Cookie Policy

Cookies are small text files that a website saves in your browser when you visit it. They help the site recognise you on later visits, keep you signed in and remember your settings. On this page, “cookie” also covers browser local storage (localStorage) and session storage (sessionStorage) used for the same purpose.

PDA uses no advertising cookies, no profiling, no third-party tracking tools and no browser fingerprinting. Fonts are loaded from PDA's own server.

On PDA, cookies are used only for the following purposes.

• To let you sign in, stay signed in securely and sign out.
• To protect your account and the site itself against abuse such as forged requests.
• To bring back settings such as your language, theme and layout on your next visit.
• Only with your permission, to measure anonymously how the site is used so it can be improved.

You can block or delete cookies in your browser settings. If you block the necessary cookies, sign-in and session features will not work; if you delete preference records, your settings return to their defaults.

Cookies are grouped by how long they last, who manages them and what they are for. PDA has three groups, and each is described in the sections below.

• Session cookies are temporary and are deleted when you close the browser or tab. Persistent cookies stay on your device until they expire or you delete them.
• All cookies PDA uses are managed by PDA itself (first party); there are no third-party cookies for advertising or tracking.
• Necessary cookies are required for the service to work and cannot be switched off. Preference cookies only remember a setting you made yourself. Analytics cookies are off by default and run only with your explicit choice.

The following cookies and records are required for the service to work and are used regardless of your analytics choice. Durations depend on the service configuration; the values given are the defaults.

• Session cookies: keep you signed in. The short-lived access cookie lasts 15 minutes; the cookie that renews your session and the marker that shows a session exists last up to 7 days and are deleted when you sign out. The access and renewal cookies cannot be read by scripts on the page (HttpOnly) and are sent only to the addresses that need them; the session marker grants no access.
• Verification cookies: short-lived cookies that show you have passed an earlier step during two-factor verification, password reset, changing your password while signed in and administrator sign-in. They last 5 to 10 minutes and are deleted when the step is completed.
• Security cookie: protects against forged requests (CSRF) and is kept for your browser session. If you sign in with Google or GitHub, a session cookie valid for about 30 minutes is also used, only during that sign-in flow.
• Language cookie: remembers the language you chose for 1 year.
• Cookie choice record: keeps your choice on this page (analytics consent and the date of the decision) in your browser's local storage until you delete it.
• Technical records: a timestamp that stops several tabs from renewing the session at the same time (until you delete it), a temporary record that carries the e-mail address to be verified between pages after registration or sign-in (deleted when verification ends or the tab closes; the address is never carried in the URL) and a result showing whether your browser draws animations in software or hardware (until the tab closes).

The following records only remember settings that you made yourself in this browser. They do not measure your visit, are not sent to the server and are not used for tracking. Without them we could not provide the appearance and settings you chose on your next visit, so we treat them as functional records needed to provide the service you requested and do not ask for separate consent. You can delete them in your browser settings; your settings then return to their defaults.

• Theme: your light, dark or system theme choice. Kept until you delete it.
• Animation and layout preferences: your animation settings and whether the sidebar is collapsed. Kept until you delete them.
• Page preferences: your view on the Teams page and your choice to hide the task-type help. Kept until you delete them.
• Remember me: if you tick this option on the sign-in screen, your e-mail address is remembered; kept until you turn the option off.
• In-session choices: the project you selected last and the language and theme at the start of the session. Deleted when you close the tab.

Some of these records contain a random internal ID of your account; it is not your e-mail address or name.

Analytics collects no data and creates no identifier until you say “Accept all” or switch Analytics on in the preferences window. It also stays off as long as you have not decided. When on, the measurement is kept on PDA's own server; there is no third-party analytics tool.

No name, e-mail, message content, token, password, account ID, IP address, browser information or browser fingerprint is collected. Even if you are signed in, the measurement is not linked to your account.

Collected analytics records are deleted automatically after 12 months. The anonymous visitor ID is renewed in your browser every 12 months; a new record is not linked to the old ID.

Operating figures such as the number of accounts, active and ended accounts and submitted contact forms do not depend on your analytics consent; they are calculated from the service's own records.

• The type of page visited (for example “project page”); project names, user IDs or address queries are not recorded.
• The source of the visit: direct, search engine, another site (domain only) or a campaign link (utm_source, utm_medium, utm_campaign).
• Active time on the site; time while the tab is in the background or the window is out of focus is not counted.
• Button clicks: only whether buttons from a fixed list were clicked (the register and sign-in buttons on the landing page and in the header, submission of the registration and contact forms, the source-code link); nothing about who clicked or what you typed is recorded.
• Error events: when an error occurs in the application, only the error type (rendering, file loading, unhandled promise rejection or network) and the page type are recorded. No error message, detail, address or identifier is recorded. The same error is reported once per session.
• Randomly generated anonymous visitor and session IDs are kept in your browser's local storage. The session ID is renewed after 30 minutes of inactivity. Both are deleted when you withdraw consent.

You can open the preferences window at any time with the “Manage cookie preferences” link at the bottom of the page or the button on this page. When you turn analytics off, new measurements stop at once, button-click and error events are no longer sent, and the analytics identifiers in this browser are deleted. Because the identifier is deleted, records collected earlier can no longer be linked to you; they are deleted automatically after 12 months.

Effect of withdrawal: necessary cookies keep working; no feature other than analytics is restricted. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

The choice belongs to this browser and is not tied to your account: you need to choose separately in another browser or device. When the cookie practice changes in a meaningful way, the consent version is raised and your choice is asked again.

You can also delete or block cookies in your browser settings; see your browser's help pages for how.

PDA has no advertising or third-party analytics cookies. When you sign in with Google or GitHub, your browser is redirected to that provider's page and the provider's own cookie and privacy terms apply. Verification, invitation and contact e-mails are sent from the server and leave no cookie in your browser.

Storing or reading information on your device is subject to your consent unless it is strictly necessary to provide a service you expressly requested. Necessary and functional records fall under that exception: under Turkish law they rest on Article 5/2(c) and (f) of the KVKK; in the EU, Article 5(3) of the ePrivacy Directive and its national implementations apply, for visitors in Germany § 25(2) No. 2 TDDDG (formerly TTDSG). Analytics rests only on your explicit consent (Art. 5/1 KVKK; Art. 6(1)(a) GDPR; § 25(1) TDDDG). The regulator's cookie guide is linked in the official references below.

Send questions about cookies through the contact form or to info@pd-assistant.com. The data controllers are Hamza Taşbay and Alper Temiz (details in the KVKK Privacy Notice and the Privacy Policy).