Cookie Policy.

This Cookie Policy ("Policy") has been prepared to inform you about cookies and similar technologies stored on or read from your device when you visit the klaris.com.tr website ("Website"). The Policy is published under Law No. 6698 on the Protection of Personal Data ("KVKK"), the relevant secondary legislation and general internet practices by Mustafa Eren KOÇ (natural person), acting as data controller.

• Data controller: Mustafa Eren KOÇ (natural person).
• Website: klaris.com.tr
• Contact and requests: kvkk@klaris.com.tr
• Effective date: 5 October 2026.

This Policy is specific to the Website. The Website is an informational promotional page introducing the Klaris app and is published through a global content delivery network (Cloudflare CDN). Newsletter registration is open; email/consent records may also be processed outside Türkiye in Cloudflare Workers KV. Personal data processing within the Klaris mobile app (iOS and Android) is governed by a separate Privacy Policy / Privacy Notice and the relevant explicit consent statements, and app data are stored on servers in Türkiye; this Policy does not replace those documents.

A cookie is a small text file placed on your device (computer, phone, tablet) through your browser when you visit a website. Cookies allow the website you visit to recognise you (or, more precisely, your device or browser) again, remember your preferences and function correctly from a technical perspective. Cookies generally contain small amounts of data (for example, a session ID, a preference record or a randomly generated identifier).

In this Policy, "cookie" includes not only conventional HTTP cookies but also similar technologies serving the same purpose (browser local storage, localStorage / sessionStorage, pixel tags and similar identifiers). How Klaris actually uses, or does not use, these technologies is explained in the sections below.

Cookies can be classified in various ways:

• Session cookies: exist only during your browser session and are deleted when you close the browser.
• Persistent cookies: remain on your device for a predetermined period or until you delete them.
• First-party cookies: cookies placed directly by the klaris.com.tr domain.
• Third-party cookies: cookies placed by an external service used on the Website (for example, embedded content or an analytics service).

Klaris follows the principle of data minimisation. klaris.com.tr is an informational website introducing the Klaris app; cookie use is therefore kept to a minimum, and no cookies are used to track visitors or create profiles.

We use website-related technologies only for the following purposes:

• Secure and correct operation: ensuring that the Website operates securely and correctly from a technical perspective (basic infrastructure, security and abuse prevention).
• Anonymous statistics: understanding how the Website is used through aggregate, non-identifying statistics and improving its content. This measurement uses a cookieless analytics service (see below).

We do not use cookies for advertising, profiling, behavioural targeting or marketing. We do not track users for advertising purposes or share data with advertising networks.

klaris.com.tr does not place its own cookies to track your visit or create a profile. As of the effective date of this Policy, no preference (functional), analytics or advertising cookies are used on our website. For this reason, no cookie consent banner is displayed; there are no cookies requiring consent, so there is no preference to approve.

Strictly necessary cookies. The website is served through a global content delivery network (Cloudflare). This infrastructure may occasionally use technically essential (strictly necessary) cookies to ensure that the site operates securely and correctly (for example, abuse / bot protection). Such cookies are necessary to provide the service you request; they are not for tracking or advertising and are short-lived.

Cookieless analytics. Cloudflare Web Analytics is used to assess site usage and page performance. Page and referring-page addresses, browser/device type, country-level information and performance measurements are processed. According to Cloudflare, the measurement script does not use cookies or browser storage and does not track visitors across sites. Processing may also take place outside Türkiye in Cloudflare's infrastructure.

Session storage and example links. Browser session storage is used to retain your example profile and Identity selections, Atlas search and return position within the same tab. These records are limited to the session and are not saved to a user account. In example analysis links, the selected product and example profile information form part of the address.

The only third party we use to serve and measure the Website is Cloudflare: as a content delivery network (CDN), it serves the site quickly and securely; it also produces aggregate, non-identifying visitor statistics through cookieless Cloudflare Web Analytics. We do not use an advertising network, social media tracking pixel or behavioural targeting provider.

If embedded third-party content (such as a video or map) is used on the Website in future, these components may place their own cookies and be subject to their own privacy/cookie policies. In that event, this Policy will be updated and your consent obtained where necessary. As of the effective date of this Policy, there are no such third-party cookies on the Website.

About cross-border transfers. To manage app sign-in securely (Sign in with Apple on iOS, Sign in with Google on Android), send you push notifications and verify device integrity and subscriptions on Android, your limited technical identifiers may be transferred to secure servers abroad through Apple Inc. and Google LLC infrastructure. The sign-in provider transfer relies on the exception for the performance of a contract initiated by the user under KVKK Article 9, and the device token, notification title and short text are sent to the push notification infrastructure; this content contains no personal data. These transfers are specific to the Klaris mobile app and are not part of cookie use on the klaris.com.tr website; see the app's Privacy Policy / Privacy Notice for details.

To the extent that they are used, data processed through cookies are generally non-identifying or limited technical data (for example, a security identifier). Since our website has no cookies requiring consent (preference, analytics, advertising), the only type of cookie processed is strictly necessary cookies:

• Strictly necessary cookies: to the extent that they are technically necessary to provide the Website, they are processed within the framework of necessary/legitimate use that does not require explicit consent.
• Cookieless analytics: because Cloudflare Web Analytics does not use cookies, it does not store data in your browser; the measurements it produces are aggregate and non-identifying.

Cookie data are not used for purposes other than those stated in this Policy, sold or shared with third parties for advertising purposes.

Klaris does not place persistent first-party cookies on the website or keep data such as a cookie preference record (because there are no cookies requiring consent).

• Strictly necessary cookies: to the extent that the infrastructure (Cloudflare) uses them, they are generally session-based or short-lived, according to the relevant provider's policy.
• Cookieless analytics: Cloudflare Web Analytics leaves no cookies or local records in your browser.

You can always manually view and delete cookies through your browser.

Since our website does not use any cookies requiring consent, no cookie consent banner or category-based preference panel is displayed. Nevertheless, you always retain control over cookies.

Through browser settings. All modern browsers let you view, delete and block cookies. In your browser settings, you can reject all cookies, allow specific sites or delete existing cookies. Relevant help pages for common browsers are listed below:

• Google Chrome: Settings → Privacy and Security → Cookies and Other Site Data.
• Apple Safari (macOS/iOS): Settings/Preferences → Privacy → Manage Cookies.
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
• Microsoft Edge: Settings → Cookies and Site Permissions.
• Other browsers: the relevant browser's "Privacy" or "Cookies" help section.

Important: If you block all cookies through your browser, some parts of the Website may not work properly because strictly necessary cookies will also be blocked.

To the extent that your data processed through cookies constitute personal data under the KVKK, you have the following rights under Article 11 of the KVKK by applying to the data controller:

• Learning whether data are processed: to learn whether your personal data are processed.
• Requesting information: to request information if your personal data have been processed.
• Learning the purpose: to learn the purpose of processing your personal data and whether they are used in accordance with that purpose.
• Knowing the recipients: to know the third parties to whom your personal data are transferred within Türkiye or abroad.
• Correction: to request correction of your personal data if they have been processed incompletely or incorrectly.
• Deletion / destruction: to request deletion or destruction of your personal data under the conditions set out in the KVKK and relevant legislation.
• Notification: to request that correction, deletion and destruction be notified to third parties to whom the data have been transferred.
• Objection: to object to a result against you arising from the analysis of processed data exclusively through automated systems.
• Compensation for damage: to request compensation if you suffer damage due to unlawful processing of your personal data.

To exercise these rights, you can send your requests to kvkk@klaris.com.tr. Your applications will be concluded within the periods prescribed by law and, in any event, within 30 days at the latest.

Klaris may update this Cookie Policy in line with legislative changes, updates to the Website's functions or changes to the cookies we use. The current text is always published on klaris.com.tr, and the "Effective date" line is amended accordingly. If we begin using cookies that require consent in future, these cookies will be activated only with an appropriate cookie notice and your consent.

For any questions, requests or applications concerning this Cookie Policy, cookie use or your personal data:

• Data controller: Mustafa Eren KOÇ (natural person).
• Email / application channel: kvkk@klaris.com.tr
• Website: klaris.com.tr