Cookie Policy

1. What cookies are

Cookies are small text files stored on your device by the sites you visit. They let a site remember your preferences and recognise that a request belongs to a signed-in session.

The list below is the actual list. Cookies that this site does not set are not named here — the previous version of this page listed two that did not exist and omitted two that did.

2. Strictly necessary cookies

These are required for the service you asked for to be provided, and under the Personal Data Protection Authority’s Guidelines on Cookie Practices they do not require consent.

• next-auth.session-token (and __Secure-next-auth.session-token over HTTPS) — keeps you signed in. Deleting it signs you out.
• next-auth.csrf-token and next-auth.callback-url — protect the sign-in flow against cross-site request forgery.
• gs_cc — the two-letter country code resolved at the edge. Used to decide whether to show the price in lira and whether the game can be offered at all.
• gs_play — a signed, randomly generated identifier set when you play the game. It carries no personal data and exists only to apply the daily limit, which keeps the free imagery allowance available to everyone.
• gs_consent — remembers, for six months, that you have closed the cookie notice, so it is not shown again on every visit.

3. Functional cookies

These remember a preference you expressed. They do not require consent, but they are declared here because a cookie that is not declared is the problem, whatever its category.

• gs_locale — the language you chose, kept for one year. Without it, language falls back to your browser’s Accept-Language header.

The light/dark theme preference is not a cookie: it is held in your browser’s local storage and is never sent to the server.

The checkout and the app offer keep three more items in your browser. None of them is a cookie, and none is sent to any server. gs_checkout_left (local storage) records when you left the checkout without paying, so that the app offer can be shown once on a later visit. gs_offer_seen (local storage) records when the app offer was last shown, so that it is not shown again for three days. gs-checkout-clean (session storage) is a flag that stops the payment page from reloading itself more than once; the browser deletes it when you close the tab.

Two more hold the photo you chose, in session storage, so that you do not have to choose it again. gs_pending_photo keeps a reduced copy while you sign in with Google. gs_checkout_photo keeps one while you are on the payment page, which shows it to you; after a successful payment it is handed on so that the analysis you asked for starts by itself. Neither is sent to any server except as that analysis, and the browser deletes both when you close the tab.

4. Analytics and measurement cookies

These are not strictly necessary. Under the Personal Data Protection Authority’s Guidelines on Cookie Practices they require explicit consent, and a consent mechanism is currently being built.

The site loads two measurement tools, and both set cookies of their own:

• Google Analytics (_ga, _ga_<property>) — how many visitors arrive, from where, and which pages they read.
• Meta Pixel (_fbp) — measurement of advertising performance.

Until the consent mechanism is in place you can block these from your browser settings, or with Google’s official opt-out add-on. Blocking them does not affect any function of the site.

5. Third-party cookies

Cookies set by parties other than us, on the pages where their services load:

• Google — authentication. Set when you use the sign-in flow.
• Google Maps / Street View — loaded only on the game page, to display panoramas. Google may set its own cookies when that page loads. No other page on this site loads Google Maps.

No payment provider sets a cookie on this site: the card form is part of the site’s own checkout page and loads nothing from the bank. The 3D Secure page you are taken to when you pay belongs to Garanti BBVA or to the bank that issued your card, and any cookies it uses are that bank’s.

6. Managing cookies

You can view, block and delete cookies from your browser settings. Blocking strictly necessary cookies will stop you being able to sign in.

Questions about cookies can be sent to meric1357@icloud.com.