There is very little to say here, and that is the point.
Reading the site sets no cookies at all
Not a banner cookie, not an analytics cookie, nothing. This is measured, not assumed: a request to any public page of this site comes back without a single Set-Cookie header. There is no analytics, no advertising network, no social tracking pixel and no third-party embed anywhere on the site.
One thing you can do here sets one, and it is a thing you asked for: signing in. Nothing you only read does. It is listed below, in full.
That is why the notice at the bottom of the screen tells you something rather than asking you something. There is nothing to consent to, and a box that pretends otherwise would be theatre.
The one cookie, in full
| Name | What it does | How long |
|---|---|---|
| sb-…-auth-token | Keeps you signed in. Set by our authentication provider when you follow the link in your sign-in email, and read on every request to tell whose account you are. Without it there is no way to stay signed in. | Until it expires or you sign out |
It is marked SameSite=Lax, so it is not sent when another site links to us, and Secure, so it never travels over an unencrypted connection. It is strictly necessary for a service you asked for, which is why it does not require consent under either the GDPR or Turkish law.
Three things kept in your browser that are not cookies
| Name | What it does |
|---|---|
| theme | Whether you chose the light or the dark sheet. |
| cookie-notice | That you have already seen the notice, so it stays closed. |
| entry | That you have already been asked, on your first visit, whether you came to publish or to listen. It keeps that screen from appearing again. What you answered is not recorded — only that you were asked. |
All three live in your browser's local storage. They are never sent to us, never reach our servers and never leave the device. Clearing your site data removes them, and the site works either way.
The offline copy, if you install the site
Demirhane can be installed to your home screen, and it keeps a copy of some files on your device so it opens quickly and can say something useful when you have no signal.
What it keeps is only the site's own furniture: the stylesheets and scripts the pages are built from, and the artwork. It never keeps a page. Not the one you are reading, not a draft, not your dashboard, not anything that differs from one reader to the next — so a shared or borrowed device cannot show the next person where you had been. Offline, you get a short notice saying the connection is gone, rather than the last page you looked at.
This is enforced in the code rather than intended: the only addresses it is allowed to keep are the ones holding the design files and the artwork, and a page is refused even if it somehow asks. There is a test that fails the build if that ever stops being true. Uninstalling the app, or clearing your site data, removes the copy.
If you turn notifications on
This is the one thing on the site that stores something about you on our side, and it only happens if you press the button and then allow it in your browser. Nothing is kept until you do, and nothing is kept if you say no.
What we hold is what your browser gives us: an address its notification service issues for that one device, and two keys used to encrypt messages to it. That is the whole record. It is not attached to an account, a name or an email, even if you have one with us — we do not store your IP address with it, and we cannot tell from it who you are or which articles you opened.
You will hear from us when Demirhane publishes something: writing, photography, a new artist page, a JUNK! night. Never for The Wall, which the artists post themselves, and never for anything else. There is no marketing on this channel and no way for us to use it as one.
Delivery is not something we can do ourselves. The notification is handed to whichever service your browser uses — Google for Chrome, Mozilla for Firefox, Apple for Safari, Microsoft for Edge — and that service passes it to your device. They can see that a message was sent to a device and when; they cannot read it, because it is encrypted between us and your browser with the keys above. This is the only third party in the entire site, and it exists only while you have notifications switched on.
Turning them off removes the record. The button that switched them on switches them off, and your browser's site settings will do it too. Uninstalling the app, clearing site data, or simply not opening the site for long enough that the service drops the subscription all have the same effect: the row is deleted the first time a delivery comes back saying the device is gone.
If this changes
If we ever add something that tracks you — analytics, an embedded player, anything at all — this page changes first and the notice becomes a real choice, with refusing as easy as accepting. We will not add it quietly.
Clearing what is stored
Your browser's settings for this site clear all of it. Signing out removes the sign-in cookie. Questions: demirhanesound@gmail.com.
See also Terms of Use and Privacy.