ENA Innovation — Legal Documents
Cookie Policy
Contents
1. What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work, to improve user experience, and to provide information to website operators.
EnaSpace and related services (enaspace.com, portal.enaspace.com, enagate.com, www.enafeedback.com) use cookies and similar technologies (such as local storage tokens and session storage) for the purposes described in this policy.
By using the Services, you acknowledge the use of strictly necessary cookies. Preference cookies may be deleted at any time through your browser settings. On www.enafeedback.com, an informational cookie notice explains how cookies are used; dismissing it is optional and does not affect site functionality. We do not use advertising or commercial tracking cookies on any of our properties.
Applicable law: This Policy is prepared in compliance with Turkish Law No. 6698 (KVKK) and, for users located in the EU/EEA, with the EU ePrivacy Directive (2002/58/EC as amended) and applicable national implementing legislation.
2. How We Use Cookies
2.1 Strictly Necessary Cookies
These cookies are essential for the Services to function. They cannot be disabled without preventing core functionality. They include:
- Authentication cookies: Issued by EnaGate upon login, these maintain your authenticated session so you do not need to re-enter credentials on every page.
- Session management tokens: Secure, HttpOnly, SameSite cookies that track your active session state.
- Security cookies: CSRF tokens and anti-forgery cookies that protect against cross-site request forgery attacks.
- Load balancing cookies: Used by our infrastructure to route your requests to the same server during a session.
Legal basis: Strictly necessary cookies do not require consent as they are essential for the delivery of the requested service.
2.2 Preference Cookies
These cookies remember your settings and preferences so you do not have to re-configure them on each visit:
- Language preference (
enaspace-locale): Stores your preferred language (TR/EN or other) so the interface loads in your chosen language on subsequent visits. - Theme preference: Remembers your dark/light mode selection.
Legal basis: Legitimate interest (enhancing user experience without identifying individuals). You may delete these through your browser settings.
2.3 Analytics — EnaSpace & Enagate (Cookie-Free)
On enaspace.com, portal.enaspace.com, and enagate.com, we use a self-hosted, privacy-first analytics platform designed to operate without cookies and without collecting personally identifiable information, running entirely within ENA Innovation's own infrastructure.
- It does not place cookies on your device on those properties.
- It does not fingerprint your device or browser.
- It collects only: anonymized page views, referrer URL, browser type, OS, and country code derived from a hash of the IP address (the actual IP is never stored or logged).
- All data collected is non-personal, aggregated, and does not require consent under the ePrivacy Directive or KVKK on those properties.
We do not use Google Analytics, Meta Pixel, or advertising-oriented tracking on EnaSpace portal or Enagate authentication flows.
2.4 Enafeedback Marketing Website (www.enafeedback.com)
The Enafeedback marketing website uses a smaller set of cookies:
- Strictly necessary:
enafeedback-locale(language preference) andenaspace-billing-region(pricing region). - Preference:
enafeedback-cookie-noticerecords that you dismissed the informational cookie notice for up to 12 months. - Analytics (privacy-first, self-hosted): Anonymous visit statistics are collected via a self-hosted analytics platform running entirely within ENA Innovation's own infrastructure (analytics.enagate.com). It does not use advertising or commercial tracking cookies, does not fingerprint your device, and does not share data with third-party ad networks. Analytics scripts load unconditionally when the site is visited; no opt-in consent is required because no personal data or advertising cookies are involved.
Legal basis for analytics on Enafeedback: Legitimate interest in understanding aggregate website usage without identifying individuals.
3. Cookie and Storage Table
The table below covers all cookies and browser storage technologies used by EnaSpace services.
| Name | Storage Type | Purpose | Category | Duration |
|---|---|---|---|---|
enaspace-locale | Cookie | Language preference | Preference | 1 year |
enaspace-theme | Cookie | UI theme preference | Preference | 1 year |
__Secure-session | Cookie | Authenticated session token (EnaGate SSO) | Strictly Necessary | Session |
csrf_token | Cookie | Cross-site request forgery prevention | Strictly Necessary | Session |
iron-session | Cookie | Server-side BFF (Backend-for-Frontend) session state | Strictly Necessary | Session |
NEXT_LOCALE | Cookie | Next.js locale routing helper | Strictly Necessary | Session |
| Auth tokens (OIDC) | Session Storage / Memory | Short-lived access and refresh tokens (EnaGate OIDC) | Strictly Necessary | Session / Token lifetime |
enafeedback-locale | Cookie | Language preference (Enafeedback marketing site) | Strictly Necessary | 1 year |
enaspace-billing-region | Cookie | Billing/pricing region preference (Enafeedback marketing site) | Strictly Necessary | 1 year |
enafeedback-cookie-notice | Cookie | Records dismissal of informational cookie notice (Enafeedback marketing site) | Preference | 1 year |
| Self-hosted analytics identifiers | Cookie / local storage | Anonymous visit statistics on analytics.enagate.com — www.enafeedback.com only | Analytics | Session to 1 year |
Cookie names and durations may change as the platform evolves. This table reflects the current configuration as of the effective date above. No third-party advertising cookies are used.
4. Third-Party Cookies
Paddle (payment processing): When you proceed to checkout for an international Subscription, Paddle may place cookies on your device for fraud prevention and transaction tracking purposes. These cookies are governed by Paddle's Cookie Policy.
EnaGate (enagate.com): EnaGate places authentication cookies on its own domain (enagate.com) to manage your SSO session. These are strictly necessary and do not track behaviour across third-party sites.
We do not permit third-party advertising networks or social media platforms to place tracking cookies through the Services.
5. Managing Cookies
Enafeedback cookie notice (www.enafeedback.com). On your first visit, an informational banner explains how cookies are used on the site. Dismiss it with Got it; you can reopen the notice at any time via Cookie information in the site footer. Dismissal is stored in the enafeedback-cookie-notice cookie for up to 12 months.
Browser settings. You can control and delete cookies through your browser settings. The following links provide guidance:
Do Not Track (DNT). EnaSpace respects the Do Not Track browser signal. When a DNT signal is detected on EnaSpace portal properties, we limit data collection to strictly necessary functionality only.
Effect of disabling cookies. Disabling strictly necessary cookies (such as authentication and session cookies) will prevent you from logging in and using EnaSpace portal services. On www.enafeedback.com, clearing essential cookies resets language and region preferences. Clearing enafeedback-cookie-notice will show the cookie notice again on your next visit.
6. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in technology, regulation, or our practices. Material changes will be notified in accordance with our Privacy Policy notification process.
7. Contact
For questions about our use of cookies:
ENA Innovation Sağlık ve Yazılım Teknolojileri San. Tic. A.Ş.
- Email: [email protected]
- MERSİS: 0334130943400001