Cookie Policy
Draft. This text is not yet in force and must not be published until a lawyer has reviewed it. Places marked [TO BE COMPLETED: …] are decisions not yet taken or facts not yet supplied.
Last updated: [TO BE COMPLETED: publication date]
A cookie is a small piece of text a website leaves in your browser and reads back on later requests; browser storage is a similar place a page can keep a value in your browser. cpleks.com uses one cookie, only after you sign in to your account, and one browser storage entry, only if you choose a theme. It uses no analytics, advertising, social media or tracking cookies, and loads no third-party fonts or scripts except Paddle’s checkout on the pages where you buy or renew. Your language is kept in the page address (/tr/), not in a cookie.
1. What the site stores in your browser
| Name | Kind | Purpose | Lifetime |
|---|---|---|---|
| __Host-cpleks | Session cookie, first party | Keeps you signed in to your account. It holds a random session number; our server stores only a digest of it. It is set only when you sign in, is sent only to this site and only over an encrypted connection, and cannot be read by scripts on the page. | Until you close your browser, which then deletes it. Signing out deletes it at once, and the session behind it ends 30 days after sign-in even if the browser stays open. |
| cpleks-theme | Browser storage (localStorage), first party | Remembers whether you chose the light or the dark theme with the theme button. It is written only when you press that button, is never sent to our server, and contains nothing but the word “light” or “dark”. | Until you clear this site’s data in your browser. |
The pages you only read — the home page, the user guide, the legal texts — set no cookie. Forms on the site are protected against forged requests by a value carried in the form itself, not by a cookie.
2. Legal basis
The sign-in cookie is used only to provide a service you have explicitly asked for — signing in to your account and using it — and for nothing else. It is a session cookie, which your browser deletes when it closes, so it is strictly necessary: it relies, without your consent, on being necessary for and directly related to entering into or performing the contract (Article 5(2)(c) of the Personal Data Protection Law; Article 6(1)(b) GDPR). No consent is asked for it.
The theme entry is written only when you press the theme button, to do what that button is for; it identifies no one and is never sent to us.
3. Paddle’s checkout
The purchase page, and the page for buying another year of updates for a licence you hold, load the checkout of Paddle — the seller, which takes the payment: as soon as the page opens, whether or not you ever open the checkout, your browser downloads Paddle’s script from cdn.paddle.com, and that request gives Paddle your IP address and the identification your browser sends. When you press the buy or renew button, the checkout opens from Paddle’s servers. Paddle may use cookies and similar browser storage of its own to process the payment, for security and to prevent fraud. We do not set, read or control them; they are covered by Paddle’s privacy notice, which also explains how to manage them. Paddle’s script is not loaded on any other page of the site. [TO BE COMPLETED: the list of cookies Paddle’s checkout sets, once obtained from Paddle]
4. How to manage them
You can see, delete or block cookies and site data in your browser’s settings. If you block the sign-in cookie you cannot sign in to your account; the rest of the site keeps working. Deleting the theme entry returns the site to your system’s light or dark setting.
5. Changes
If anything is added to this list, we update this page before it is used. If we ever decide to use a cookie that is not strictly necessary, we will use it only after you have given your explicit consent.