In short: this website uses no cookies at all. The UPPU panel stores only the cookies it needs to work and the preferences you choose (theme, sidebar, inbox sound); there are no advertising, analytics or tracking cookies.
1. The uppu.net website
This website uses no cookies. It writes nothing to your browser's local storage (localStorage, sessionStorage). It loads no third-party content such as analytics, advertising, maps, video, social media plug-ins or external fonts; all files of the site come from uppu.net. The language is chosen only through the page address (Turkish pages at the root, English pages under /en/) and is not stored anywhere. That is why the site has no cookie consent banner.
If our hosting provider adds a cookie for a technical necessity (a load-balancing cookie, for example), it is used only to carry the communication and does not require explicit consent; any such cookie will be listed on this page by name.
Pages you open through links on our site (app.uppu.net, for example) follow their own cookie rules; the panel is described below.
2. The UPPU panel (app.uppu.net)
The panel sets the session and CSRF cookies for every visitor, including on the sign-in, sign-up and password reset pages, and in addition the "Remember me" cookie for signed-in users. These are first-party cookies the service needs to work. In addition, two functional cookies remember two choices you make in the panel (theme and sidebar). The panel uses no advertising, analytics or tracking cookies.
| Name | Type | Purpose | Duration |
|---|---|---|---|
__Host-uppu-session | Essential, first-party; for every visitor; HttpOnly, Secure, encrypted | Keeping you signed in | 120 minutes after the last activity |
XSRF-TOKEN | Essential, first-party; for every visitor; encrypted, readable by the page's code | Preventing cross-site request forgery (CSRF) | Same as the session |
remember_web_… | Essential, first-party; only if you tick "Remember me" when signing in; encrypted | Remembering your sign-in after you close the browser | 400 days |
appearance | Functional, first-party | Remembering the light, dark or system theme you chose | 365 days |
sidebar_state | Functional, first-party | Remembering whether the sidebar is open or closed | 7 days |
Legal ground: for the essential cookies, KVKK Art. 5/2-c (conclusion and performance of a contract: using the panel) and Art. 5/2-f (legitimate interest: session security and preventing cross-site request forgery). The functional cookies only remember a choice you make in the panel; their legal ground is Art. 5/2-f (legitimate interest: remembering your preference). No explicit consent is asked for these cookies.
Your browser's local storage also keeps your theme preference (appearance) and your inbox sound preference (uppu:inbox:sound). These stay until you delete them and are not sent to the server.
Meta connection pages: when one of the three panel pages where you connect a WhatsApp, Messenger or Instagram channel is opened, the Facebook JavaScript SDK is loaded from connect.facebook.net, and Meta receives your IP address and browser details. When you open the Facebook Login window, Meta uses its own cookies. This data and these cookies are subject to Meta's privacy and cookie policies. The SDK is not loaded on any other panel page.
3. The chat widget (on businesses' websites)
The UPPU chat widget added to businesses' websites uses no cookies. It runs in a separate frame loaded from cdn.uppu.net and keeps the following in that frame's own browser storage (localStorage; if unavailable, sessionStorage or memory only):
uppu:v1:{site key}: a random visitor key that recognizes the visitor in the same browser, and messages not yet sent. A visitor key older than 400 days counts as a new visitor.uppu:probe: a temporary value written and removed at once to check whether storage is available.
When the widget is loaded, the visitor's IP address and browser details are written to the access logs of UPPU's servers, even if the widget is never opened. UPPU keeps these logs as data controller for its own security (KVKK Privacy Notice).
This storage and logging happen because of the widget the business adds to its website. As the data controller, the business should mention them in its own cookie and privacy notice.
4. API and webhooks
messaging.uppu.net and the webhook domains use no cookies, sessions or browser storage.
5. How to manage cookies
You can view, delete or block cookies in your browser settings. If you delete or block the panel's essential cookies, you are signed out and cannot use the panel. Deleting the functional cookies only resets your preferences.
6. Contact
For questions, write to kvkk@uppu.net. Details about your personal data are in our Privacy Policy and KVKK Privacy Notice.