Cookie Policy

1. In short

When you first open witlabs.studio, a cookie banner appears at the bottom of the page. It asks for your permission to use Google Analytics 4 to measure, in aggregate, how the site is used. The two options carry the same weight: Accept and Decline.

• Before you choose, no request is sent to Google and no Google Analytics cookie is set.
• If you choose Decline, Google Analytics is not loaded at all. Only a wl-consent record is kept, to remember your choice (see section 3).
• If you choose Accept, Google Analytics loads and sets the _ga and _ga_1RC33QRVQD cookies (see section 5). No permission for advertising is given.
• You can change or withdraw your choice at any time with the Cookie settings link in the footer of every page (see section 8).

The site has no advertising, marketing or social media tracking cookies. If you arrive through a campaign link, the campaign information is kept only for the session (see section 7).

2. What cookies are

Cookies are small text files that a website you visit saves in your browser. They can be used to remember a session, store preferences or measure visits. Your browser's local storage (localStorage) and session storage (sessionStorage) are similar technologies that can be used for the same purposes; this policy covers them too.

3. Strictly necessary: your consent record

The site keeps one strictly necessary record to remember your choice in the cookie banner. Without it, the banner would reappear on every page and a decision to decline could not be respected.

• Cookie wl-consent: holds only the value granted (accepted) or denied (declined). It is set on the site's own domain, lasts 1 year and is only sent over an encrypted connection (HTTPS) (Secure, SameSite=Lax). It contains no identifier or any other information.
• Local storage entry wl-consent: a copy of the same value in your browser's local storage (localStorage). It stays until it is deleted from your browser.

This record reaches our server only as a cookie, together with your page requests; the site does not send the value anywhere else. After one year, or when you delete the record, the banner appears again and asks for your choice. The forms work without cookies; the protections against automated submissions in the forms (a hidden field and a timing check) are not cookies but fields sent as part of the form.

[LEGAL REVIEW REQUIRED] Whether wl-consent qualifies as a strictly necessary cookie, and whether a 1 year lifetime is appropriate, will be confirmed.

4. Preference cookies

Not used. The wl-consent record that stores your choice in the cookie banner is described in section 3.

5. Analytics cookies (only with consent)

Analytics: the site uses Google Analytics 4. The provider is Google Ireland Limited / Google LLC ("Google"). The purpose is to measure, in aggregate, how many people visit the site and which pages are viewed. Measurement ID: G-1RC33QRVQD.

Loaded only with your consent: Google Analytics loads only when you choose Accept in the cookie banner. As long as you have not chosen, or have declined, your browser does not download Google's measurement script, no measurement requests are sent to Google and no Google Analytics cookie is set. If you accepted earlier, the banner is not shown on later visits and Google Analytics loads directly, based on your record.

When you accept: your browser downloads the measurement script from www.googletagmanager.com, and Google Analytics sets two first-party cookies on the witlabs.studio domain. _ga assigns your browser a random identifier, so that visits from the same browser can be linked. _ga_1RC33QRVQD keeps the session state for this site's Google Analytics property. According to Google's documentation, both last up to 2 years; some browsers cap cookie lifetime at 400 days. In our measurement, the browser stored both cookies for 400 days (see section 7).

What is sent to Google: the script sends measurement requests to Google at www.google-analytics.com. In our measurement, copies of some of these requests (page view, scrolling and engagement time) were also sent to www.google.com. In our measurement, these requests contained: the address of the page viewed (including any campaign parameters in it) and its title, the address of the previous page if you came through a link on the site (the referring address), the browser identifier from the cookie and a session identifier, browser language, screen resolution, browser and operating system information, and these events: a page view (page_view), scrolling to the end of the page (scroll), engagement time on the page (user_engagement) and, when you start typing in a form, a form start (form_start: the address the form is sent to, the number of fields in the form, and the name, identifier and position of the first field used). What you type in the form was not included in these requests; we checked this by typing a test text and a test email address. As with any web request, your IP address reaches Google with these requests; according to Google, Google Analytics 4 does not log or store IP addresses. The data is sent to Google's servers outside Türkiye, which constitutes a transfer abroad (see the Privacy Policy).

No permission for advertising: the banner asks for analytics only, and the site passes only the analytics storage permission to Google. The permissions for ad storage, user data for advertising and ad personalization stay denied, even when you accept. In the site's Google Analytics setup (the tag settings), Google signals and ad personalization signals are turned off. In our measurement, every measurement request carried the flag stating that personalized ads are off (npa=1) and a consent state showing that only analytics was granted; no advertising cookie was set.

[LEGAL REVIEW REQUIRED] Despite these settings, our measurement showed copies of some measurement requests being sent to www.google.com. We could not measure for what purpose Google processes these copies, or whether, in a browser signed in to a Google account, they are sent together with Google cookies; this will be confirmed against Google's documentation, together with confirming that Google signals are turned off on the Google Analytics property.

[LEGAL REVIEW REQUIRED] The following will be confirmed: the legal ground for the processing done with Google Analytics, and whether the consent given through the cookie banner qualifies as explicit consent under KVKK; the data retention period set on the Google Analytics property; the transfer mechanism under Article 9 of KVKK for the transfer to Google; and which Google entity is the contracting party.

If another non-essential cookie is added, this policy will be updated in advance, and that cookie will also be used only with your consent. Details: Privacy Policy.

6. Third-party content

Fonts are loaded from the site's own server; no third-party font service is used. The only third-party script that can be loaded on the site is Google's measurement script, and only with your consent (see section 5). The site has no embedded videos, maps or social media plugins.

When you follow external links, such as LinkedIn or our ventures' websites, that site's own cookie policy applies.

7. Cookie and storage table

Campaign information: if you arrive through a campaign link (with the utm_source, utm_medium, utm_campaign, utm_content or utm_term parameters), these parameters are kept in session storage (sessionStorage, key name wl_utm) only while that browser tab stays open, and they are sent to us only if you submit a form, together with that submission. When the tab is closed, the browser deletes this information; this record is not sent anywhere else. This record does not depend on your choice in the cookie banner. Separately, if you have accepted Google Analytics, it sends the page address, including any campaign parameters in it, to Google in its measurement requests (seen in our measurement; see section 5).

[LEGAL REVIEW REQUIRED] Whether keeping campaign information in session storage requires a separate notice or consent will be assessed.

How this was measured: on September 30, 2026 the site was opened in an isolated browser (Chromium) and four states were measured separately: before any choice, after Decline, after Accept, and after withdrawing consent through the Cookie settings link in the footer. In each state, every network request the page made and everything it left in the browser (cookies, localStorage, sessionStorage) was counted. Before any choice and after Decline, no request went to Google and no Google Analytics cookie was set. The script request, the names, domain and lifetime of the cookies, the content of the measurement requests and the npa value rest on this measurement. The maximum cookie lifetime of 2 years and how the data is processed on Google's servers, including the handling of your IP address, rest on Google's documentation, not on our measurement.

8. Changing or withdrawing your choice

• On the site: the Cookie settings link in the footer of every page reopens the cookie banner and shows your current choice. If you accepted earlier, you can withdraw your consent with Decline. The site then stops Google Analytics right away, deletes the _ga and _ga_1RC33QRVQD cookies from your browser and updates the wl-consent record to declined; you do not need to reload the page. In our measurement, no new measurement request was sent after withdrawal; only events that had happened before withdrawal and were still waiting in the browser (in our measurement, the view of that page and scrolling to the end of it) were sent within a few seconds. Data already sent to Google is not deleted by this; it is subject to the retention period set on the Google Analytics property.
• In your browser: you can view or delete witlabs.studio cookies and site data in your browser settings. If you delete the wl-consent record, the banner appears again on your next visit. You can block cookies for all websites; the site still works, but because your choice cannot be remembered, the banner may appear on every visit.
• With Google's tool: to stop Google Analytics from sending measurement data on every website, install the Google Analytics Opt-out Browser Add-on published by Google: tools.google.com/dlpage/gaoptout ↗

9. Policy updates

If the site's use of cookies changes, this page will be updated before the change takes effect, and the "last updated" date at the top of the page will be changed.

10. Data controller and contact

WITLABS PROJE GELİŞTİRME A.Ş. · Teknopol İstanbul / Entertech İstanbul · info@dcatgroup.com

Related documents: KVKK Privacy Notice · Privacy Policy