Cookie Policy
This policy explains how Lite ASO uses cookies and similar technologies on its website and services, and how you can manage them. Nurşat Bülbül is the data controller, operating the Lite ASO brand in Türkiye. Contact: [email protected].
1. What are cookies and similar technologies?
Cookies are small files stored by your browser. They help websites remember a session or preference. Session cookies last for a browsing session; persistent cookies remain until their expiry or removal. First-party cookies are set for our site, while third-party technologies are provided by other services.
We also use localStorage to remember information on your device and scripts/pixels to measure permitted interactions. localStorage is not a cookie and is not automatically sent with every request. These technologies can process identifiers, device/browser information and usage data. Our Privacy Policy explains the related personal-data processing.
2. Strictly necessary cookies
We use necessary cookies to keep you signed in, protect authentication and complete requested security or recovery steps. They are enabled when the relevant service is used and cannot be disabled in our cookie preferences panel. They are not used for advertising.
View storage details
| Name / technology | Purpose | Lifetime / removal |
|---|---|---|
| aso_session; aso_session_epoch | Opaque authenticated session and a session-change marker. Both are httpOnly. | Up to 4 hours; replaced or cleared by sign-in/sign-out. |
| aso_two_factor | Temporary two-factor authentication challenge. | Up to 10 minutes in the browser challenge flow. |
| aso_auth_return_pending | Returns you to the requested page after authentication. | Up to 1 hour; some OAuth challenge flows use 10 minutes. |
| aso_verify_email_pending; aso_magic_link_pending | Temporary email-verification or magic-link flow, where used. | Up to 1 hour for verification; 10 minutes for magic-link staging. |
| Better Auth OAuth/passkey challenge cookies | Protect the requested authentication ceremony. | Short-lived, according to the relevant authentication flow. |
3. Functionality and preferences
Preference storage remembers your selected language, appearance and cookie choices. It does not measure advertising. localStorage records have no automatic cookie expiry and remain until removed by you, the browser or the application.
View storage details
| Name / technology | Purpose | Lifetime / removal |
|---|---|---|
| liteaso_cookie_preferences (localStorage) | Necessary, analytics and advertising choices, policy version and update time. No password or session token. | No fixed automatic expiry; saved again when you change choices; an unsupported version requires a new choice. |
| NEXT_LOCALE (cookie) | Remembers your chosen language. | Up to 1 year when explicitly saved; some authentication flows use a session cookie. |
| liteaso-public-theme; liteaso-dashboard-color-scheme (localStorage) | Remembers the public-site and dashboard appearance choices. | Until you change the preference or clear storage. |
4. Analytics and performance
If you allow analytics, enabled Amplitude and Google Analytics integrations help us understand visits and product interactions and improve Lite ASO. They may process browser/device information, visitor identifiers, page/event data and technical network information. Automatic capture is disabled in our current Amplitude integration.
We also use consented browser storage to remember acquisition categories and the launch-page A/B variant. The records listed below are used only where the relevant integration is enabled. Provider identifiers and expiry depend on the installed SDK, configuration and browser restrictions.
View storage details
| Name / technology | Purpose | Lifetime / removal |
|---|---|---|
| AMP_*; amplitude_id_*; amplitude_* | Amplitude visitor/session identifiers in cookies or browser storage. | Depends on the installed SDK and provider configuration; cleared where accessible on withdrawal. |
| _ga; _ga_* | Google Analytics visitor and session measurement cookies. | According to Google configuration and browser limits; may be renewed during consented use. |
| _aso_source_first; _aso_source_last (localStorage) | Classified acquisition channel/platform and an opaque attribution reference. Raw query/referrer strings are not stored in these records. | 30-day validity; expired records are discarded when read, or removed on withdrawal. |
| _aso_launch_copy_v1 (localStorage) | Remembers the randomly assigned launch-page A/B copy variant. | 30-day validity. Assignment requires analytics consent; URL preview does not persist an assignment. |
| _aso_features_used (localStorage) | Avoids counting the same feature milestone repeatedly. | No fixed automatic expiry; removed on withdrawal or browser clearing. |
5. Advertising and measurement
If you allow advertising, Google Ads and Meta Pixel help us measure campaigns and eligible events such as sign-up, checkout and purchase. They may receive network/browser information, event details and relevant campaign identifiers. Advertising and analytics are separate choices.
Supported cookie families include _gcl_* for Google Ads and _fbp/_fbc for Meta. Their presence and lifetime depend on provider configuration and browser restrictions. These technologies are not required to sign in or buy a subscription. Google sign-in identity and Google API user data are not sent for advertising.
6. How can you manage cookies?
You can reject non-essential tracking, accept all, or choose analytics and advertising separately using Cookie Preferences on this page or in the footer. Optional tracking remains off until you choose the relevant category. Browsing, registering and purchasing do not require optional consent; continuing to browse is not consent.
You can change or withdraw a choice at any time. Turn off the category and save. When consent is reduced, we stop future optional tracking, attempt to remove known accessible tracking cookies and localStorage records, and reload the page to unload scripts. Necessary login and preference records remain.
You can also block cookies or clear site data in your browser settings. This can sign you out, reset choices or affect requested authentication/payment functions. Withdrawal does not erase events already received by providers, and we cannot directly remove inaccessible third-party or httpOnly provider cookies. For personal-data deletion requests, contact [email protected].
7. Third-party services
Paddle checkout and linked third-party pages use their own payment, fraud-prevention or authentication technologies under their own notices. Our preference panel controls Lite ASO tracking and does not change settings on those other services.
Some providers process data outside Türkiye. The Privacy Policy explains recipients, applicable legal grounds, international transfers and your rights. Contact [email protected] for information about the processing and applicable safeguards.
8. Changes and contact
We may update this policy when our technologies or processing change. The latest revision date is shown above. A policy update does not itself grant new optional consent; we request new choices separately where required. Browser storage lifetimes differ from server and provider retention periods.
For questions about cookies or your privacy choices, email [email protected]. Further information about the controller, data processing and your rights is available in our Privacy Policy.