Cookie Policy
Which cookies we place, why, how long they live, and how to turn any of them off. Everything below is the real list from our codebase — not a template.
What this policy covers
This policy explains the cookies and similar storage we place in your browser on otowoto.com and its sub-addresses (customer dashboard, admin panel, downloadable plugins). The data controller is otowoto; reach us any time at [email protected].
The otowoto widget our customers place on their own sites is covered in its own section below — the widget uses no cookies at all.
Why we process your personal data is set out in the Privacy Policy. This document is part of our disclosure duty under the GDPR, the CCPA and Türkiye’s KVKK (law 6698).
What is a cookie? What is local storage?
A cookie is a small text file your browser stores and sends back to the server on every request. That is how a session stays open.
Local storage stays in your browser and is never sent on its own. We keep preferences there: theme, language, the last tab you opened. It is technically not a cookie, but the law treats both the same way — so we list both with the same detail.
First party means we placed it. Third party means it belongs to another company (a measurement or payment provider).
Which cookies and records we use
The list below comes from a sweep of the whole codebase and is updated with every release. Anything tagged “awaiting consent” is not loaded yet — it runs only once you allow that category.
Essential cookies
This category rests on legitimate interest and performance of a contract, so it needs no consent and cannot be switched off. You can still see exactly what we store.
Analytics cookies
Turning this on loads Google Analytics 4 and Microsoft Clarity. IP addresses are truncated, ad matching stays off, and we never share the data with ad networks. Both services process data on servers abroad; your consent covers that transfer.
While this is off, none of that code reaches the page.
Marketing and partners
Partner tracking: our partners earn a commission on sign-ups that come from their links. Leave this off and we store no source — nothing changes for you, the commission simply is not credited.
Ad measurement: we run no ads today and no ad tag is loaded. If that changes, it will run only while this category is on, and it will be listed here first.
Who else touches this data
A handful of companies process data on our behalf. Each is bound by contract, may use the data only as we instruct, and none of them places advertising cookies on our site.
- Cloudflare — delivery and security in front of otowoto.com. This is the provider that may set the short-lived bot-protection cookie listed above; it sets no other cookie for us.
- Hetzner — the servers behind our own traffic counting. Germany and Finland. Sets no cookies.
- Amazon Web Services (SES) — sends the e-mails you receive from us: sign-up, alerts, invoices. Sets no cookies.
- Lemon Squeezy — takes payment and issues the invoice. Sets its own cookies, and only on the checkout page.
- Google (Analytics 4) and Microsoft (Clarity) — measurement, and only if you allow analytics cookies.
Some of them process data outside your country. Those transfers rest on standard contractual clauses, and for the consent-based tools, on your consent — which you can withdraw at any time.
What the widget stores for your visitors
The otowoto widget sets no cookie and does not follow visitors between sites. It uses no ad network, no fingerprinting and no third-party id.
On a customer’s site the widget keeps exactly two records, in that site’s own local storage:
- otowoto_dismissed_<site key> — the moment you closed the widget, so it stays closed for the period the site owner set (24 hours by default).
- otowoto_tt_<site key> — the moment you closed the tooltip, kept the same way.
On the measurement side, opens and plays reach our own server without cookies, carrying nothing beyond the page address and the event name.
If the customer’s site runs its own Google Analytics or Meta Pixel, the widget reports the same event to that tag as well. otowoto does not install those tags; they belong to the site owner and to that site’s own cookie notice.
How to change your choice
The “Cookie preferences” link at the foot of every page reopens the preference window. You can withdraw consent at any time; withdrawal does not affect processing that already happened lawfully.
You can also delete or block all cookies in your browser. Blocking the essential ones makes signing in impossible.
- Chrome: Settings → Privacy and security → Third-party cookies
- Safari: Settings → Privacy → Manage cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Edge: Settings → Cookies and site permissions
Your rights
Under the GDPR and KVKK article 11 you may ask whether we process data about you, access it, have it corrected or erased, object to the processing, and receive your data in a portable form.
Write to [email protected] and we answer within 30 days. Include the consent id from the preference window and we can find your record straight away.
If you live in California: we do not sell or share your personal information.
Changes
When we add a tool we update this list and raise the policy version. A new version asks for your consent again — an old consent never covers a new tool.
Current version: 1.0 — 30 July 2026.