DRN · Legal information

Cookies and Browser Storage Notice

How browser storage is used on drnportal.com.

Version 1.2 · Last updated: 2026-10-23

This is a translation provided for convenience. The Turkish text is the binding version; if the two texts differ, the Turkish text prevails.

Data controller: DRN GRUP GIDA SANAYİ VE TİCARET LİMİTED ŞİRKETİ · Mustafa Kemal Mahallesi, 2118. Cadde, No: 4C, İç Kapı No: 140, Çankaya/Ankara · privacy@drnportal.com

Short version: there are no advertising, analytics or marketing cookies on drnportal.com. The home page, product, about, support and legal text pages write nothing to your browser; only if you choose a language with the TR/EN button at the top of the page or with a link that selects a language, a single session cookie is written to remember that choice. On the account pages, your browser's own storage is used to keep your session open, and the Google reCAPTCHA security service is used to protect the account against forged and automated requests. Because this storage is necessary for a service you have expressly requested (signing in to your account, viewing the site in the language you chose) or for the security of that service, it does not depend on your explicit consent; that is why the site also has no "cookie consent" window.

1. What is stored on the site?

On all pages, only when you click the language button or a link that selects a language:

Name	Type	Purpose	Duration	Set by
`drn_dil`	Cookie	Your language preference (`tr` or `en`). It is written only when you click the TR/EN button at the top of the page or a link whose address contains `?dil=tr` or `?dil=en`; during the same browser session it is used to show the language you chose instead of automatically redirecting you based on your browser language. It contains nothing else; only our server reads it.	Until you close the browser (session cookie)	drnportal.com (our site)

On the account pages (/hesap, /hesap/dogrula, /hesap/sil, /hesap/profil), as soon as the page opens, before you sign in as well:

Name	Type	Purpose	Duration	Set by
`firebaseLocalStorageDb`	IndexedDB (browser storage)	To keep your session open after you sign in; so that you are not asked for your password again on every page change. It contains the session refresh key of Firebase Authentication and your account ID. It is also created before you sign in; in that case it is empty.	Until you use "Sign out" or clear your browser data. The access key is renewed automatically every hour.	Google Firebase Authentication library (on behalf of our site)
`firebase-heartbeat-database`	IndexedDB	A technical record that lets the Firebase library attach its own version/platform information to requests (a single line per day). It contains no account ID or personal data.	At most 30 days of records are kept (the library clears older ones itself)	Google Firebase library
`firebase-app-check-database`	IndexedDB	To store the Firebase App Check security token that confirms that requests on the account pages come from our own pages; protection against forged and automated requests.	The token is renewed automatically; the record stays until you clear your browser data.	Google Firebase App Check library (on behalf of our site)
`_GRECAPTCHA`	Cookie (third party)	The cookie that the Google reCAPTCHA security service uses for its risk analysis; to tell forged, automated and abusive requests apart.	180 days	Google (on the `www.google.com` domain)
`_grecaptcha`	localStorage	A technical record kept by the Google reCAPTCHA script (a single value whose content cannot be read).	Until you clear your browser data	Google reCAPTCHA script (on behalf of our site; within `drnportal.com`)
`rc::a`, `rc::f`	localStorage	The Google reCAPTCHA frame's own technical records.	Until you clear your browser data	Google (reCAPTCHA frame, `www.google.com`)
`rc::b`, `rc::c`	sessionStorage	Technical records that the Google reCAPTCHA frame keeps for the life of the tab.	Until you close the tab	Google (reCAPTCHA frame, `www.google.com`)

Apart from these, the site does not place cookies; when you browse the home, product, about, support and legal text pages without signing in and without using the language button or a link that selects a language, nothing is written to your browser.

2. Third parties

Google reCAPTCHA (security service): The account pages use Google's reCAPTCHA service (through Firebase App Check) to tell forged and automated requests apart. When the page opens, your browser loads a script and a frame from Google's domains (www.google.com, www.gstatic.com); in the process your IP address and your browser's technical information reach Google, Google writes the cookie and storage items above to your browser and reads technical signals from your browser for its security assessment. Google acts as a data processor on our behalf for this service; according to Google's service terms, it processes this information only to provide the service and to keep it secure, and does not use it for other purposes such as personalized advertising. Google's Privacy Policy and Terms of Service also apply to its processing on its own domain.
Sign-in infrastructure: In some browsers (especially on mobile), the account pages also connect to apis.google.com, udf360.firebaseapp.com and www.googleapis.com for the sign-in infrastructure. These connections do not write any cookie or storage item to your browser other than those listed above.
If you use the Sign in with Google option, the sign-in window opens on Google's own domain (accounts.google.com) and Google uses its own cookies on that domain. These are subject to Google's privacy policy; we cannot access those cookies and we do not place them.
The site has no embedded video, social media plug-in, advertising network, map or visitor analytics (Google Analytics, etc.).
The server that hosts the site keeps request logs for access security (see Privacy Policy, "Technical and security logs"); these logs are not cookies and do not write anything to your browser.

3. Legal basis for this storage

Session storage: it is strictly necessary for the operation of the service you have expressly requested by signing in to your account. In the Guide on Cookie Practices (Çerez Uygulamaları Hakkında Rehber) of the Kişisel Verileri Koruma Kurumu (Personal Data Protection Authority) ("Criterion B" — authentication cookies), this type of storage is counted in the category that does not require explicit consent; the legal basis is that it is necessary for the performance of the membership agreement between you and us (Article 5/2-c of Law No. 6698).

Security (reCAPTCHA and App Check): It is necessary to protect the account pages against forged and automated requests; the legal basis is our legitimate interest (Article 5/2-f of Law No. 6698).

Language preference (drn_dil): it is written only when you click, is deleted when you close the browser and contains no personal data. In the Guide, a session cookie used to remember the language preference is counted among the cookies that do not require explicit consent.

The Guide contains no separate guidance for cookie-like technologies such as IndexedDB/local storage; we explain these with the same level of transparency as cookies.

4. How do you manage it?

Sign out: "Sign out" on the /hesap page deletes the session record.
Delete your language preference: The language cookie is deleted automatically when you close the browser; if you wish, you can also clear cookies for drnportal.com in your browser settings. On the next visit the site chooses the language from your browser language again.
Delete from the browser: Clear the site data for drnportal.com in your browser's settings. Google's _GRECAPTCHA cookie sits on Google's own domain; to delete it, clear the site data for www.google.com as well. (Chrome: Settings › Privacy and security › Site data; Safari: Preferences › Privacy › Manage Website Data; Firefox: Settings › Privacy & Security › Cookies and Site Data.)
If you block it: If you block browser storage completely, you cannot sign in to the account pages. If you block cookies, your language preference is not remembered and is chosen from your browser language on every visit. If you block Google reCAPTCHA (for example with an ad or tracker blocker), the security check on the account pages does not work and you may get an error when signing in. The rest of the site continues to work.

5. If this changes

If analytics, advertising or any other third-party cookie is planned to be added to the site, this text will be updated in advance and, where required, your explicit consent will be obtained with an "I give / I do not give" choice, separate from the privacy notice. The current version of this text is always at drnportal.com/legal/cerez.

Your rights and how to apply: KVKK Application page.