Cookie Policy
Version: 2026-10-17 · Effective date: 17 October 2026
1. What this policy covers
This policy explains the cookies and similar technologies (such as your browser’s local storage) used on nowtoprint.com. It describes why each one is used, how long it is kept and how you can change your choices.
2. Who we are
The data controller is NOWTOPRINT BASKI ÇÖZÜMLERİ SAN. VE TİC. LTD. ŞTİ. (tax office: Üsküdar Vergi Dairesi; tax no.: 6321579148; registered address: Acıbadem Mahallesi Derin Sokak A Blok No: 8A İç Kapı No: 150, Üsküdar, İstanbul, Türkiye). Address: Acıbadem Mahallesi Derin Sokak A Blok No: 8A İç Kapı No: 150, Üsküdar, İstanbul, Türkiye. Email: info-tr@nowtoprint.com. The MERSIS number and KEP address are shown on the contact page when they are on the company record.
3. What is a cookie?
A cookie is a small text file saved by your browser when you visit a website. Your browser’s local storage, session storage and IndexedDB can be used for similar purposes. In this policy we call all of these “cookies”.
4. Which cookies we use
Strictly necessary cookies make the site work: they remember your language, keep you signed in, protect the site and remember your cookie choice. They cannot be switched off. Analytics cookies help us measure how the site is used (for example, which pages are visited). Google Analytics is currently not in use; if we start using it, we will update this page and ask for your permission again. They only run if you allow them. Marketing cookies are not used at the moment. If we start using them, we will ask for your permission first. Google reCAPTCHA v3 and Firebase App Check load only after you enter data in, or submit, a sign-in, sign-up, or quote form. Focusing a field or using the cookie banner does not load them. They do not load on the homepage or other general pages. After you leave a form page, token refresh stops and reCAPTCHA is not run again on the homepage or other pages. The Google script that already loaded cannot be removed: Firebase App Check can be started only once, and the script stays in the browser until you reload the page or leave the site. reCAPTCHA may set the _GRECAPTCHA cookie, and App Check may store a token in the firebase-app-check-database IndexedDB. Error reports are sent to Sentry in the European Union as a strictly necessary security measure. Sentry Session Replay stores sentryReplaySession in session storage and starts only after you allow analytics cookies. It does not run on payment, checkout, account, or quote pages. Quote pages are the quote form, the new-quote page, the embedded quote, and the AI quote. Text, form inputs, and media in a replay are masked or blocked. If you allow analytics cookies, first-party statistics may also be sent to /api/analytics on this site. That request is not stored as a cookie in your browser.
5. Legal basis
Strictly necessary cookies: performance of our contract with you (use of the site, quotes and orders) and our legitimate interest in security (Turkish Personal Data Protection Law No. 6698 (“KVKK”), Art. 5(2)(c) and (f)). For visitors in the EU/EEA, where applicable: Art. 5(3) of Directive 2002/58/EC (the strictly necessary exemption) and Art. 6(1)(b) and (f) GDPR. Analytics and marketing cookies: your explicit consent (KVKK Art. 5(1); where applicable, Art. 6(1)(a) GDPR). Refusing consent does not limit your use of the site.
6. International transfers
Google Analytics is currently not in use; if we start using it, we will update this page and ask for your permission again. Under KVKK Art. 9, transfers to Google described below are to be made on the basis of the standard contract published by the Turkish Data Protection Board and notified to the Authority. The signature and notification dates will be published here when that step is complete. For visitors in the EU/EEA, Google LLC participates in the EU–U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795). The same Google transfer applies to the _GRECAPTCHA cookie and the Firebase App Check token when those technologies load on a sign-in, sign-up, or quote form. Our error-logging provider Sentry processes error reports in the European Union. When you allow analytics cookies, Sentry Session Replay is sent to the same Sentry service in the European Union. First-party /api/analytics requests stay on NowToPrint servers.
7. Managing your choices
On your first visit you can choose “Accept”, “Reject” or “Manage preferences”. You can change your choice or withdraw consent at any time using the “Cookie preferences” link at the bottom of every page. When you withdraw consent, we delete analytics cookies from your device. Your choice is valid for 6 months and stays on your device until you delete it. We ask again after 6 months, or sooner if we change this policy materially. You can also delete or block cookies in your browser settings. If you block strictly necessary cookies, parts of the site may not work.
8. Your rights
Under KVKK Art. 11 (and, where applicable, Arts. 15–22 GDPR) you may ask whether we process your data, request information, correction or erasure, learn which third parties receive it, object, and claim compensation. Contact info-tr@nowtoprint.com or write to Acıbadem Mahallesi Derin Sokak A Blok No: 8A İç Kapı No: 150, Üsküdar, İstanbul, Türkiye. See the Privacy Policy for the rest of the notice.
9. Changes
We may update this policy. The current version and date are shown at the top of this page. A new version asks for your choice again.
| Cookie / storage name | Provider (party) | First or third party | Transfer abroad | Storage type | Purpose | Duration | Category |
|---|---|---|---|---|---|---|---|
| NEXT_LOCALE | NowToPrint (first party) | First party | None (stays on your device) | cookie | Remember your language | Session (deleted when you close the browser) | Strictly necessary |
| ntp_consent (local storage) | NowToPrint (first party) | First party | None (stays on your device) | localStorage | Remember your cookie choice, the time you made it, and the policy version | valid 6 months, stays on device until deleted | Strictly necessary |
| ntp-theme-v3 (local storage) | NowToPrint (first party) | First party | None (stays on your device) | localStorage | Remember your light, dark, or system theme | Until you delete it | Strictly necessary |
| nowtoprint-pwa-installed (local storage) | NowToPrint (first party) | First party | None (stays on your device) | localStorage | Remember whether the app is installed on your device | Until you delete it | Strictly necessary |
| nowtoprint-pwa-dismissed (local storage) | NowToPrint (first party) | First party | None (stays on your device) | localStorage | Remember that you dismissed the install prompt | 14 days | Strictly necessary |
| __Host-better-auth.session_token | NowToPrint (first party) | First party | None (NowToPrint servers) | cookie | Keep you signed in. On this site the production name is host-only and is not sent to other domains. | 7 days | Strictly necessary |
| firebase:authUser:<API_KEY>:[DEFAULT] (IndexedDB firebaseLocalStorageDb, or local storage if IndexedDB is unavailable) | Google Firebase (on behalf of NowToPrint) | Third party | Google, United States | IndexedDB | Keep you signed in to your account | Until you sign out or clear site data | Strictly necessary |
| _ga | Google Analytics (Google) | Third party | Not in use | cookie | Not currently set. Distinguish visitors to produce statistics | 13 months | Analytics |
| _ga_JENR9LEGBS | Google Analytics (Google) | Third party | Not in use | cookie | Not currently set. Keep session state for the NowToPrint Google Analytics property | 13 months | Analytics |
| _GRECAPTCHA | Google (reCAPTCHA) | Third party | Google, United States | cookie | Protect sign-in, sign-up, and quote forms from abuse. Loaded only after you enter data in or submit those forms, not on focus, not from the cookie banner, and not on the homepage or other general pages. | Up to 6 months, set by Google | Strictly necessary |
| firebase-app-check-database | Google Firebase | Third party | Google, United States | IndexedDB | Cache the Firebase App Check token after reCAPTCHA runs because you entered data in or submitted a sign-in, sign-up, or quote form. | Until you clear site data | Strictly necessary |
| sentryReplaySession | Sentry | Third party | Sentry, European Union | sessionStorage | Keep a Session Replay identifier after you allow analytics cookies. Not used on payment, checkout, account, or quote pages. Quote pages are the quote form, the new-quote page, the embedded quote, and the AI quote. Text, inputs, and media are masked or blocked. | Until you close the tab | Analytics |
| POST /api/analytics | NowToPrint | First party | None (NowToPrint servers) | HTTPS request | Send first-party usage statistics after you allow analytics cookies. Not stored as a cookie in your browser. | Not stored in the browser | Analytics |
| — | — | — | — | — | No marketing cookies at present. | — | Marketing |