Esta página solo está disponible en inglés, turco y húngaro; a continuación se muestra la versión en inglés.
Legal
We keep in your browser only what the site, the panel and protected codes need to work, plus a few optional conveniences that we store only with your consent. We use no analytics, advertising or tracking cookies.
1. Strictly necessary and optional
Following the EU ePrivacy rules (Article 5(3) of Directive 2002/58/EC and the national laws implementing it), the GDPR and the cookie guide of the Turkish Personal Data Protection Authority (KVKK), we sort what we keep in your browser into two groups:
- Strictly necessary: without these the site, the panel or a protected code cannot work as you asked: signing in, security, a setting you chose yourself and your cookie choice. They need no consent; we rely on providing the service you asked for and on our legitimate interest in keeping it secure (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
- Optional (functional): conveniences the panel works without, such as the recent items of the command palette (Ctrl+K). We store them only after you agree (GDPR Art. 6(1)(a); explicit consent under KVKK Art. 5(1)), and you can withdraw your consent at any time.
We use no analytics, advertising, profiling or tracking cookies or similar technologies, and we share nothing stored in your browser with third parties.
2. Cookies we use
| Name | Purpose | Duration | Type |
|---|---|---|---|
Session __Host-session | Keeps you signed in to the panel. | Until the browser is closed (12 hours at most); with "remember me" 30 days at most | Strictly necessary |
Trusted device __Host-device | Recognises a browser that has signed in successfully before, so other people's password guesses cannot lock you out of your own device. | 365 days | Strictly necessary (security) |
Unlocked code __Secure-unlock | Set only when you enter the password or PIN of a protected QR code: keeps that one code open for the time its owner chose, so you are not asked again until then. It holds an expiry time and a signature, nothing about you, and is sent only to that code’s address. A password-protected client report link sets the same cookie, for its own address only, for 12 hours. | 1 hour by default; up to 30 days if the code’s owner chooses | Strictly necessary (at your request) |
Site language qrv-lang | Remembers the language you chose in the site’s language picker; only set when you choose one. | 365 days | Strictly necessary (your setting) |
Cookies are sent only to the address that set them (veltessa.com, or a customer’s own domain for the pages of its codes), only over HTTPS, and cannot be read by scripts. The session and device cookies are not sent with requests coming from other sites.
3. Browser storage
The following stays in your browser's local storage (localStorage) or, for the panel's program files, in its cache storage. It is never sent to us, and deleting your browser data removes it.
| Name | Purpose | Kept | Type |
|---|---|---|---|
Your cookie choice qrv-consent | Your choice about optional storage and when you made it, so we do not ask again (unless we add a new optional item). | Until you change it or clear your browser data | Strictly necessary |
Theme and language qrv-theme · qr-admin.theme · qr-admin.locale | The theme of the site and the theme and language of the panel, once you choose them. | Until you change them or clear your browser data | Strictly necessary (your setting) |
Panel program files cache storage | The panel’s own files, no personal data, so it opens quickly and can tell you when you are offline. | Replaced with each new version of the panel | Strictly necessary |
Recently opened qr-admin.palette.recent.* | The last 8 pages and codes (name and short address) you opened from the command palette (Ctrl+K), per workspace member, to offer them again. | Until you withdraw consent or clear your browser data | Optional (functional), only with your consent |
Last illustration shown qr-admin.login-scene · not-found.panel.variant | The illustration last shown on the sign-in page and on the panel’s "not found" page, so the next one is different. | Until you withdraw consent or clear your browser data | Optional (functional), only with your consent |
4. Pages of scanned codes
The pages people see after scanning a QR code or opening a client report (on veltessa.com or a customer’s own domain) set no cookies and store nothing in the browser, with one exception: when you unlock a code or report protected with a password or PIN, the __Secure-unlock cookie above, which is strictly necessary. Such pages say so in a short line at the bottom; they show no consent notice because they store nothing optional. The page shown for unknown or deleted codes stores nothing at all.
Scans are not tracked: what we record about a scan is described in the privacy policy.
5. Third parties
The contact page and the panel sign-in use Cloudflare Turnstile to keep bots out; the check is loaded from challenges.cloudflare.com and processes technical signals of your browser. Cloudflare may set its own strictly necessary security cookies (e.g. __cf_bm) when needed to protect its network. Apart from these we load no third-party content, images, fonts, analytics or advertising tools.
6. Your choice
The first time you open the site or the panel, a notice explains the above and asks whether you allow optional storage. Accepting and rejecting are equally easy, and until you choose, nothing optional is stored. Rejecting changes nothing about how the site and the panel work.
You can change your choice at any time under Cookie preferences: in the footer of the site’s pages and in the panel’s account menu. When you withdraw your consent, the optional items are deleted from this browser. Your choice applies to this browser only; in another browser, or after you clear your browser data, we ask again.
7. Managing cookies
You can also delete or block cookies and stored data in your browser's settings. If you block the session cookie you cannot sign in to the panel. Details on personal data are in the privacy policy.