Legal
Cookie Policy
Last updated: 24 October 2026
1. Who we are and what this policy covers
This Cookie Policy explains which cookies and similar technologies are used on reactll.com, including the
Turkish pages under /tr. "Similar technologies" means browser storage (localStorage, sessionStorage), the
page-view messages our own script sends, and the tracked links and images in our emails.
The website is operated by Reaktör Teknoloji Ticaret Limited Şirketi, trading as Reactll ("we", "us"), Şahkulu Mah. Serdar-ı Ekrem Cad. No: 15/A, Galata, 34430 Beyoğlu, İstanbul, Türkiye; MERSİS no. 0734209102400001; email [email protected]. We are the controller for the data described here.
How we handle personal data in general (enquiries, the Security Check, client accounts) is explained in our Privacy Policy and KVKK Information Notice. Hosting, providers and transfers are described on our data protection and security page.
2. In short
- Without asking, we set only what the site needs to work and the settings you choose yourself.
- Analytics cookies are set only after you click "Accept" in the cookie banner. They cover our own returning-visitor cookie and, if you came through a link in one of our emails, the link between your visits and your contact record. Accepting also lets us remember your industry and which notices you have already seen. "Decline" has the same weight as "Accept". Nothing for analytics is stored on your device until you choose.
- Without consent we still count page views (except for visitors in Germany and Austria; section 6). This uses no cookies and no other storage on your device, and we do not store your IP address.
- We use no advertising cookies, no social-media plugins and no embedded videos or maps. Our fonts are hosted on our own server. We do not sell your personal information or share it for advertising.
- You can change your choice at any time with the "Cookie Settings" link in the footer of every page.
3. Strictly necessary
These are needed to deliver the website you asked for, to keep it secure, or to remember your cookie choice. The law does not require consent for them (Article 5(3) ePrivacy Directive and the national laws implementing it, including §25(2) TDDDG in Germany and Article 11.7a(3) Telecommunicatiewet in the Netherlands). All are first-party unless stated otherwise.
| Name | Type | Purpose | Duration |
|---|---|---|---|
reactll_session |
Cookie (encrypted, HttpOnly, Secure) | Keeps your session between pages, for example while you fill in a form or are signed in | 30 days |
XSRF-TOKEN |
Cookie (encrypted, Secure) | Protects forms against cross-site request forgery | 30 days |
cookie_consent |
Cookie and localStorage |
Remembers whether you accepted or declined analytics, and when, so that the banner does not come back and your choice is respected | 12 months, then we ask again |
remember_web_… |
Cookie (encrypted, HttpOnly) | Keeps you signed in to the client area, only if you tick "Keep me signed in" | Up to 400 days, or until you sign out |
__cf_bm, cf_clearance |
Cookies set by Cloudflare, Inc. (third party) | Bot and attack protection. Set only if Cloudflare's protection is triggered for your connection | __cf_bm 30 minutes; cf_clearance for the validity of the security check you passed |
Cloudflare network error reports. Our site is delivered through Cloudflare. Cloudflare asks your browser to keep, for up to 7 days, an instruction to report failed connections to Cloudflare (Network Error Logging). A report contains technical data about the failed request (such as the address requested, the type of error and your IP address). It is used only to detect network problems, and we do not receive it in a form that identifies you. This is not a cookie and is not used to recognise you.
4. Settings you choose yourself
These are stored only when you take the action described, to remember a choice you made. They are not used to track you across sites and are not shared with third parties.
| Name | Type | Set when | Purpose | Duration |
|---|---|---|---|---|
rl_industry |
Cookie | You pick your industry, or close the question, in the "What is your business in?" window or the industry switch. See also section 5 | Shows you examples and pages for your industry. If you later send us an enquiry, the industry is saved with it, so that we know what you came for | 12 months |
checklist:<page> |
localStorage |
You tick items on one of our checklists | Keeps your ticks for when you come back | Until you press "Reset" or clear your browser data |
trust_widget_dismissed |
localStorage |
You close the small "Building and running live software since 2018" notice | Stops it from showing again | Until you clear your browser data |
Whether the industry window should open by itself is decided from the page you came from. This information is not stored.
5. Analytics: only with your consent
The following are set only after you click "Accept".
| Name | Provider | Purpose | Duration |
|---|---|---|---|
reactll_visitor |
Reactll (first party) | Our own analytics: a random identifier, so that a return visit is recognised as the same browser | Up to 12 months (deleted when your consent expires) |
hq_contact |
Reactll (first party) | Only if you came through a link in an email we sent you: links your later visits to our site to your contact record, so that our team can see which information was useful to you when following up (personalised analytics) | 12 months |
rl_industry |
Reactll (first party) | Remembers the industry of the industry pages you open, or of a link that names an industry, so that the site keeps showing that industry | 12 months |
exit_intent_shown |
Reactll, localStorage |
Remembers that the "before you go" note was shown, so that it is not shown again | Until you clear your browser data or withdraw consent |
trust_widget_shown |
Reactll, sessionStorage |
Remembers that the small "since 2018" notice was shown during this visit | Until you close the browser tab |
Without your consent, rl_industry is set automatically only for visitors whose browser time zone is in the
United States. Everyone else gets it only through the choices in section 4. Without consent, the two notices
remember only for the page you are on that they have been shown; nothing is stored.
If you decline or withdraw your consent, none of these is set. reactll_visitor is
deleted the next time you open a page of our site. From that moment hq_contact is no longer read, and our server
deletes it on your next visit.
No Google Analytics. We do not use Google Analytics or any other third-party analytics. Any _ga or _ga_<ID>
cookies left on your device from an earlier visit are deleted when you open a page of our site.
Our own analytics runs on our server in Frankfurt (Germany). It never runs in the client area or the admin area. Our analytics records are deleted after 24 months.
6. Counting visits without cookies
To know how many people use the site, our own script sends small messages to our server when you open a page and while you use it. They contain the page address and title, the page you came from, campaign tags, your browser language and screen width, the time on the page, how far you scrolled, and which buttons or forms you used. Nothing is stored on your device for this.
If your browser's time zone is set to Germany or Austria, these messages are sent only after you click "Accept". For all other visitors they are sent whether or not you accept cookies.
Without your consent we do not recognise you from one day to the next. Your page views of one day are grouped under a key calculated from your IP address, your browser's user agent and a random value; we replace that value every day and then destroy it. We do not store your IP address. We do store the country and city that our network provider (Cloudflare) derives from it, and the type of device and browser. If you send us an enquiry, the visit you made that day is linked to your enquiry (Privacy Policy, sections 2.1 and 2.5). Records are deleted after 24 months.
The legal basis is our legitimate interest in knowing how our site is used and keeping it working (Article 6(1)(f) GDPR; KVKK Article 5(2)(f)). You can object at any time by emailing [email protected], and you can stop the messages by blocking JavaScript or with a content blocker.
7. Emails we send
Emails our team sends to recipients in the European Union, the European Economic Area, the United Kingdom and Switzerland contain no open-tracking image. Emails to recipients elsewhere, including Türkiye and the United States, may contain a tiny image that tells us whether the email was opened. You can block it by setting your email program not to load remote images.
Links in our emails pass through our server, and we record which link was clicked
(Privacy Policy, section 2.4). Clicking such a link sets the hq_contact cookie only if you have
accepted analytics cookies on our site (section 5).
8. Signed-in areas
If you have an account in our client area, signing in uses reactll_session and, if you choose "Keep me signed in",
remember_web_… (section 3). Our own staff's browsers also store a few settings for the internal panel. These are not
set for visitors.
9. Your choices
- Banner. On your first visit you can choose "Accept" or "Decline". "Settings" shows what each choice means.
- Change or withdraw your consent. Use the "Cookie Settings" link in the footer of any page to reopen the banner. Withdrawing is as easy as giving consent, and it does not affect the lawfulness of what happened before.
- How your choice is kept. Your choice and its date are stored in your browser (
cookie_consent) for 12 months. After that, or when we change what the banner covers, we ask again. - Browser. You can block or delete cookies and site data in your browser's settings, or use a private window. If you block strictly necessary cookies, forms and sign-in may stop working.
10. Legal basis and transfers abroad
- Strictly necessary cookies and the settings you choose: no consent is required (Article 5(3) ePrivacy Directive, §25(2) TDDDG, Article 11.7a(3) Telecommunicatiewet). The related processing relies on our legitimate interest in running a secure website and remembering your choices (Article 6(1)(f) GDPR; KVKK Article 5(2)(f)). Where you act for yourself as a party, it also relies on steps before or performance of a contract (Article 6(1)(b) GDPR; KVKK Article 5(2)(c)).
- Analytics cookies and storage in section 5, including
hq_contact: your consent, given through the banner (Article 6(1)(a) GDPR; for visitors in Türkiye, explicit consent under KVKK Article 5(1)). For visitors in the United States,rl_industryis set on the basis of our legitimate interest in showing relevant content. - Transfers abroad. All traffic to our site passes through Cloudflare, Inc. (United States), whose network processes connection data, including your IP address, in data centres around the world. Our own analytics stays on our server in Frankfurt, Germany.
11. Your rights
Depending on where you are, you have rights over your personal data: access, correction, deletion, restriction, objection, portability and withdrawal of consent. You can also complain to a data protection authority, for example the Dutch Autoriteit Persoonsgegevens, a German state authority, or the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). Visitors in Türkiye have the rights in KVKK Article 11. Your rights and how to use them are set out in sections 7 and 8 of our Privacy Policy and KVKK Information Notice.
12. Changes
When we add or change a cookie or similar technology, we update this page and the date at the top. If a change needs your consent, we ask for it again through the banner.
13. Contact
Questions about this policy: [email protected], or by post to Reaktör Teknoloji Ticaret Limited Şirketi, Şahkulu Mah. Serdar-ı Ekrem Cad. No: 15/A, Galata, 34430 Beyoğlu, İstanbul, Türkiye.
