Last Updated: 17 April 2026
Effective Date: 17 April 2026
This Cookie Policy has been prepared by CarbonSmart Teknoloji ve Danışmanlık A.Ş. ("CarbonSmart") to inform visitors and users about the cookies and similar tracking technologies used on the carbonsmart.io and app.carbonsmart.io domains and all associated subdomains (the "Site"). This Policy has been prepared in accordance with Law No. 6698 on the Protection of Personal Data ("KVKK"), the regulations of the Information and Communication Technologies Authority, the Regulation on the Protection of Personal Data in the Electronic Communications Sector, and the principles of the European Union e-Privacy Directive.
1. WHAT IS A COOKIE?
1.1. Cookies are small data files that websites place on a visitor's device (computer, phone, tablet) in the form of small text files and that can be read when the visitor opens the site again.
1.2. Cookies are stored in your browser's memory or on your hard drive on either a temporary (session cookies) or persistent (persistent cookies) basis. Session cookies are deleted when the browser is closed; persistent cookies remain on the device for a defined period.
1.3. In addition to cookies, CarbonSmart may also use similar technologies such as pixels, local storage (localStorage/sessionStorage), IndexedDB, SDKs, and tag managers; this Policy covers these technologies as well.
2. WHY ARE COOKIES USED?
2.1. CarbonSmart uses cookies for the following primary purposes:
(a) To ensure that the Platform and the Site operate securely, stably, and correctly.
(b) To manage End User sessions, recognize the user, and avoid requiring re-login on every page.
(c) To remember language and interface preferences.
(d) To produce aggregate statistics on Site and Platform usage and to detect errors and performance issues.
(e) To target B2B marketing campaigns and measure their effectiveness.
(f) To comply with legal obligations (for example, security event records).
3. CATEGORIES OF COOKIES
CarbonSmart uses cookies in the following four categories.
3.1. Strictly Necessary Cookies
These are essential for the Site and the Platform to perform their core functions. Without these cookies, session management, authentication, and security checks cannot be carried out. Their legal basis is KVKK Art. 5/2-c (performance of a contract) and Art. 5/2-f (legitimate interest), and they are not subject to explicit consent.
3.2. Functionality Cookies
These remember the user's chosen language, time zone, preferred module layout, and similar personal preferences. The purpose is to improve the user experience.
3.3. Analytics and Performance Cookies
These collect information such as the number of visits, click paths, error rates, and page load times in order to understand how the Site and the Platform are used. CarbonSmart uses Plausible Analytics as its primary analytics tool, which keeps personal data to a minimum; Plausible does not generate cookie-based personal identifiers and anonymizes IP addresses. Sentry technology is used as a secondary tool for error tracking.
3.4. Marketing (Advertising) Cookies
These are used to target visitors with content related to CarbonSmart's products and to measure the effectiveness of B2B campaigns. In this category, CarbonSmart primarily uses LinkedIn Insight Tag, HubSpot marketing automation cookies, and Google Ads remarketing cookies. These cookies are activated only with the visitor's explicit consent.
4. LIST OF COOKIES USED
The principal cookies used by CarbonSmart are listed below, including their name, purpose, type, owner, and duration. The list may change as the product is updated; the current list can be viewed via the Cookie Settings panel.
4.1. Strictly Necessary Cookies
Cookie name: cs_session
Purpose: Session management and maintaining authentication state.
Type: Session cookie.
Owner: First party (CarbonSmart).
Duration: Deleted when the browser is closed.
Cookie name: cs_auth_token
Purpose: Session renewal after secure login (refresh token reference).
Type: Persistent cookie.
Owner: First party.
Duration: 14 days.
Cookie name: cs_csrf
Purpose: Protection against cross-site request forgery (CSRF) attacks.
Type: Session cookie.
Owner: First party.
Duration: For the duration of the session.
Cookie name: cs_consent
Purpose: To remember your cookie consent preferences.
Type: Persistent cookie.
Owner: First party.
Duration: 12 months.
Cookie name: cs_lb
Purpose: Load balancing; routing requests to the same application server.
Type: Session cookie.
Owner: First party (AWS ALB).
Duration: For the duration of the session.
4.2. Functionality Cookies
Cookie name: cs_lang
Purpose: To remember the user's preferred interface language (TR/EN).
Type: Persistent cookie.
Owner: First party.
Duration: 12 months.
Cookie name: cs_tz
Purpose: To remember the user's time zone and display correct date/time in reports.
Type: Persistent cookie.
Owner: First party.
Duration: 12 months.
Cookie name: cs_ui_pref
Purpose: To store preferences such as dashboard layout, theme, and frequently used module shortcuts.
Type: Persistent cookie.
Owner: First party.
Duration: 12 months.
4.3. Analytics Cookies
Cookie name: plausible_ignore (may be set only to exclude internal users' visits from analytics)
Purpose: Excluding the visits of CarbonSmart's internal team from analytics.
Type: Persistent cookie.
Owner: First party (set by the Plausible library).
Duration: 5 years.
Note: Plausible Analytics does not use cookies that identify visitors; the data collected is anonymous, aggregated, and hosted on EU-based infrastructure.
Cookie name: sentry-session
Purpose: Error and performance monitoring; correlating errors within the same session.
Type: Session cookie (localStorage may also be used).
Owner: Third party (Functional Software, Inc. – Sentry).
Duration: For the duration of the session.
4.4. Marketing Cookies (Activated Only Upon Consent)
Cookie name: li_sugr, bcookie, bscookie, lidc, UserMatchHistory
Purpose: B2B advertising targeting, conversion measurement, and professional audience analysis via the LinkedIn Insight Tag.
Type: Persistent cookie.
Owner: Third party (LinkedIn Ireland Unlimited Company).
Duration: Between 30 days and 24 months (depending on cookie type).
Cookie name: __hstc, hubspotutk, __hssc, __hssrc
Purpose: Measuring visitor and prospect sessions via HubSpot, associating them with form submissions, and marketing automation.
Type: Mix of session and persistent cookies.
Owner: Third party (HubSpot, Inc.).
Duration: Session up to 13 months.
Cookie name: _gcl_au, IDE, test_cookie
Purpose: Measuring advertising conversions and conducting remarketing via Google Ads.
Type: Persistent cookie.
Owner: Third party (Google Ireland Ltd.).
Duration: Between 1 day and 13 months.
5. THIRD-PARTY COOKIE PROVIDERS
5.1. As stated above, CarbonSmart uses cookies from third-party service providers such as Plausible, Sentry, LinkedIn, HubSpot, and Google. These providers are subject to their own privacy policies.
5.2. The current privacy policies of these third-party providers can be accessed via the following links: Plausible (plausible.io/privacy), Sentry (sentry.io/privacy), LinkedIn (linkedin.com/legal/privacy-policy), HubSpot (hubspot.com/data-privacy), and Google (policies.google.com/privacy).
5.3. No identifying information about you is transmitted to CarbonSmart through third-party cookies; CarbonSmart does not bear legal responsibility for the data processing policies of these providers.
6. CONSENT MANAGEMENT
6.1. CarbonSmart presents a cookie banner to users on their first visit to the Site. Through the banner, the user can choose to use only strictly necessary cookies, accept all cookies, or make separate selections by category (functionality, analytics, marketing).
6.2. Strictly necessary cookies are required for the operation of the Platform; they are not subject to consent and cannot be disabled.
6.3. Users may change their preferences at any time via the "Cookie Settings" link available on the Site. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
6.4. To the extent feasible, marketing and analytics cookies are not activated until the user's explicit consent is obtained. The consent decision is stored in the cs_consent cookie for 12 months; once that period elapses, consent is requested from the user again.
7. MANAGING COOKIES VIA BROWSER SETTINGS
7.1. Users may also manage their cookie settings at the browser level. The instructions below are general; settings may vary depending on the browser version.
7.1.1. Google Chrome: Settings > Privacy and security > Cookies and other site data.
7.1.2. Apple Safari: Preferences > Privacy > Cookies and website data.
7.1.3. Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data.
7.1.4. Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data.
7.2. Disabling cookies entirely at the browser level may cause certain Platform features to malfunction.
7.3. To disable third-party advertising networks, the services at youronlinechoices.eu and optout.aboutads.info may be used.
8. DATA SUBJECT RIGHTS RELATED TO THIS POLICY
8.1. Data obtained through cookies is processed for the purposes set out in Sections 3 and 5 of the Privacy Policy and on the legal grounds set out in KVKK Art. 5. Data subjects may apply to info@carbonsmart.io to exercise their rights under KVKK Art. 11.
9. CHANGES TO THIS POLICY
9.1. CarbonSmart may update this Policy in line with technological, operational, or legal developments. The current version is published at carbonsmart.io/legal-cookies. Material changes are announced via a banner on the Site or a Platform notification.
10. CONTACT
10.1. For questions regarding the use of cookies, consent management, and this Policy, please use the following contact details:
Company name: CarbonSmart Teknoloji ve Danışmanlık A.Ş.
Address: Sanayi Mahallesi, Teknopark Bulvarı, Teknopark İstanbul, Pendik/İstanbul 34906, Türkiye
Email: info@carbonsmart.io
