Last updated: 2026-09-10 · Türkçe özet sayfanın altındadır
BookVoya sets no cookies at all. Our servers never send a Set-Cookie header. There are no advertising pixels, no third-party trackers, no session cookies, and no external analytics provider such as Google Analytics, Meta Pixel, or Hotjar.
Instead of cookies, the app uses your browser's local storage (the localStorage API). Unlike a cookie, local storage is never transmitted automatically with requests — it stays on your device until you clear it or log out.
| Key | Purpose | Needed? |
|---|---|---|
bookvoya_dashboard_token | Keeps you signed in to your dashboard | Essential |
bookvoya_artist_id, bookvoya_artist_slug | Identifies which workspace to load after sign-in | Essential |
bookvoya_studio_id | Same, for studio-owner sign-in | Essential |
bv_locale, bookvoya_app_lang | Remembers the language you picked | Preference |
bv_return | Sends you back to the page you wanted after signing in | Essential |
bv_firstrun_dismissed, bv_inbox_suggest_open | Remembers that you closed a first-run hint or expanded a panel | Preference |
bv_ck_ticks_* | Your Creator Kit session checklist ticks. Stored only on this device — it is never sent to our servers. | Preference |
To erase all of it, sign out or clear site data for app.bookvoya.com in your browser settings. Clearing it signs you out and resets your language choice; nothing else is lost, because your actual account data lives on the server.
The mobile web app also registers a service worker that caches the interface files (HTML, CSS, JavaScript, icons) so the app opens quickly and survives a flaky connection. It caches the interface, not your personal data.
We keep a small, first-party record of product events — for example "the pricing page was opened" or "the registration form was submitted" — so we can tell which parts of the product are working. These events are sent to our own server at /api/events. They are not shared with anyone.
Each event record contains only:
tr, en)solo)Deliberately not recorded with these events: your account id, name, email, phone, IP address, cookie or device fingerprint, session id, any free text, message content, or anything about a tattoo request. The server drops any field that is not on the allow-list, so an event cannot be traced back to a person or joined up into a profile.
Because these records are anonymous and cannot be linked to you, they do not require consent under the GDPR or KVKK. They are kept for 12 months.
Like any web server, ours writes operational logs for security and debugging — request paths, status codes, error traces. These are used only to keep the service running and are not used to build profiles or for marketing.
If we ever add a cookie that is not strictly necessary, an advertising pixel, or an external analytics provider, we will ask for your consent first through a proper consent banner and update this page before turning it on. We will not do it silently.
BookVoya hiçbir çerez kullanmaz. Sunucularımız Set-Cookie başlığı göndermez; reklam pikseli, üçüncü taraf izleyici veya Google Analytics benzeri harici analitik sağlayıcı yoktur.
Çerez yerine tarayıcının yerel depolama alanı kullanılır: oturum jetonun, hangi çalışma alanını açacağımız, seçtiğin dil ve kapattığın ipuçları gibi bilgiler. Bunlar cihazında kalır, isteklere otomatik eklenmez. Çıkış yaparak veya tarayıcından site verilerini temizleyerek hepsini silebilirsin.
Ürünün hangi bölümlerinin çalıştığını görmek için kimliksiz, birinci taraf olay kayıtları tutulur (örneğin "kayıt formu gönderildi"). Bu kayıtlarda ad, e-posta, telefon, IP adresi, çerez, parmak izi, oturum kimliği, serbest metin veya mesaj içeriği yer almaz; sunucu izin listesinde olmayan alanları siler. Kişiye bağlanamadıkları için KVKK ve GDPR kapsamında açık rıza gerektirmezler. 12 ay saklanır.
İleride zorunlu olmayan bir çerez, reklam pikseli veya harici analitik eklenirse, açmadan önce rızan istenir ve bu sayfa güncellenir.