3. Why Do We Use Cookies?

ONS Mail uses cookies solely for the purpose of providing its services in a secure, efficient, and user-focused manner. The scope of the cookies used may vary depending on the service you visit, your session status, the device and browser you use, and your cookie preferences.

Cookies may be used for the following purposes:

3.1 Provision of Services

Cookies are used to ensure the core functionality of the ONS Mail website and user panel. In this context, they may be used to:

• Manage user sessions,

• Authenticate user accounts,

• Enable secure navigation between pages,

• Ensure the proper functioning of the services.

3.2 Ensuring Security

Cookies may be used to protect user accounts and the ONS Mail infrastructure.

In this context, security cookies may be used for the following purposes:

• Preventing unauthorized access,

• Ensuring session security,

• Two-Factor Authentication (2FA),

• CSRF protection,

• Preventing bots and automated attacks,

• Detecting fraud attempts,

• Analyzing security incidents.

3.3 Remembering User Preferences

Cookies may store personal preferences in order to improve the user experience.

For example, your:

• Language preference,

• Theme selection (Light/Dark Mode),

• Time zone,

• Interface settings,

• Notification preferences,

• Most recently used options,

may be automatically applied during your next visit.

3.4 Improving Performance and Service Quality

Cookies may be used to evaluate the performance of ONS Mail services and to make technical improvements.

In this context, anonymous or aggregated statistics relating to the following may be analyzed:

• Page loading times,

• System performance,

• Technical errors,

• Service usage volume,

• Frequency of feature usage.

3.5 Improving Our Services

Technical information obtained through cookies may be used to improve the user experience, develop new features, and enhance existing services.

Wherever possible, these analyses are performed using aggregated or anonymous data.

3.6 Compliance with Legal Obligations

Certain cookies may be used to enable ONS Mail to comply with its legal obligations under applicable laws.

In this context, the necessary technical processes may be carried out for purposes including:

• Maintaining security logs,

• Preventing fraud,

• Ensuring account security,

• Complying with lawful requests from competent authorities.

3.7 Use for Advertising Purposes

ONS Mail does not analyze the content of users' emails for advertising purposes and does not sell personal data for advertising targeting.

If advertising or marketing cookies are used, ONS Mail will obtain the user's prior explicit consent where required by applicable law. Unless otherwise stated, ONS Mail does not use cookies for advertising targeting purposes within its services.

4. First-Party and Third-Party Cookies

During the provision of its services, ONS Mail may use both cookies created by ONS Mail itself (first-party cookies) and cookies belonging to authorized third-party service providers where necessary for the provision of specific services.

Third-party cookies are used solely for the purposes of providing necessary services, ensuring security, processing payments, or delivering analytics services where user consent is required.

4.1 First-Party Cookies

First-party cookies are cookies that are created and managed directly by ONS Mail.

These cookies may be used for the following purposes:

• Managing user sessions,

• User account authentication,

• Remembering language preferences,

• Storing theme settings,

• Performing security checks,

• Remembering user preferences,

• Improving service performance,

• Ensuring system stability.

First-party cookies are essential for the core functionality of ONS Mail services.

4.2 Third-Party Cookies

ONS Mail may use trusted third-party service providers to deliver certain services.

Where necessary, third-party cookies may be used for purposes including:

• Bot protection and security verification services,

• Processing payment transactions,

• Performance and analytics services (where user consent has been obtained),

• Content delivery and security infrastructure,

• Technical integrations.

Cookies used by third-party service providers are subject to the respective provider's own Privacy Policy and Terms of Service.

4.3 Third-Party Service Providers

Depending on the nature of the services provided, ONS Mail may work with third-party service providers in the following categories:

• Security and bot protection services,

• Payment infrastructure providers,

• DNS and domain name services,

• Content Delivery Networks (CDNs),

• Performance and analytics services,

• Cloud infrastructure and technical service providers.

These service providers may process data only to the extent necessary for providing their services and are required to comply with applicable data protection laws.

4.4 User Preferences

Non-essential third-party cookies will only be used with the user's explicit consent where required by applicable law.

Users may change or withdraw their cookie preferences through the cookie management panel, account settings (where applicable), or their web browser settings.

Disabling strictly necessary cookies may cause certain parts of ONS Mail services to function improperly.

5. Third-Party Services We Use

ONS Mail may work with selected third-party service providers to ensure that its services are delivered securely, efficiently, and reliably. These service providers may process data only to the extent necessary to provide their services and are required to comply with applicable data protection legislation.

Third-party service providers may change over time, new services may be introduced, or existing services may be discontinued.

5.1 Security Services

ONS Mail may use various security services to protect user accounts and its infrastructure.

These services may be used for purposes including:

• Preventing bots and automated attacks,

• Protection against DDoS attacks,

• Preventing spam and abuse,

• Security verification,

• Traffic security,

• SSL/TLS certificate management.

Strictly necessary security cookies may be used in connection with these services.

5.2 Domain Name and DNS Services

As part of Business Mail and Custom Domain services, ONS Mail may use third-party DNS and domain name providers.

These services may be used for technical operations including:

• Domain verification,

• DNS record management,

• Domain routing,

• Email authentication records (SPF, DKIM, DMARC).

5.3 Payment Services

Payments for paid subscriptions may be processed through authorized payment service providers.

Payment providers may offer services including:

• Credit card transactions,

• Digital payment methods,

• Cryptocurrency payments (where supported),

• Billing services.

ONS Mail may not store payment card information within its own systems. Payment transactions are processed in accordance with the security standards of the respective payment service providers.

5.4 Performance and Analytics Services

Where the user's explicit consent is required, ONS Mail may use analytics services to evaluate service performance and improve the user experience.

These services may be used for purposes including:

• Measuring page performance,

• Identifying technical errors,

• Generating usage statistics,

• Improving service quality.

Analytics services are configured, wherever possible, to operate using anonymous or aggregated data.

5.5 External Integrations

ONS Mail may integrate with various third-party software applications, APIs, and technical services to provide its services.

These integrations may be used for:

• Email clients,

• Calendar applications,

• Authentication services,

• Enterprise integrations,

• API services,

• Other technical solutions.

Third-party applications enabled at the user's request are subject to the respective service provider's own Privacy Policy and Terms of Service.

5.6 Updates

ONS Mail reserves the right to change the third-party service providers it uses, add new service providers, or discontinue existing services in response to security requirements, technical necessities, performance improvements, or legal obligations.

Where required, such changes will be communicated to users by updating this Cookie Policy and other relevant policy documents.

6. Cookie Retention Periods

Cookies used by ONS Mail may be retained for different periods depending on their purpose and type. Cookies are stored on your device only for as long as they are necessary and are automatically deleted or anonymized once the applicable retention period expires.

Cookie retention periods are determined by taking into account applicable data protection legislation, technical requirements, and service security.

6.1 Session Cookies

Session Cookies remain valid only for the duration of your active browser session.

These cookies are used for purposes including:

• Managing user sessions,

• Secure login procedures,

• Secure navigation between pages,

• User authentication,

• Temporary security checks.

These cookies are automatically deleted when you close your browser or end your session.

6.2 Persistent Cookies

Persistent Cookies are stored on your device for a specified period and enable your preferences to be remembered during future visits.

These cookies may be used, for example, for:

• Language preferences,

• Theme selection,

• User settings,

• Cookie preferences,

• Other personalization options.

Persistent cookies are retained for different periods depending on their purpose and are automatically deleted once their retention period expires.

6.3 Security Cookies

Cookies used for security purposes may be retained for as long as necessary to ensure account security and prevent abuse.

These cookies may be used for purposes including:

• Session security,

• Two-Factor Authentication (2FA),

• Bot protection,

• Fraud prevention,

• Detection of suspicious sessions,

• Security verification.

The retention periods of these cookies may vary depending on security requirements.

6.4 Analytics Cookies

Analytics cookies may be used for performance measurement and service improvement where the user's explicit consent is required.

These cookies are retained only for as long as necessary and are deleted or anonymized upon the expiration of the applicable retention period in accordance with relevant legislation.

6.5 Updates to Retention Periods

ONS Mail may update the retention periods of cookies in response to technical requirements, security needs, service improvements, or changes in applicable legislation.

Updated retention periods and any changes relating to the use of cookies will be published in the latest version of this Cookie Policy.

7. How Can You Manage Your Cookie Preferences?

ONS Mail values users' ability to manage their cookie preferences and exercise control over their personal data. Users may change or withdraw their consent for non-essential cookies at any time.

However, if strictly necessary cookies are disabled, certain parts of ONS Mail services may not function properly or certain security features may become unavailable.

7.1 Cookie Preference Panel

Where applicable, ONS Mail may provide a Cookie Preference Panel through which users can manage their cookie preferences.

Through this panel, users may:

• Enable or disable analytics cookies,

• Modify functional cookie preferences,

• Withdraw previously given cookie consent,

• View their current cookie preferences.

Cookies that are legally required may not be disabled through this panel.

7.2 Browser Settings

Most web browsers allow users to manage cookies.

Through their browser settings, users may:

• Block all cookies,

• Delete existing cookies,

• Allow or block specific websites,

• Automatically delete cookies when the browser is closed,

• Receive notifications before new cookies are created.

Changes made through browser settings apply only to the device and browser on which those settings are configured.

7.3 Mobile Devices

When using mobile applications or mobile browsers, cookies and similar technologies may be managed through the operating system or application settings of the device.

Privacy and permission settings may vary depending on the operating system being used.

7.4 Withdrawal of Consent

Users may withdraw their consent for non-essential cookies at any time.

The withdrawal of consent does not affect the lawfulness of any data processing carried out prior to the withdrawal.

Once consent has been withdrawn, the relevant cookies will no longer be used and, where technically feasible, any existing cookies will be deleted.

7.5 Consequences of Disabling Cookies

If cookies are disabled, either entirely or partially, the following functions may be affected:

• Login procedures,

• Remembering user preferences,

• Language and theme settings,

• Security verification,

• Two-Factor Authentication (2FA) processes,

• Certain user panel features,

• Service performance and ease of use.

Disabling strictly necessary cookies may prevent ONS Mail services from operating securely and correctly.

7.6 Help and Support

If you have any questions or requests regarding your cookie preferences, you may contact ONS Mail through our official support channels.

Detailed information regarding your rights related to the processing of personal data and the applicable request procedures is available in the ONS Mail Privacy Policy.

8. Deleting and Blocking Cookies Through Browser Settings

Most web browsers allow users to view, delete, block, or customize their cookie preferences. The methods for managing cookies may vary depending on the browser and device you use.

If cookies are completely blocked or deleted, certain features of ONS Mail may not function as intended. In particular, session management, security verification, user preferences, and personalization features may be affected.

8.1 Deleting Cookies

You may delete previously stored cookies through your browser's privacy or browsing history settings.

After deleting cookies:

• Saved sessions may end,

• You may be required to log in again,

• Preferences such as language and theme may be reset,

• Cookie consent may be requested again.

8.2 Blocking Cookies

You may block all cookies or cookies from specific websites through your browser settings.

However, if cookies are completely blocked, the following functions may partially or completely cease to operate:

• Secure login,

• User session management,

• Account security,

• Two-Factor Authentication (2FA),

• User preferences,

• Certain features of Web Mail and the user panel.

8.3 Browser Help Pages

Up-to-date information on how to manage cookie settings is available through the official help pages of your web browser.

Commonly used web browsers include:

• Google Chrome,

• Mozilla Firefox,

• Microsoft Edge,

• Apple Safari,

• Opera.

As browser manufacturers may update their settings menus from time to time, it is recommended that you consult the official support documentation for your browser to obtain the most current information.

8.4 Mobile Browsers

Mobile browsers used on smartphones and tablets also provide cookie management options.

Users may delete, block, or modify cookie preferences through the privacy settings of their devices or mobile browsers.

8.5 Important Considerations

Deleting or blocking cookies may affect the core security mechanisms and overall user experience of ONS Mail.

In particular, disabling strictly necessary cookies may result in:

• Reduced account security,

• Sessions ending unexpectedly,

• Certain services becoming unavailable,

• Preferences having to be reconfigured during each visit.

For this reason, it is recommended that only non-essential cookies be managed according to the user's preferences.

9. Consequences of Rejecting Cookies

ONS Mail supports users' ability to freely manage their cookie preferences. However, rejecting or disabling certain cookies may cause parts of the services to function differently than intended.

In particular, strictly necessary cookies are essential for the secure and proper operation of the services.

9.1 Rejecting Strictly Necessary Cookies

If strictly necessary cookies are blocked or deleted, the following functions may become partially or completely unavailable:

• Secure login,

• User authentication,

• Session management,

• Web Mail access,

• User panel functionality,

• Security checks,

• Two-Factor Authentication (2FA),

• CSRF protection and similar security mechanisms.

For this reason, disabling strictly necessary cookies is not recommended.

9.2 Rejecting Functional and Preference Cookies

If functional or preference cookies are rejected:

• Language preferences may not be remembered,

• Light/Dark Mode settings may not be saved,

• Display preferences may be reset,

• The user experience may no longer be personalized,

• Certain convenience features may become unavailable.

Rejecting these cookies generally does not affect the core functionality of the service but may reduce the overall user experience.

9.3 Rejecting Performance and Analytics Cookies

If performance and analytics cookies are rejected, ONS Mail will continue to provide its core services.

However:

• Performance measurements may not be available,

• Anonymous usage statistics may not be generated,

• Analytics data used for technical improvements may be limited.

This affects only service improvement processes and does not prevent users from accessing the core services.

9.4 Impact on Security

If certain security cookies are disabled:

• Detecting suspicious sessions may become more difficult,

• Account protection mechanisms may be limited,

• Security verification processes may not function properly,

• Systems designed to prevent abuse may be affected.

ONS Mail may continue to use the necessary security cookies required to protect user accounts.

9.5 User Choice

Users have the right, under applicable data protection legislation, to accept or reject non-essential cookies.

Cookie preferences may be changed at any time through the Cookie Preference Panel (where available), account settings, or the privacy settings of the user's web browser.

Changing your cookie preferences does not affect the lawfulness of any data processing carried out before the preference change.

10. Your Rights Under KVKK and GDPR

ONS Mail places great importance on the protection of personal data. With respect to personal data processed through cookies, users have various rights under the Personal Data Protection Law No. 6698 (KVKK), the European Union General Data Protection Regulation (GDPR), and other applicable data protection legislation, where applicable.

These rights may be exercised within the conditions and exceptions provided by applicable law.

10.1 Rights Under KVKK

Pursuant to Article 11 of the Personal Data Protection Law (KVKK), data subjects whose personal data are processed may have the following rights:

• To learn whether their personal data are being processed,

• To request information if their personal data have been processed,

• To learn the purpose of the processing and whether the data are used in accordance with that purpose,

• To learn the third parties to whom personal data are transferred, whether within Türkiye or abroad,

• To request the correction of incomplete or inaccurate personal data,

• To request the deletion or destruction of personal data under the conditions set forth in the KVKK,

• To request that corrections, deletions, or destruction of personal data be notified to third parties to whom the data have been transferred,

• To object to a result that is unfavorable to them arising exclusively from the analysis of processed data through automated systems,

• To request compensation for damages in the event of harm caused by the unlawful processing of personal data.

10.2 Rights Under GDPR

Where the GDPR applies, users may exercise the following rights:

• The right of access to personal data,

• The right to request the correction of inaccurate or incomplete personal data,

• The right to request the deletion of personal data under certain conditions ("Right to be Forgotten"),

• The right to request the restriction of processing,

• The right to data portability,

• The right to object to certain data processing activities,

• The right to withdraw consent at any time where processing is based on explicit consent,

• The right to lodge a complaint with the competent data protection authority.

10.3 Cookie Preferences and Withdrawal of Consent

Users may withdraw their explicit consent for non-essential cookies or modify their cookie preferences at any time.

Withdrawal of consent:

• Does not affect the lawfulness of data processing carried out before the withdrawal,

• Does not apply to the use of strictly necessary cookies,

• May limit the user experience where it affects the core functionality of the services.

Cookie preferences may be managed, where applicable, through the Cookie Preference Panel, account settings, or the privacy settings of the user's web browser.

10.4 How to Submit a Request

You may submit requests regarding your rights under the KVKK, GDPR, or other applicable data protection legislation through ONS Mail's official data protection communication channels.

Requests are evaluated in accordance with:

• Applicable legislation,

• Identity verification procedures,

• Data security requirements,

and are concluded within the legal time limits.

Current contact information and detailed instructions for submitting requests are available in the ONS Mail Privacy Policy and on our official contact pages.

11. Children's Privacy

ONS Mail places special importance on protecting children's personal data. Unless otherwise required by applicable law, our services are intended for users who are of legal age to enter into binding agreements on their own behalf.

11.1 Age Requirement

To use ONS Mail services, users must meet the minimum legal age requirement under the laws of their country or, where required, obtain the consent of a parent or legal guardian.

It is not intended that children below the applicable legal age create accounts or use the services without the necessary permissions.

11.2 No Knowing Collection of Children's Data

ONS Mail does not knowingly collect personal data from children in violation of applicable law.

If it is determined that a child's personal data have been processed without the required permissions, ONS Mail may review the relevant account and take the necessary actions in accordance with applicable law. Such actions may include deleting the data, suspending the account, or permanently closing the account.

11.3 Requests from Parents and Legal Guardians

Parents or legal guardians who believe that ONS Mail is processing their child's personal data may contact us.

Following successful identity verification, requests deemed appropriate under applicable law will be evaluated and the necessary actions will be taken.

11.4 Compliance with Data Protection Laws

ONS Mail aims to process children's personal data in compliance, where applicable, with the Personal Data Protection Law No. 6698 (KVKK), the European Union General Data Protection Regulation (GDPR), and other applicable laws governing the protection of children's personal data.

Children's personal data are processed only where there is a valid legal basis and only to the extent necessary. Appropriate technical and organizational security measures are implemented to protect such data.

12. Changes to this Cookie Policy

ONS Mail reserves the right to modify or update this Cookie Policy from time to time in response to technological developments, changes to our services, applicable legislation, or updates to data protection practices.

Any changes are published to ensure that users have access to accurate and up-to-date information regarding how cookies are used.

12.1 Updates to the Policy

This Cookie Policy may be updated for reasons including, but not limited to:

• The introduction of new types of cookies,

• Changes to the purposes for which existing cookies are used,

• The introduction of new services or features,

• Changes to third-party service providers,

• Amendments to the KVKK, GDPR, or other applicable data protection legislation,

• Security or technical requirements,

• Court decisions or administrative regulations.

12.2 Notification of Changes

Where significant changes are made, ONS Mail may notify users through one or more communication methods it considers appropriate.

Notifications may be provided through:

• Announcements on the ONS Mail website,

• The cookie notification panel,

• Notifications within the user account,

• Informational emails sent to the registered email address,

• Other appropriate electronic communication methods.

Where permitted by applicable law, individual notification of every change may not be required.

12.3 Effective Date of the Updated Policy

Unless otherwise stated, the updated Cookie Policy becomes effective on the date it is published on the ONS Mail website.

The most current version of the Policy will always be available on the official ONS Mail website and replaces all previous versions.

Users are responsible for reviewing the updated Policy on a regular basis. Changes relating to the use of non-essential cookies will be implemented with the user's consent where required by applicable data protection legislation.

13. Contact Information

If you have any questions, requests, or applications regarding the use of cookies, the processing of personal data, or this Cookie Policy, you may contact us through ONS Mail's official communication channels.

ONS Mail aims to evaluate applications submitted under applicable legislation within a reasonable period and, where necessary, provide an appropriate response.

13.1 Support

You may use ONS Mail's support channels for questions regarding the use of cookies, account settings, technical issues, and the overall user experience.

To facilitate a faster review of your support request, it is recommended that you provide as much detailed information as possible.

13.2 Data Protection Requests

To exercise your rights regarding your personal data and data processing activities carried out through cookies, you may submit your request through ONS Mail's official data protection communication channels.

Requests will be evaluated in accordance with the Personal Data Protection Law No. 6698 (KVKK), the European Union General Data Protection Regulation (GDPR), and other applicable data protection legislation.

Where deemed necessary, identity verification may be requested to ensure that your request is processed securely.

13.3 Legal Notices

Legal notices relating to this Cookie Policy, requests from public authorities, or other legal applications must be submitted only through the official communication channels announced by ONS Mail.

ONS Mail reserves the right to request additional information for applications that are incomplete or not submitted in accordance with the applicable procedures.

13.4 Communication Channels

You may contact ONS Mail through the following official communication channels:

• Support Center

• Support Email Address

• Data Protection Request Address

• Legal Notice Address

• Contact Form

• Official Website

ONS Mail may update its contact information and application procedures from time to time. The most current contact information should always be obtained from the version published on the official ONS Mail website.

Final Provision

This Cookie Policy has been prepared to inform users about the cookies and similar technologies used by ONS Mail and should be read together with the ONS Mail Privacy Policy.

If any provision of this Cookie Policy is determined to be invalid or unenforceable under applicable law, the validity and enforceability of the remaining provisions shall not be affected.

Last Updated: June 25, 2026