Looking for all legal standards in one place?

Cookie Policy

Last Updated: August 21, 2026

This Cookie Policy explains how Praffer uses cookies and similar tracking technologies on our website and web applications. You can find detailed descriptions of each cookie category, purpose, retention period, and how to manage your preferences below.

1. What Are Cookies?

Cookies are small text files placed on your computer or mobile device when you visit a website. They are used to make websites function properly, enhance security, store your preferences, and provide analytical insights into site usage.

2. Cookie Categories We Use

Praffer uses three categories of cookies. The tables below specify the name, provider, purpose, and expiration of each. For full transparency we also list the browser localStorage entries we use; these are not cookies and are never sent to our servers.

Strictly Necessary Cookies

Essential for core features like authentication, CSRF security tokens, and active workspace loading. These cannot be disabled.

Cookie Name	Provider	Purpose	Duration
authjs.session-token	Praffer (NextAuth)	Stores secure user session state required to keep you authenticated.	30 days
authjs.csrf-token	Praffer (NextAuth)	CSRF security protection token against cross-site forgery.	Session
authjs.callback-url	Praffer (NextAuth)	Remembers the destination redirect URL after sign-in.	Session
active_workspace	Praffer	Stores the active workspace ID to load the correct organization dashboard.	1 year
oauth_state / oauth_ws / oauth_pkce	Praffer	Security state verification during OAuth connection handshakes. Automatically cleared upon completion.	10 minutes
invite_token	Praffer	Preserves team workspace invitation token during the sign-up flow.	7 days

Functional Cookies

Saves preferences like language choices (TR/EN), cookie consent, and dark/light UI themes to enhance your user experience.

Cookie Name	Provider	Purpose	Duration
praffer-cookie-consent	Praffer	Stores your cookie consent preferences so you are not prompted on every visit.	1 year
praffer_locale	Praffer	Stores your interface language preference (TR/EN).	1 year
praffer-theme	Praffer (localStorage)	Saves light/dark mode UI theme preference.	Until you clear it

Analytics and Performance Cookies

We do not currently use analytics cookies — Google Analytics measurement is switched off, so none of the cookies below are being set today. If we turn it on later, they are set only if you chose “Accept all”; choosing “Essential only” means none of them are ever written.

Cookie Name	Provider	Purpose	Duration
_ga	Google Analytics	Assigns a randomized ID to distinguish unique anonymous visitors and calculate session data.	2 years
_ga_*	Google Analytics	Maintains session state for Google Analytics 4 (GA4) pageview and event metrics.	2 years

Marketing and Retargeting Cookies

We do not use marketing or retargeting cookies. Praffer runs no advertising pixels or third-party ad network trackers. Should this change, this policy will be updated and your consent will be requested before any such cookie is set.

3. Third-Party Analytics Providers

No third-party analytics provider is active at the moment. Should we enable analytics measurement, it will be handled by the provider below, governed by its own privacy policy:

Google Analytics: Google Privacy Policy

4. Managing Your Cookie Preferences

You can change your cookie preferences at any time:

Browser Controls: You can block or delete cookies in your browser settings.
Google Analytics Opt-Out: Install the Google Analytics Opt-out Browser Add-on to disable GA tracking entirely.

5. Statutory Compliance

This policy complies with the EU General Data Protection Regulation (GDPR), the ePrivacy Directive (EU Cookie Law), and the Turkish Law on the Protection of Personal Data (KVKK).

6. Contact Us

If you have questions about this Cookie Policy or how we use cookies and similar technologies, please contact us at: [email protected]