Cookie Policy
This is an informational translation; the Turkish version prevails.
Last updated: 15.10.2026 · Version: 2026-10-15
This Cookie Policy explains the records stored on your device on the supomp.com website and in the Supomp Android application, the purposes and durations of these records and how you can manage your preferences. The data controller is İkra Hidro Pompa; our contact information and your rights are set out in the Privacy Notice (KVKK).
1. Cookies and similar technologies
Cookies are small text files that the sites you visit save to your browser. The local storage (localStorage) and session storage (sessionStorage) areas of browsers also store information on your device in a similar way. Our site's own code does not write HTTP cookies to your browser; our infrastructure provider Cloudflare may use its own cookies under the supomp.com domain for security purposes. We keep our required records in the local storage and session storage areas. Records in local storage remain for the period stated in the table below, while records in session storage remain until the tab or application is closed. Because the Android application displays the site inside the application, the same records are kept in the application's own storage area. In this policy, the term "cookie" covers all of these records.
2. Record types
- Strictly necessary: Records required to keep your session (member or anonymous) open, to preserve your cart, to remember your cookie preference and for pages to work correctly, as well as records created as a result of a choice or action by you, such as favorites, appearance and language preferences, notification registration, chat drafts and "helpful" votes. They are required for the service you request; they cannot be turned off.
- Functional: Your recently viewed products and your recent searches. They are on by default; you can turn them off from the cookie preferences or from the My Account › Settings section. When you turn them off, these records are deleted from your device and your account and new ones are not kept.
- Statistics (consent-based): Used to measure how the site and application are used and to find errors. Off by default; it works only if you give consent.
Favorites, cart and recently viewed products are synced with your account when you sign in and with your anonymous session when you shop without signing up; appearance preferences, recent searches and chat drafts stay only on your device.
3. Records we use
| Key | Purpose | Period | Type |
|---|---|---|---|
supomp-auth | Keeping your session open: member session or the anonymous session opened when shopping without signing up (session information and the security verifier used during sign-in) | Until you sign out or the anonymous session is deleted | Strictly necessary |
sp-anon-merge | When you sign in, a single-use matching key for transferring the cart you created without signing up to your account | Up to 7 days | Strictly necessary |
mp_cookie | Remembering your cookie preference and the date of the preference | 12 months; when the period expires, your preference is asked again | Strictly necessary |
sp-cart, sp-cart-sync | Storing your cart and syncing it with your account or anonymous session | For members, until you sign out; for guests, until you delete it | Strictly necessary |
sp:cat-root, sp:scroll:v1, sp:reload | Preserving the category selection and the page position when returning; reloading the page once when the site is updated | When the tab or application is closed | Strictly necessary |
sp-ship-city | Carrying the delivery province you select in the cart over to the checkout step; the service area check for services such as installation that are provided only in certain provinces is performed based on this province | When the tab or application is closed | Strictly necessary |
sp-favs | Storing your favorites | Until you sign out | Strictly necessary |
mp_theme, mp_view | The light/dark theme and list/grid view you have selected | Until you delete it | Strictly necessary |
sp-lang | The language you select in the language picker (Turkish or English); so that the site opens in this language on your subsequent visits. If you are signed in, it is synced with the language preference in your account. | Until you delete it | Strictly necessary |
sp-cc | The country code detected in order to decide in which language and currency the site will open; only the country code is kept, your location and IP address are not stored. Created only while the English view or price display in US dollars is live. | Up to 7 days | Strictly necessary |
sp-flags | A cache of the site's language and currency release settings (whether the English view and price display in US dollars are enabled); so that the page opens with the correct language and currency without waiting | Until you delete it | Strictly necessary |
sp-entry | The information that the first page has been opened in this tab; so that language redirection is performed only on the first page of the tab | When the tab or application is closed | Strictly necessary |
sp-chat-draft:*, sp-chat-pin:*, sp-chat-recent-emoji | The draft you type in chat, the message you pin and the emojis you most recently used | Deleted when you sign out | Strictly necessary |
sp-chat-ai-cart | One-time syncing of the products that İkra AI has added to your cart in chat at your request with the cart on this device (up to 200 records) | Until you delete it | Strictly necessary |
sp_vote | Preventing a second "helpful" vote on the same review when you vote; created only when you vote | Until you delete it | Strictly necessary |
sp-push-* (Android application only) | Notification registration and preferences: a random identifier for this device, the most recently saved notification token, the information that you have turned off notifications and the settings of the notification channels. The identifier and the token are created only when you grant notification permission. | Until you sign out or clear the application data | Strictly necessary (notification service you requested) |
| Firebase installation ID and notification token (Android application only) | Delivery of notifications to your device when you grant notification permission | Until you sign out, turn off notifications or clear the application data | Strictly necessary (notification service you requested) |
sp-rv | Displaying the last 16 products you viewed | Until you delete or turn it off | Functional |
sp:recent-q | Displaying your last 8 searches | Until you clear them from the search screen, turn it off or delete them | Functional |
sp-geo-used | The information that you have previously used "Check by my location" (the location itself is not stored); so that the service area check in the application can be performed without being asked again. Not created if you have turned off functional records. | Until you delete it or deny the location permission | Functional |
sp_did | A random identifier specific to your device for statistical measurement | Up to 13 months; deleted immediately when you withdraw your consent | Statistics (consent-based) |
sp_sid, sp_sat | Statistics session (renewed if no action is taken for 30 minutes) | When the tab or application is closed | Statistics (consent-based) |
sp_utm | Campaign tags (e.g., utm_source / utm_medium / utm_campaign added to the links in our social media posts) and the source of the ad click (the click ID is not stored) | When the tab or application is closed | Statistics (consent-based) |
sp_ref | Recording the site that referred you only once in the session | When the tab or application is closed | Statistics (consent-based) |
sp_card_<order no> | Sending the purchase record once after card payment | When the tab or application is closed | Statistics (consent-based) |
On the devices of our employees who use the admin panel, panel preferences and the site's language / country test mode setting are also kept (supomp-admin-*, sp-admin-chat-*, spa:reload, sp-chat-prefill:*, sp-qa); these records are not created on our customers' devices.
4. Statistical measurement
If you consent to statistical measurement, the actions you take on the site and in the application are recorded on our server. These records contain: the random identifier specific to your device, the session identifier, the addresses of the pages you visit (the query part of the address is not recorded), the address of the site that referred you to the site, the products and categories you view, your search terms, the cart, checkout and order steps, interactions such as clicks and shares, campaign tags and the source of the ad click (for example Google or Facebook; the click ID itself is not recorded), device type, operating system and browser name, site errors, a salted hash of your IP address and, if you are signed in, your account ID. In this case, the last activity time in your account is also updated at most every 5 minutes.
- The records are seen only by our fully authorized administrator. If you are signed in, the records are associated with your account and the administrator may also view them on a per-person or per-device basis in order to examine site usage and find problems and errors in the sales steps.
- The records are kept for 13 months and are automatically deleted when the period expires.
- The records are not used for advertising or automated decision-making and are not shared with third parties.
- If you do not consent, no statistics or error records are kept and no statistics identifiers are created.
Not consenting to statistical measurement or withdrawing your consent does not affect the keeping of your cart, order, quote, support chat, favorite, alarm and account actions on our server as service records. No cookies are written to your browser and no identifier is created on your device for service records; these records do not contain device, session, IP, page or referrer information.
The consent statement regarding this measurement is included in the Explicit Consent Statement.
4.1 Advertising measurement (Google Ads)
If you arrive from a Google ad, the ad click identifier in the address (gclid, gbraid or wbraid) is stored on your device (local storage, “sp_gclid”) for at most 90 days — only if you have enabled Advertising measurement in the cookie preferences. If, within that period, you place an order, request a quote, send a contact message, start a support chat, tap a phone link, add a product to the cart or sign up, the click identifier, the type of action, the order or quote number, the date and the amount are recorded on our server and transferred to Google LLC (USA) for Google Ads conversion measurement. Your e-mail address, phone number or name are not transferred; no profile is built for ad delivery and no remarketing list is kept. The click identifier on the server is deleted after 90 days; conversion records are kept for at most 13 months. Advertising measurement is off by default. You can turn it off at any time in the cookie preferences; when you do, the identifier on your device and any records not yet transferred are deleted, while records already transferred remain with Google.
5. Third-party content
| Service | When it is loaded | What happens |
|---|---|---|
| PayTR payment form | At the card payment step | The payment form and its helper script are loaded from PayTR servers; PayTR receives your IP address and browser information and may use its own cookies. |
| Cloudflare | When site pages are opened | It may use its own cookies on the supomp.com domain for security and the prevention of abuse. |
| Google Maps | When you tap the "Open in map" link on the contact page or in chat | The map opens in Google Maps; Google receives your IP address and browser information and may use its own cookies. No connection is made to Google unless you tap. |
| YouTube videos (Google) | When you tap the "Play" button of a video on product pages or on the "Videos and images" page | The video is loaded from Google servers in YouTube's privacy-enhanced mode (youtube-nocookie.com); Google receives your IP address and browser information and may keep its own records on your device during playback. No connection is made to Google unless you tap; the thumbnails of the videos are served from our own server. |
The cookies and records of these services are subject to the policy of the relevant provider. No advertising or marketing pixel, Google Analytics, Google Tag Manager, Meta Pixel or any other third-party tracking tool is used on the site; no advertising ID is used in the Android app.
6. Legal basis
Mandatory and functional records are based on the provision of the service you request and the performance of the contract (KVKK art. 5/2-c) and on our legitimate interest in the safe and correct operation of the site (KVKK art. 5/2-f). Statistics records are based solely on your explicit consent (KVKK art. 5/1). Third-party content such as maps and YouTube videos is loaded only when you tap the relevant link or the "Play" button. The payment form (PayTR) and Cloudflare security cookies are necessary for the payment service you request and the security of the site (KVKK art. 5/2-c and f). This policy has been prepared taking into account the Guide on Cookie Practices of the Personal Data Protection Authority (July 2025); we apply the same rules as cookies to local storage and session storage records as well.
7. How do you manage your preferences?
- In the notice that appears when you first open the site, you can choose one of the "Accept", "Reject" or "Preferences" options; these options are presented equally. Statistics measurement remains off unless you make a choice.
- You can change your preference at any time from the "Cookie preferences" link at the bottom of the page or from the "Cookie preferences" row under My Account › Settings › Legal. When you withdraw statistics consent, record-keeping stops immediately, statistics identifiers on your device are deleted, and statistics records belonging to this device and (if you are logged in) to your account are deleted or anonymized within 30 days at the latest.
- Your preference is stored for 12 months; when this period expires, you will be asked again.
- You can delete all records on your device by clearing site data in your browser settings, clearing the app data on Android, or uninstalling the app. In this case your session is closed, your link with your anonymous session is broken, and your guest cart is deleted from your device.
- When you log out, the cart, favorites and chat drafts are deleted from your device; recently viewed products, recent searches, appearance and language preferences, and, if you have consented, the statistics identifier remain on your device.
8. Changes
When the records we use change, we update this page; the date and version at the top of the page show the most recent update. If we add a new type of record that depends on your consent, we will ask for your consent again.