and organization membership.
• Viewer-session cookies preserve authorized access to an OTP-protected publication for the configured period.
• Security records support request integrity, authentication, and abuse prevention.
• Cookie preference (sh_consent) stores the choice made in the cookie notice, the policy version it was made under, and when. It is needed to remember that choice and contains no analytics data.
• Language preference (sharehub-locale) remembers whether the dashboard, signup and shared pages are shown in Turkish or English. It is written by the language switcher or from the language version of the site you came from; it does not identify you and contains no analytics data.
• These records are necessary for requested functionality and are not used for advertising.

3. Retention periods

Authentication cookies follow the authenticated session. A protected-publication viewer session defaults to 12 hours and may be configured from 1 hour to 30 days. Expiry or revocation invalidates access even if a browser retains an old cookie.

The cookie preference is kept for 12 months. When it expires, or when this policy changes, the choice is asked again.

The language preference is kept for 12 months; you can change it anytime with the language switcher.

Google Analytics cookies (_ga and _ga_N6GFM6EM6S) are written only with consent and are kept for at most 2 years from the last visit. Detailed event records in Google Analytics are deleted after 14 months.

4. Local preference storage

The site may store interface preferences such as light or dark theme in local browser storage. These values do not contain card information, publication content, or an advertising profile and can be deleted in browser settings.

sh_ga_once entries prevent the same signup, request, or payment from being counted twice in analytics and in visit counting. They hold the event type and the technical identifier of the related workspace or payment record, stay in this browser, and are never sent to Google.

5. Analytics cookies (consent-based)

ShareHub uses Google Analytics 4 and Google Tag Manager, provided by Google LLC, to measure how the site is used. Measurement runs only on the public site (/tr and /en), account creation (/kayit), early access (/go), and the subscription and payment screens of the panel. No measurement runs on other admin panel pages or on published customer content, and no third-party script is added to customer content.

What is measured: the page viewed, where the visit came from (such as a search engine, a social media post, or a campaign link), how far a page is scrolled, clicks on outbound links and file downloads, language switches, clicks on contact and signup links, and the account creation, early-access request, checkout start, and payment completion steps. For a payment, only the amount, currency, billing period, seat count, and the technical number of the payment record are sent. Email addresses, company names, phone numbers, card details, and publication content are never sent to Google; invitation and redirect details in the address bar are removed before anything is sent.

Analytics cookies are written only after choosing "Accept" in the cookie notice or enabling analytics in the preferences. Without consent, the Google tag writes no cookies and uses no persistent identifier; under Google's consent mode, events such as page views may be sent as cookieless signals without identifiers, for aggregate measurement and modelling.

No advertising cookies, remarketing, or ad personalization are used. Ad storage, ad user data, and ad personalization are reported to Google as denied in every case.

Google Analytics data may be processed by Google LLC on servers outside Türkiye, including in the United States. According to Google, Google Analytics 4 does not log or store IP addresses.

6. Cookieless, anonymous visit counting

Independently of the cookie choice, ShareHub keeps daily totals of what happens on the pages listed in section 5 on its own servers: how many visits came from which source (a search engine, a social media post, or a campaign link), from which country and device type (mobile, tablet, desktop), which pages were viewed, button clicks, the signup, request, and payment steps, and how many people accepted or rejected the cookie notice.

No additional cookie or identifier is used for this counting. The IP address is neither read nor stored; browser information is used momentarily to filter automated traffic and determine the device type, and is not stored; the country comes from the country code provided by the hosting infrastructure; time is kept at day level. The records consist of totals only, do not identify or follow a visitor, and are not sent to Google or any other third party.

7. Managing cookies

The analytics choice can be changed or withdrawn at any time from the "Cookie settings" link in the public site footer. Withdrawing consent returns measurement to cookieless signals and deletes the Google Analytics cookies in this browser.

Cookies and local storage can be inspected, blocked, or deleted in browser settings. Blocking essential session cookies may prevent login, OTP-protected access, checkout continuity, or security controls from functioning.

8. Contact

Questions about cookies or local storage may be sent to hello@sharehub.link.