Cookie Policy

1. Strictly necessary cookies

We use two strictly necessary cookies in the app:

• “access_token”: keeps you signed in; it becomes invalid when your session expires or you sign out.
• “device_id”: a random value that recognises your browser. It lets us alert you when your account is signed in from a new device; it does not contain your identity, does not track you across sites and is kept for at most 400 days.

Both are only sent over secure connections (Secure) and cannot be read by scripts in the browser (HttpOnly). Because they are strictly necessary for the service to work and to keep your account secure, they do not require your consent.

On our website, your answer in the cookie banner (accept or decline) and its date are kept in your browser’s local storage (localStorage, “baralar-consent”). This is not a cookie and is used only to remember your choice; we ask you again after 12 months.

2. Other data stored on your device

• Preferences: your theme, language, date format, text size and amount hiding preferences are kept in your browser’s local storage (localStorage).
• Offline records: records you add while offline are kept on this device until they are sent.
• App files: files needed for the installable app (PWA) to work are stored on your device. Your financial data and documents are not cached.

This data is used only to provide the service and is not shared with third parties. If you use a shared device, we recommend signing out when you are done.

3. Visit statistics

On our website and in the app we use Cloudflare Web Analytics to measure page visits in aggregate. It does not use cookies, does not store information on your device and does not track you across sites. We do not use advertising or marketing tracking tools in the app; the consent-based measurement cookies on our website are described below.

4. Measurement cookies subject to consent (website only)

On our website (www.baralar.com) we use Google’s and Meta’s measurement tools to measure the effectiveness of our advertising campaigns. These tools and their cookies are loaded only if you choose “Accept” in the cookie banner; if you decline or do not answer, no measurement script or cookie is loaded.

Cookies set when you consent:

• Google tag (Google Ads and Google Analytics; Google LLC, USA): “_ga” and “_ga_*” (to distinguish visitors; 2 years), “_gcl_au” and “_gcl_aw” (to link an ad click to a later visit and sign-up; 3 months).
• Meta Pixel (Meta Platforms Ireland Limited, Ireland / Meta Platforms, Inc., USA): “_fbp” (to distinguish visitors; 3 months), “_fbc” (to link an ad click to a later visit and sign-up; 3 months).

The purpose is to measure, in aggregate, who our advertisements reach and whether they work (for example, how many visitors who clicked an ad created an account). These providers are located abroad; the information recorded by the cookies (such as the pages you visit, device and browser information and the ad click identifier) goes to their servers, and Google and Meta also process it under their own privacy policies. Your records in the app, your name and your email address are not sent to these platforms. The legal basis is your explicit consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)).

You can change your choice or withdraw your consent at any time through the “Cookie preferences” link at the bottom of the page; withdrawal does not affect processing carried out before it. Once withdrawn, the measurement tools are no longer loaded; you can delete cookies already set in your browser settings. Your choice is kept for 12 months, after which we ask again. If you create an account after consenting to measurement cookies, the fact that you consented is recorded together with your account’s referral data (see our Privacy Policy).

There is no advertising, ad-related tracking or third-party script in the app (my.baralar.com); these cookies are not used in the app.

5. Managing your choices

You can delete or block cookies and site data in your browser settings. If you block the necessary cookies, you will not be able to sign in to the app; clearing site data also removes your preferences and any offline records not yet sent. The only non-essential cookies are the consent-based measurement cookies on our website; they are loaded only with your consent, which you can withdraw at any time as described above.