Cookie Notice

Cookies are small values stored by a browser and returned to a website. Similar browser technologies, such as session storage, can hold limited state in the current tab. This notice describes the uses verified in the TapLoyal web application as of the effective date.

These first-party cookies support a service or security step requested by the user. TapLoyal does not present them as advertising or cross-site tracking cookies.

• taployal_session: HTTP-only authentication session used to keep an authorized user signed in and associate server requests with that session.
• taployal_locale: language preference used to present Turkish or English content consistently.
• taployal_mfa_challenge: short-lived, HTTP-only security state used during a multi-factor sign-in challenge.
• taployal_mfa_setup: short-lived, HTTP-only security state used while an authenticated user configures multi-factor authentication.

TapLoyal may use browser session storage for limited interface and transaction-continuity state, such as preserving a catalog position or matching a checkout attempt with its return status. Session storage is scoped to the browser tab or session and is not described here as an advertising identifier.

The web application can contact Google for Google Sign-In, Maps/Places features, and a Material Symbols font resource, and can contact PayTR when a payment flow is used. These providers receive technical request data needed for the selected feature and may apply their own storage practices under their policies.

Loading a third-party resource is not described as a TapLoyal advertising cookie. The Privacy Notice explains the purposes and providers in more detail.

As of the effective date, the TapLoyal web application does not identify an active third-party advertising-tracking SDK or a non-essential behavioral advertising cookie. Dashboard loyalty analytics are first-party operational reports based on activity within the service, not cross-site advertising profiles.

Browser settings can display, block, or delete cookies and site data. Blocking an essential authentication, security, or language cookie may prevent sign-in, MFA, locale persistence, or another requested function from working correctly.

TapLoyal does not claim that a separate cookie-preference center is currently available. If non-essential cookies are introduced, this notice and any consent controls required by applicable law will be updated before or when those cookies are used.

This notice will be updated when verified browser-storage practices change. Questions can be sent to info@taployalapp.com. For security, do not send cookie values, session tokens, passwords, or authentication codes by email.