Cookie Policy
Explains which cookies are used on the www.enafeedback.com website and in the EnaFeedback app, and why.
Effective date: · Last updated:
This English version is a translation provided for convenience. In case of conflict the Turkish version prevails.
This Cookie Policy explains how cookies are used on the www.enafeedback.com website, operated by ENA Innovation Sağlık ve Yazılım Teknolojileri San. Tic. A.Ş. ("ENA Innovation"), and in the EnaFeedback app used by organizations. In short: our website does not use advertising, marketing or tracking cookies. The EnaFeedback app uses only cookies that are strictly necessary for the service to work.
1. What is a cookie?
Cookies are small text files saved in your browser when you visit a website. They are used to keep you signed in, remember your language or keep a site secure. Similar technologies, such as the browser's local storage, are also treated as "cookies" in this policy.
2. Our website (www.enafeedback.com)
2.1. Use of cookies
As of the effective date of this policy, our website does not place any cookies in your browser. Language is chosen through the address (Turkish pages at the root, English pages under /en), and no cookie is used for language preference.
If a cookie strictly necessary for the security or operation of the site is needed in the future, it will be listed on this page with its name, purpose and duration. If we ever use a cookie that is not strictly necessary, we will ask for your explicit consent before using it.
2.2. Cookieless visit statistics
We use Vercel Web Analytics and Vercel Speed Insights to understand how the site is used and how fast it loads. These tools:
- do not use cookies or similar persistent identifiers;
- do not track visitors across different websites;
- give us only aggregate data such as page views, country, device and browser type, and page load performance.
We do not use this data for advertising or profiling. See the Privacy Policy for details.
2.3. Cookie consent banner
Because our website does not use non-essential cookies, it does not show a cookie consent banner.
3. The EnaFeedback app (organizations' environments)
Each organization using EnaFeedback has its own environment running at its own address. These environments use first-party, strictly necessary cookies so that the visitor, staff and admin interfaces work. These cookies are not used for advertising or tracking, and no third-party analytics or marketing tools are used.
Cookies that carry session or identity credentials are set as httpOnly, which means scripts on the page cannot read them.
| Cookie | Purpose | Duration | httpOnly |
|---|---|---|---|
ena_loc_ctx | Keeps the location session opened by a QR code, NFC tag or display, so feedback is recorded for the right location | Browser session (at most 30 minutes on the server) | Yes |
ena_sec_ctx | Keeps a field staff member's secure session | 12 hours | Yes |
ef_display | Recognizes a live display (kiosk) device; the server stores only a hash of the value | 400 days | Yes |
ena_visitor_locale | Remembers the language chosen in the visitor interface | 1 year | No |
ena_visitor_cover | Keeps the cover image shown during a visitor session consistent | [Duration to be confirmed] | No |
ena_admin_locale | Remembers the language chosen in the admin panel | 1 year | No |
Logto session cookie (logto_…) | Keeps administrator users signed in | Per identity configuration [to be confirmed] | Yes |
ena_post_login_redirect, ena_pending_invitation_id | Return you to the right page during sign-in and invitation acceptance | 10 minutes | Yes |
ena_identity_flash | Shows a one-time message during the sign-in flow | 3 minutes | No |
Administrators are sent to the hosted sign-in pages of our identity provider, Logto. Those pages may use their own cookies needed for signing in.
3.1. Content added by organizations
Organizations can add third-party video embeds, such as YouTube or Vimeo, to EnaFeedback content pages. When such content loads, the provider may set its own cookies, and your IP address and browser information are sent to that provider. The organization concerned decides whether to add such content.
3.2. Responsibility
The organization using an EnaFeedback environment is the data controller for personal data processed in it. ENA Innovation acts as data processor for these environments.
4. Legal basis
Strictly necessary cookies are needed to provide the service you request. Personal data processed through these cookies is processed under Article 5(2)(c) (entering into or performing a contract) and Article 5(2)(f) (legitimate interest) of Turkish Law No. 6698 on the Protection of Personal Data; explicit consent is not required for these cookies.
5. How to control cookies
You can view, delete or block cookies in your browser settings. Common browsers:
- Google Chrome: Settings → Privacy and security → Third-party cookies / Site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions
If you block the strictly necessary cookies in the EnaFeedback app, features such as sending feedback, staff sign-in or the admin panel may not work.
6. Changes and contact
We may update this policy; the current version is published on this page. For questions, write to support@enainnovation.com.