Cookie Policy and Similar Technologies
Updated: October 17, 2026 · Version: 1.0
Article 1. Purpose and scope
1.1. This policy describes the cookies and similar device storage technologies used on İthera, which is operated by Biostat Sağlık Hizmetleri Limited Şirketi (“BİOSTAT”). BİOSTAT's address is Atalar Mahallesi Yayla Sokak No:13/10 Kartal Istanbul.
1.2. A cookie is a small record stored in the browser. Local storage, session storage, IndexedDB, and application cache are different technical tools. They do not share the same purpose or retention period; merely grouping them under the heading of “cookies” does not mean all records are managed in the same way.
Article 2. Purposes of use and legal grounds
2.1. Essential tools. These are used for requested core functions such as session execution, request security, and remembering cookie preferences. Relevant data is processed under the performance of a contract in accordance with Article 5/2(c) of the PDPL (KVKK), or based on legitimate interests under Article 5/2(f), provided that it does not harm fundamental rights.
2.2. Preference tools. Separate consent is obtained for optional functions such as remembering language or interface choices for subsequent visits. For these operations, explicit consent under Article 5/1 of the PDPL is used as the basis. Refusing these tools only affects optional recall functions; accepting all preferences is not required to use the core service.
2.3. İthera does not use advertising profiling or third-party analytical cookies. This policy will be updated and additional consent will be obtained if such a tool is added.
Article 3. Cookie and storage inventory
| Record or tool | Purpose and scope | Duration / clearing condition |
|---|---|---|
itheralab-session |
Maintaining login status; essential, first-party | 30 days; terminated upon logout. |
XSRF-TOKEN |
Request security (CSRF); essential, first-party | 30 days |
remember_web_* |
Maintaining session on the logged-in device; essential, first-party | 400 days; deleted upon logout. |
ithera_consent |
Remembering cookie choices; essential, first-party | 180 days |
locale |
Remembering the selected language preference; first-party | 180 days; cleared if preference is withdrawn. |
ta_default_board_info |
Interface preference related to workspace information | Local storage; until cleared or preference withdrawn. No time-based automatic expiry. |
ta_splash |
Managing the splash screen within the session | Browser session storage |
ithera-recording-recovery |
Temporary recovery copy of audio captured during recording; IndexedDB | 24-hour recovery period; expired recordings are cleared during the next check. |
| Application cache / service worker | Faster loading of application files and enabling installation as an app | Changes with version/cache refresh or by clearing site data from the browser. |
3.1. Essential cookies are necessary for session execution and security; if these are blocked, you cannot log in.
3.2. The language preference saved to your account is not the same record as the browser cookie. Deleting a cookie does not automatically delete your profile preference or content on the server. The application cache is not a backup of your documents.
Article 4. Providing and withdrawing preferences
4.1. Users may accept or reject optional categories through the cookie preference interface; you can reorganize your choices via the Cookie Preferences link at the bottom of the page. Essential tools remain enabled for core functions. If functional preferences are disabled, the corresponding recall records will be cleared, and their regeneration will be subject to preference.
4.2. Remaining silent, scrolling the page, or revisiting the site does not constitute consent to optional cookies. Withdrawing consent does not retroactively invalidate previous lawful processing; it affects subsequent use.
4.3. Cookies and site data can also be cleared or blocked through browser settings. Blocking all records may affect login and security functions. Using a different browser or device may result in a separate preference record.
Article 5. Special status of the audio recovery copy
5.1. The local audio copy is not used for advertising or visitor tracking purposes; it assists in recovering a recording started by the user after an interruption. The function and content of this storage differ from the cookie preference record. Disabling preference cookies does not mean that all audio copies on the device are deleted.
5.2. Successful upload validation, explicit deletion of a recording, or explicit logout from the application triggers the relevant clearing operations. Session expiry does not necessarily have the same result. Browser constraints, other open tabs, and the application being closed may affect the clearing process. When necessary, clearing site data from the browser can be used; this also prevents the recovery of records that have not yet been uploaded.
Article 6. Transfers, applications, and updates
6.1. Session and preference records may be processed along with relevant site requests. The presence of local audio fragments does not mean that all these fragments have been uploaded to the server. The scope of uploading and transfer to external AI is explained in the Privacy Policy.
6.2. Personal data requests can be sent to BİOSTAT — Atalar Mahallesi Yayla Sokak No:13/10 Kartal Istanbul or via info@itheralab.com using valid application procedures. Details regarding rights and applications are available in the PDPL Clarification Text.
6.3. When the purpose, duration, or tools used change, this policy and the preference screen are reviewed together. A new optional category will not be enabled automatically based on a previous general membership acceptance.