Cookie Policy
This Cookie Policy explains which cookies are actually used on the online dog-grooming course website https://nataliakangotan.com, operated by GROOMIMI EVCİL HAYVAN ÜRÜNLERİ VE BAKIMI İTHALAT İHRACAT TİCARET LİMİTED ŞİRKETİ, what each of them does, how long it is stored and how you can manage them from your browser.
| Service provider | GROOMIMI EVCİL HAYVAN ÜRÜNLERİ VE BAKIMI İTHALAT İHRACAT TİCARET LİMİTED ŞİRKETİ |
|---|---|
| Website | https://nataliakangotan.com |
| Publication date | 6 September 2026 |
| Document status | Translation of the Turkish original • cookie policy • version 1.0 |
1. What is a cookie?
A cookie is a small text file that a website you visit stores in your browser. The next time you send a request to the same site, your browser sends that file back. This is how a site can tell that two separate page requests belong to the same visitor. A cookie is not a program: it does not run on its own, it cannot read files on your device and it cannot carry a virus. It contains only the short value the site wrote into it.
Cookies fall into two groups. First-party cookies are set by the domain you are visiting (nataliakangotan.com). Third-party cookies are set by another domain that supplies content embedded in the page; on this site such content exists in two places only: the YouTube player and the PayTR payment frame. By duration, a cookie is either a session cookie (deleted when the browser closes) or a persistent cookie (kept on the device until the stated period expires).
A related technology is the browser’s local storage (localStorage). On this site it is used in exactly one place: the video quality you choose in the lesson player (auto, 1080p and so on) is saved in your browser so that the next lesson plays at the same quality. That value is never sent to the server, is never attached to a request, and is deleted when you clear your browser data.
2. Cookies actually used on this site
The table below lists every cookie the site uses today. Any cookie that is not on this list is not set by this site.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| nataliakangotan_session | Session cookie. Links your browser to the session record held on the server. The courses you put in the basket, your identity if you are signed in, the form security key and one-off notification messages are all kept in that record. The cookie itself carries only an encrypted session identifier; all of the data lives in the database on the server. | First party, strictly necessary (technical). It is HttpOnly, so scripts on the page cannot read it, and SameSite=Lax, so it is not sent with requests coming from other sites. | 120 minutes. The clock restarts on every request; the cookie becomes invalid after 120 minutes of inactivity. |
| XSRF-TOKEN | Protection against cross-site request forgery (CSRF). It proves that a form or JavaScript request was genuinely sent from this site. Registration, sign-in, adding to the basket, placing an order and starting a payment do not work without this check. | First party, strictly necessary (security). It must be readable by scripts in the browser so they can attach it to a request, so it is not HttpOnly; it holds a single-use verification value, not personal data. | 120 minutes (the same as the session cookie). |
| remember_web_<signature> | If you tick the «Remember me» box on the sign-in screen, this cookie lets the site recognise you and sign you in automatically after your session has expired. If you leave the box unticked, the cookie is never created. The signature at the end of the name is a fixed character string generated by the application. | First party, functional; created only at your explicit request. It is encrypted and HttpOnly. | About 400 days (576,000 minutes), or until you sign out. |
| Cookies on the www.youtube.com and google.com domains (Google) | Operation of the embedded YouTube preview player, together with Google’s own playback-preference, measurement and abuse-prevention purposes. They are loaded only when you click the play button of a preview video; see section 5. | Third party, not strictly necessary (optional). | Determined by Google; we can neither control nor change them. |
| Cookies on the www.paytr.com domain (PayTR) | Operation of the PayTR payment frame and the 3-D Secure check that open at the payment step, and the security of the transaction itself. They are loaded on the payment page only; see section 6. | Third party, strictly necessary for the payment service to be provided. | Determined by PayTR; we can neither control nor change them. |
No separate cookie is used for the language. The language you choose is carried by the /tr, /ru, /en prefix in the address bar and kept in the session record on the server; no additional language cookie is written.
No cookie is used for advertising, retargeting, social-media tracking or cross-device profiling.
3. Strictly necessary cookies, optional cookies and consent
Under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the Personal Data Protection Authority’s guidance on cookie practices, cookies fall into two groups as regards consent:
- Strictly necessary cookies. These are technically required for the site to deliver the service you asked for, and no explicit consent is required for them. The
nataliakangotan_sessionandXSRF-TOKENcookies in the table, together with the PayTR cookies at the payment step, belong to this group: without them you cannot sign in, the basket cannot be kept and payment cannot be completed. - Optional cookies. These are not required to deliver the service and serve convenience, measurement or advertising purposes; they may be placed only with your explicit consent. The only such set on this site is the YouTube/Google cookies, which load when you start a preview video.
The remember_web_<signature> cookie is a separate case: it is not technically necessary, but it is created only if you ask for it by ticking the «Remember me» box on the sign-in screen. Leaving the box empty means the cookie is never written.
Because only strictly necessary cookies are placed by default today, and the single optional group is triggered only when you click a button, no cookie consent banner is displayed on the site. If measurement or advertising cookies are introduced, this policy will first be updated and a mechanism for obtaining explicit consent will be added, as described in section 4.
4. No analytics or advertising cookies are used
The site sets no analytics, measurement or advertising cookie today. No tracking code such as Google Analytics, Google Tag Manager, Meta (Facebook) Pixel or Yandex Metrica has been added to the pages; visitors are not given an advertising identifier, no behavioural profile is built and no data is transferred to third parties for such purposes.
The site’s administration panel contains a «Head scripts / analytics» field that can inject scripts into the <head> section of the pages. That field is empty today, and while it is empty no additional script is printed into the pages. Should the site owner later decide to add a measurement or advertising code there, this policy will be updated with the name, provider, purpose and duration of the cookies concerned before the code goes live, and a consent mechanism will be introduced so that those cookies load only after explicit consent has been given.
5. The embedded YouTube preview player
The preview videos on the home page, the course pages and the gallery are not hosted on our own server but on YouTube. They are shown inside a frame (iframe) embedded in the page.
Loading condition. When a page opens, the player’s address is empty and no request whatsoever is sent to YouTube. The player is loaded from https://www.youtube.com/embed/... only when you click a play control — the preview button on the home page or a course page, or a video item in the gallery. In other words, the connection to YouTube is established solely by an action you take.
From the moment the player loads, Google may place its own cookies and local-storage entries in your browser; in addition, your IP address, browser information and the video you are watching are transmitted to Google. If you are signed in to a Google account, that information may be associated with your account. These cookies are placed by Google for its own purposes and under its own responsibility; we cannot determine, read or delete their names, durations or contents. For Google’s cookie practices see https://policies.google.com/technologies/cookies.
Watching a preview video is not necessary in order to access the courses. If you never click a play control, no YouTube or Google cookie is created on this site.
6. The PayTR frame at the payment step
Payment does not take place on our own pages but on the infrastructure of the payment institution PayTR. On the payment page, PayTR’s secure payment form opens inside a frame (iframe), and the helper script that adjusts the height of that frame during the 3-D Secure step is loaded from www.paytr.com. Your card number, expiry date and CVV/CVC are at no point transmitted to our server and are not stored by us.
When that frame opens, PayTR may place cookies on its own domain to secure the transaction and the 3-D Secure verification. Those cookies are strictly necessary for the payment service to be provided; if they are blocked, the payment step cannot be completed. They are placed by PayTR under its own responsibility and cannot be read by us. For PayTR’s cookie and privacy practices see [TO BE COMPLETED: link to PayTR’s own cookie/privacy policy].
No PayTR content is loaded on any page other than the payment page.
7. Managing cookies in your browser, and what blocking them breaks
You can manage cookies entirely through your browser. In almost every current browser, usually under the Privacy and security section of the Settings menu, you can:
- view the cookies already stored and delete them individually or all at once;
- block third-party cookies only;
- block all cookies, or allow and block them per site;
- have cookies deleted automatically each time the browser is closed;
- use a private browsing window so that cookies are deleted when the window closes.
What blocking breaks. On this site the strictly necessary cookies are not a convenience but a condition of operation:
- if
nataliakangotan_sessionis blocked you cannot sign in to your account; even if you do sign in, your session drops on every page refresh, your basket empties and the lessons in your personal area remain out of reach; - if
XSRF-TOKENis blocked, the forms you submit fail the security check and you receive a «Page Expired» error (HTTP 419); registration, sign-in and order placement cannot be completed; - if you block third-party cookies entirely at the payment step, the PayTR frame and the 3-D Secure check may not work and the payment may be interrupted.
Deleting cookies does not cost you the courses you have bought: access is tied to your account, not to a cookie. After deleting them you simply need to sign in again. Session data is also held on the server, and expired records are cleared regularly.
8. Personal data processed through cookies, and your rights
The data processed through strictly necessary cookies is technical data that keeps your session alive and verifies the security of your requests (an encrypted session identifier and a security key). It is not used for marketing, is not sold and is not combined with other data to build a profile. The processing relies on the KVKK grounds of performance of the service and legitimate interest; for optional cookies it relies on your explicit consent.
Under Article 11 of the KVKK you have the right to learn whether your personal data is being processed, to request information about such processing, to ask for it to be corrected or erased, and to object to the processing. You may send your requests to the e-mail address or postal address given in the service provider details below. For detailed explanations about the processing of personal data, see the Privacy Policy page of this site.
9. Changes to this policy
This policy reflects the real state of the cookies used on the site. It will be updated whenever a new cookie is added, the purpose or duration of an existing cookie changes, measurement or advertising codes are switched on, or a new third-party service is embedded in the pages.
The current text is always published at https://nataliakangotan.com/en/cookies (the Turkish and Russian versions at /tr/cookies and /ru/cookies) and is linked from the site footer. At each update the publication date and version number in the table above are changed; no separate notice is sent to visitors, so we recommend checking this page from time to time. If a change concerns optional cookies that require consent, the new cookies will not be loaded before your consent has been obtained.
10. Service provider details
For any question, request or complaint about cookies you may contact us using the details below.
| Company name | GROOMIMI EVCİL HAYVAN ÜRÜNLERİ VE BAKIMI İTHALAT İHRACAT TİCARET LİMİTED ŞİRKETİ |
|---|---|
| Tax office | Alanya Tax Office (Alanya Vergi Dairesi) |
| Tax number | 4111017047 |
| Address | Şekerhane Mah., Kaptanoğlu Sk., Alkan Apt. No: 9/A, Alanya, Antalya, Türkiye |
| Phone | +90 552 485 5884 |
| [email protected] | |
| Website | https://nataliakangotan.com |