1. What cookies and browser storage are
Cookies are small text files that a site saves in your browser. Local storage is a similar space in the browser where a site keeps information on your device; it is not sent to the server automatically. This policy covers both.
2. Strictly necessary
These are needed for the site to work and stay secure, and cannot be switched off from the site:
- Sign-in session (local storage): when you sign in, the sign-in service keeps your session in local storage so you stay signed in; it is removed when you sign out. Without it the company account cannot be used.
- Security cookie __cf_bm (cookie): set by the content delivery network that serves the site, to tell visitors apart from automated traffic; it expires after 30 minutes. We do not read it or use it for anything else.
3. Preferences
Your display choices are handled as follows, and we use them only to show the page the way you chose:
- Language: taken from the page address (/ar or /en); nothing is stored for it.
- Currency: if you choose the currency in which prices are shown (USD, TL or EUR), your choice is kept in local storage under merhaba-connect-currency until you clear it.
- Plan view: if you choose cards or table on the new order page, your choice is kept in local storage under merhaba-connect.plan-view until you clear it.
4. Statistics and error reporting
The hosting platform on which the site runs adds two scripts to every page. We cannot switch them off from the site's code, so we describe them here as they are. We use what they collect only to count visits and fix errors, and the platform processes it as our service provider:
- Statistics script: sets one cookie named session-id, which expires after 30 minutes, and records the full address of the page visited, the referring page, browser and device type, language, approximate country based on time zone, and time on page.
- Events script: records the page path, the referring site, clicks on buttons and links (the type of element and its label), errors and loading speed. It stores nothing in your browser, and its session-recording feature is not switched on for this site.
5. The bank's payment pages
When you pay by card, the bank's 3D Secure page and your card issuer's verification page open on their own sites. They set their own cookies under their own policies, which we do not control or read.
6. What we do not use
We do not use advertising, retargeting or social-media cookies, and we do not sell or share browsing data for advertising. The site loads its fonts from Google's font service, which receives your IP address but sets no cookies.
7. Managing cookies
You can delete or block cookies and local storage in your browser settings at any time. Deleting the sign-in session signs you out, blocking it stops the company account from working, and deleting preferences resets them to their defaults.
The site cannot offer a switch for the two statistics scripts, because the hosting platform adds them. You can block them with your browser settings or an extension that blocks tracking scripts, and the site keeps working.
8. Updates and contact
We update this policy when the site's cookies or storage change, and the current version stays on this page with its date. For any question, write to accounting@merhabatourism.com or use the Contact page. The Privacy Policy explains how we process personal data and what your rights are.