Cookie policy

Last updated: 8 November 2026

This policy explains which cookies and similar technologies (local storage and session storage in your browser) AstroSitus (astrositus.com) uses, why, and how you can control them. How we process personal data in general is explained in the privacy policy.

What cookies and browser storage are

A cookie is a small text file that a website stores in your browser and that is sent back with each request. Local storage and session storage are similar browser features: local storage keeps data until you delete it, session storage until you close the tab. "First-party" means set by astrositus.com itself; "third-party" means set by another service, such as Google.

Your choices

Consent tool: In the EU/EEA, the UK and Switzerland, advertising and analytics cookies are off until you agree in the consent message (Google's certified consent management tool). In other regions, analytics measurement is on by default and advertising storage stays off until you choose otherwise. You can change your choice at any time through the privacy / cookie settings link on the page.
Browser settings: You can block or delete cookies and site data in your browser. Blocking essential cookies breaks sign-in and some settings.
Personalised ads: You can opt out in Google Ads Settings, at aboutads.info or, in Europe, at youronlinechoices.eu. How Google uses data from partner sites: policies.google.com/technologies/partner-sites.
Blockers: Tracker and ad blocking features or extensions can block the analytics and advertising scripts; the site still works.

Essential cookies (first-party)

These are needed for the site to work and cannot be switched off in the consent tool.

`NEXT_LOCALE` — remembers the language you chose. Duration: until you close the browser.
`sb-<id>-auth-token` (and the chunks `.0`, `.1` when it is large) — keeps you signed in (Supabase session). Set only when you sign in. Duration: up to 400 days, or until you sign out.
`oauth_onay` — remembers, during Google sign-in, that you accepted the terms. Duration: 15 minutes.
`auth_olay` — passes the result of a sign-in or sign-up step to the next page. Duration: 5 minutes.

Preferences and features in browser storage (first-party)

These entries stay in your browser and are not sent to our servers unless stated. Local storage entries remain until you clear them; session storage entries disappear when you close the tab.

Local storage:

`site-tema`, `site-mod` — colour theme and light / dark mode
`dh-v2-theme`, `dh-v2-anglefill` — chart wheel appearance
`as-harita-ayarlari` — chart settings for visitors who are not signed in
`referansKonum`, `referansKonumOneriKapandi` — your reference location for the sky calendar, and whether you dismissed the suggestion to set one
`bekleyenHarita`, `bekleyenAcilim` — a chart or tarot reading waiting to be saved after you sign in
`astrositus-tarot-misafir` — a random guest identifier for the "Card of the day"
`astrositus-tarot-deck` — your tarot deck preference
`as-calendar-tz`, `as-voc-mode` — calendar time zone and void-of-course Moon display
`duyuru-kapatildi` — announcements you have closed
`umami.disabled` — turns off Umami and Google Analytics measurement on this device
`ga-eposta-dogrulandi-<id>` — prevents the "email verified" event from being counted twice

Session storage:

`as-home-section` — the home page section you were on
`analitik.kayit_yeri`, `analitik.kayit_kaynagi` — where a sign-up started (general category only), for statistics
Short-lived caches (administrator flag, local sky events) and an unsaved tarot reading

Statistics without cookies (Umami)

Our own statistics tool, Umami, uses no cookies and does not store your IP address. Details, including the masked session recording on a small share of visits, are in the privacy policy.

Analytics cookies (Google Analytics 4)

Set only with consent where required (see "Your choices").

`_ga` — distinguishes visitors. Duration: 2 years.
`_ga_<container-id>` — keeps the state of the current visit. Duration: 2 years.

Google Analytics receives only the page path, never the query parameters (such as birth details) and never your account ID. Automatic page-view tracking is off; we send page views ourselves after removing personal parts of the address.

Advertising cookies (Google AdSense and partners)

Set only with consent where required. Without consent, Google may show non-personalised ads that use no advertising cookies, and ad click identifiers are removed.

`__gads`, `__gpi` — Google AdSense: ad frequency, measurement and fraud prevention. Duration: up to 13 months.
`__eoi` — Google AdSense: security and fraud prevention. Duration: up to 6 months.
`IDE` (on doubleclick.net) — Google: personalised ads and measurement. Duration: up to 13 months.
`test_cookie` (on doubleclick.net) — Google: checks whether the browser accepts cookies. Duration: 15 minutes.
Other advertising partners we work with may set their own cookies under the same consent rules; they are listed in the consent tool.

`FCCDCF`, `FCNEC` — Google's consent management tool stores your consent choice. Duration: up to 13 months.

Security cookies (Cloudflare)

`__cf_bm` — set by Cloudflare, which protects our servers, to tell people from bots. Duration: 30 minutes.

Changes and contact

We update this list when we add or remove cookies. Questions: [email protected].