Cookie Policy & Preferences

Strictly necessary cookies and first-party storage records are required for the secure technical operation of achord.io, cryptographic session integrity, and persistence of your explicit privacy choices. Because these elements are indispensable to delivering the digital service you request, they do not require prior opt-in consent under KVKK Article 5/2-f or GDPR Article 6(1)(f), though they remain fully transparent and auditable.

• achord-consent-preferences (Local Storage / 180 Days): Records your granular opt-in or opt-out state for analytics and marketing categories, alongside a timestamp and policy version hash.
• achord-theme (Local Storage / Persistent): Stores your selected visual contrast mode (Executive Light or Carbon Dark) to prevent layout flashes during navigation.
• Host-/Session Security Tokens (HTTP-Only, Secure, SameSite=Lax): Ephemeral edge routing and CSRF protection tokens managed strictly during active form transactions.

To protect our executive intake channels, architecture briefing forms, and API endpoints against automated credential stuffing, spam, and denial-of-service abuse without degrading user privacy through intrusive CAPTCHAs, ACHORD deploys Cloudflare Turnstile.

Cloudflare Turnstile evaluates non-invasive cryptographic and browser-environment telemetry (such as TLS fingerprint integrity and proof-of-work challenges) and may set strictly necessary security tokens (e.g., cf_clearance) solely to verify that a submission originates from a genuine human session.

• Purpose: Automated bot mitigation, DDoS defense, and cryptographic verification of executive contact and assessment requests.
• Legal Basis: Legitimate interest in maintaining network and information security (KVKK Art. 5/2-f; GDPR Art. 6(1)(f) and Recital 49).
• Data Minimization: Turnstile telemetry is never used for cross-site behavioral profiling, advertising retargeting, or commercial data brokerage.

ACHORD operates a multi-regional digital architecture across 9 strategic hubs and 6 supported languages (Turkish, English, German, French, Spanish, and Arabic). When you select a strategic region or language from our Global Region Selector, your preference is stored locally in your browser.

• Storage Key: achord_region (Browser Local Storage — e.g., 'tr', 'uk', 'de', 'fr', 'es', 'ae', 'sa', 'nl', 'us').
• Function: Remembers your selected regional jurisdiction and language routing across sessions so regulatory references, typography (including RTL layout for Arabic), and executive briefings match your operating market.
• User Control: You may switch regions at any time via the top navigation bar or clear achord_region directly through your browser's site data controls.

In accordance with the Turkish Personal Data Protection Board's 'Guidelines on Cookie Applications' (Çerez Uygulamaları Hakkında Rehber), GDPR Article 7, and the EU ePrivacy framework, non-essential performance measurement and executive communication cookies are disabled by default.

Optional analytics cookies (such as Google Analytics 4 identifiers _ga and _ga_*) are activated only if you explicitly grant permission through our Cookie Banner or Cookie Preferences control.