The Turkish text is binding
This English version is a translation provided for convenience only. If there is any difference between the two, the Turkish text prevails.
⚠️ This is a draft
The text on this page is a placeholder only. Before the product goes live, the fields in square brackets below must be replaced with real, legally valid text.
Cookie Policy
Version: 2.1 · Last updated: November 8, 2026
1. What is a cookie?
Cookies are small text files saved to your browser when you visit a website. In this policy, "cookie" also covers similar technologies such as the browser's local storage (localStorage). This policy explains the cookies used on the www.puufu.com.tr website operated by PUU FU CLOUDS GIDA VE TATLICILIK A.Ş. (the "Company"). For general information about how your personal data is processed, please see the KVKK Privacy Notice.
2. Essential and preference cookies
These cookies and records are needed for the site to work or to remember a setting you explicitly chose; for this reason they do not depend on your explicit consent. Their legal basis is item (c) of paragraph 2 of Article 5 of the KVKK (establishment and performance of a contract) and item (f) (legitimate interest). - sb-…-auth-token (Supabase): Keeps your session open when you sign in. Stored for the duration of the session and until you sign out. - NEXT_LOCALE (Puufu): Remembers the language you chose in the language selector; when you come back, the site opens in that language. Stored for 1 year. - bgMusicState (Puufu, local storage): Remembers whether you left the background music on or off. Stored until you delete it. - pf_ana_ekran and pf_push_sorusu (Puufu, local storage): Remember that you dismissed the "Add to home screen" and browser notification suggestions, so the same suggestion is not shown again and again. Stored until you delete them. - pf_son_girisler (Puufu, local storage): Remembers the email address and username of up to 3 accounts you have logged in with on this device, shown as suggestions on the login screen. It stays only in this browser and is not sent to us. If you delete your account, that account's entry is deleted too; otherwise it is stored until you delete it. - pf_cerez (Puufu): The cookie that held the cookie preference in the previous version; it is no longer used and is removed from your browser automatically within 6 months at the latest. If you turn on browser notifications, the notification subscription created by your browser (the notification service's endpoint address and encryption keys), together with browser information and your language preference, is stored so that notifications can be sent. You can turn notifications off at any time from your browser's site settings or from your account settings; the subscription is then deleted. Bot protection on the sign-in and sign-up forms is provided by Cloudflare Turnstile; this service processes the technical data needed for security verification on its own domain.
3. Cookieless visit measurement
Vercel Inc.'s Web Analytics and Speed Insights services are used to measure how much the pages of the site are visited, how quickly they load and how far visitors progress through the steps on the site. These services do not write cookies to your browser and do not use local storage. In addition to page visits, some steps within the site are also counted, such as which sections of the home page are viewed; the opening of the sign-in, sign-up, school, photo upload and payment windows; the outcome of a sign-up, sign-in, payment initiation, payment return or campaign code redemption; and the reason an error occurred during these steps. Only predefined values are sent with these counts (e.g. the name of the step, which button opened the window, the selected package, the sign-in method, whether you are signed in). Your first name, last name, email address, username, billing address, the code text you enter, other information you type into forms and the photo you select are not sent. Visitors are counted with a hash value that is reset every day and cannot be reversed; for this reason the same person cannot be tracked across days or sites. Page addresses sent for measurement are stripped of the query parameters in the address bar. No measurement is made on admin panel pages. This data is not used for advertising. Legal basis: item (f) of paragraph 2 of Article 5 of the KVKK (legitimate interest in operating and improving the site).
4. Transfer abroad
Our site is hosted on the infrastructure of Vercel Inc. (United States of America); visit measurement is also carried out by the same provider. The technical data processed in this context may be processed on servers located abroad. The country of transfer may not have a level of personal data protection equivalent to that in Turkey. The transfer is carried out within the framework of Article 9 of the KVKK and the related secondary legislation; for details, please see the "Transfer of Data Abroad" section of the KVKK Privacy Notice.
5. How can you manage your preferences?
Since no cookie that depends on your explicit consent is used on the site, there is no separate cookie preference banner. You can change your language preference from the language selector, and browser notifications from your account settings or your browser's site settings. You can also delete or block cookies and local storage in your browser settings. If you block essential cookies, some features such as signing in may not work. If a cookie that depends on your explicit consent is used in the future, this policy will be updated and your consent will be asked for separately.
6. Your rights and contact
You can send your requests regarding your rights under Article 11 of the KVKK to info@puufu.com.tr. For details of your rights, please see the KVKK Privacy Notice.