Cookie Policy
A precise record of browser storage, analytics, and form-security technologies.
Last updated: 1 September 2026
1. Scope and rule
This policy explains the technologies used on culinarydiploma.com. We apply one global rule: Google Analytics is blocked until you actively allow Analytics. Rejecting analytics does not limit the site, programmes, prices, WhatsApp, or the application form.
This is a technical disclosure and not a substitute for formal legal advice. Our processing of personal data is described in the Privacy Policy.
2. Technology inventory
cd-consent-v2 — necessary, first-party local storage. CulinaryDiploma stores a version number, your Analytics choice, the update time, and the expiry time in your browser. Purpose: remember and enforce your choice. Duration: 180 days. It is localStorage, not a cookie, and is sent to no server automatically.
cd_ga and cd_ga_REGBSBZPZ8 — optional, first-party host-only cookies. Provider: Google Analytics (Google LLC). Purpose: distinguish consented visits and measure pages, engagement, CTA selection, application-form start, and a confirmed lead. Duration: 180 days from first creation and not extended on later visits. Flags: Secure and SameSite=Lax. Advertising signals, ad-user-data, ad storage, and personalization are always disabled.
Cloudflare Web Analytics — cookie-free. Provider: Cloudflare, Inc. Purpose: aggregate traffic and real-user performance, including Core Web Vitals. It uses no cookie or localStorage, so browser-storage duration is not applicable. Cloudflare states that this service does not collect or use visitors’ personal data.
Cloudflare Turnstile — necessary form security. It loads only when the application form is near the viewport or used. The one-time token is valid for up to five minutes and is verified by our server. Our widget is configured as no_clearance, so it does not issue a Turnstile clearance cookie. A separate Cloudflare security challenge may conditionally use strictly necessary security or diagnostic cookies; cf_clearance is normally 30 minutes unless the zone setting changes, while cf_chl_rc_* cookies are short-lived and controlled by Cloudflare.
3. When Analytics starts
On a first visit, after expiry, after corrupt storage, or when browser storage is unavailable, no Google script, request, or analytics cookie is created. A previous legacy “granted” choice is re-requested; a legacy “denied” choice remains denied. Analytics starts only after you choose Accept or enable Analytics in Preferences.
4. Data minimisation and useful measurement
After consent, we send page and engagement measurement plus a limited application funnel: CTA selection, form start, and a confirmed successful application. Event parameters use page, language, and fixed placement labels only. Names, email addresses, phone numbers, messages, and form-field values are never sent to Google Analytics.
Cloudflare Web Analytics remains our aggregate, cookie-free baseline for traffic and performance even when Google Analytics is rejected.
5. Providers and international processing
Google and Cloudflare may process service data outside your country, including in the United States, under their contractual and transfer safeguards. Google receives analytics data only after consent. Cloudflare processes the minimal data needed for Web Analytics, delivery, and form security. Provider retention outside browser storage is governed by the relevant service settings and agreements.
6. Change or withdraw your choice
Use the fixed “Cookie settings” control at any time. Withdrawal is as easy as acceptance: we update your choice, delete current and legacy Google Analytics cookies that are accessible to the site, and reload once to remove the already-loaded Google runtime. After reload, no Google traffic occurs unless you consent again.
You may also clear site data in your browser. If you do, we will ask again because your saved choice is no longer available.
7. Contact and updates
We update this page when the technology inventory or retention changes. Questions: info@culinarydiploma.com. Controller: MUZDOLABI YAZILIM VE TEKNOLOJİ LİMİTED ŞİRKETİ, Istanbul, Turkey.