Cookie Policy
1. Scope
This policy explains the technologies used on the following addresses, operated by the party that provides and operates FORA ("the Owner"):
forapp.online(marketing website).app.forapp.online(FORA application).
The technologies covered are cookies and browser storage (localStorage and sessionStorage). Our general processing of personal data is described in the Privacy Policy and the Data Protection Notice.
2. In short
- FORA uses no analytics, advertising, marketing or social media cookies.
- The cookies and browser storage we use serve only these purposes:
- Keeping you signed in.
- Keeping you secure.
- Remembering display preferences you chose yourself.
- They are either strictly necessary for the service or provide a function you explicitly asked for. They therefore do not rely on consent, and no cookie banner is shown.
- Legal bases: KVKK Art. 5(2)(c) (performance of a contract) and Art. 5(2)(f) (legitimate interest). We follow the "strictly necessary cookie" approach in the Turkish Authority's Cookie Guidelines. For EU visitors, this corresponds to the exemption in Art. 5(3) of the ePrivacy Directive for storage that is strictly necessary for a service explicitly requested by the user.
3. What cookies and browser storage are
Cookie: a small text file a website saves in your browser. It is sent back to the site with later requests.
Browser storage: localStorage and sessionStorage keep information only in your browser and are not sent to the server automatically. The difference:
localStoragepersists until you clear it.sessionStorageis cleared when the tab closes.
4. Marketing website (forapp.online)
| Name | Type | Purpose | Duration | Party |
|---|---|---|---|---|
fora-theme | localStorage | Remembers your light/dark theme choice | Until you clear it | First party |
- The marketing website sets no cookies.
- Fonts: the website serves its fonts from its own server; there is no third-party connection.
5. FORA application (app.forapp.online)
5.1 Cookies (all strictly necessary, first party)
| Name | Purpose | Duration | Attributes |
|---|---|---|---|
__Secure-next-auth.session-token | Keeps you signed in. A signed, encrypted session token holding your user ID, company and role. | 8 hours | HttpOnly, Secure, SameSite=Lax |
__Host-next-auth.csrf-token | Protects against cross-site request forgery (CSRF) | Session (until the browser closes) | HttpOnly, Secure, SameSite=Lax |
__Secure-next-auth.callback-url | Remembers where to send you after sign-in | Session | HttpOnly, Secure, SameSite=Lax |
fora_admin_session | Operations panel session for FORA operations staff only. Never set for customer users. | 8 hours | HttpOnly, Secure, SameSite=Lax |
If the session token grows large, it may be split into parts such as …session-token.0 and .1 because of browser size limits.
5.2 Browser storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
fora-theme | localStorage | Light/dark theme preference | Until you clear it |
mfp-sidebar-collapsed | localStorage | Whether the side menu is collapsed or expanded | Until you clear it |
fora:liste-filtre:* | sessionStorage | Remembers your list filters, page and date range within the tab | Until the tab closes or you sign out; cleared on sign-out |
5.3 What we do not use
The application has no:
- Third-party cookies.
- Analytics or tracking code.
- Advertising pixels.
- External font loading. The application's fonts are served from its own server.
6. Infrastructure providers
- Railway: the website and application are hosted on Railway. In our tests, Railway set no cookies on visitors.
- Cloudflare: provides DNS only. Web traffic does not pass through Cloudflare's proxies, so no Cloudflare cookies are set.
7. Managing cookies
You can view, delete or block cookies and site data in your browser settings:
- Google Chrome: Settings › Privacy and security › Cookies and other site data
- Mozilla Firefox: Settings › Privacy & Security › Cookies and Site Data
- Safari: Settings › Privacy › Manage Website Data
- Microsoft Edge: Settings › Cookies and site permissions
If you block strictly necessary cookies, you cannot sign in to the FORA application.
If you clear preference storage, your theme and menu preferences return to the defaults.
8. Changes
If we ever start using non-essential cookies, we will:
- Update this policy.
- Ask for your consent before setting them.
- Provide a panel where you can easily change your choice.
9. Contact
For questions and requests under KVKK Art. 11: info@forapp.online