Cookie Notice

Cookies and similar technologies

Cookies are small text files a website stores in your browser. This notice also covers similar technologies, such as the browser’s local storage (localStorage).

Public pages

Our public pages write no cookies to your browser, our server sets no cookies in their responses, and the site stores nothing in your browser’s storage. We use no analytics, advertising or marketing tools or scripts. Fonts are loaded from our own site.

The language is set by the address you open: Turkish pages start with /tr, English pages with /en. When you open maxellm.com itself, you are sent to the Turkish or English page according to your browser’s language preference. Your language is stored neither in your browser nor on our server.

The images in the work section of the homepage are loaded from studio.seedstone.xyz. That address sets no cookies; when your browser connects to it for the images, it receives your IP address and browser information.

Form pages: Cloudflare Turnstile

On the pages with the contact and quote forms (the homepage and Packages), the Cloudflare Turnstile widget is loaded to protect the forms from automated (bot) submissions. It runs in its own frame from challenges.cloudflare.com and writes the key cf.turnstile.u to that address’s local storage. To verify, Cloudflare processes your IP address, browser information and technical features of your connection; it does not access what you type into the form. Turnstile reports its result with a one-time token, not a cookie; in our checks no cookie was set on these pages.

Admin panel

The admin panel (/admin) is for authorised people only. When they sign in, two cookies are written to their browser; visitors to the site never get them.

What is stored

cf.turnstile.u (localStorage)

Third party: Cloudflare, Inc. (challenges.cloudflare.com). On the form pages only; protects the forms from bot submissions. Its lifetime is set by Cloudflare; you can delete it in your browser.

__Host-maxellm-oauth (cookie)

First party: maxellm.com. Administrators only; secures the GitHub sign-in step. At most 10 minutes.

__Host-maxellm-admin (cookie)

First party: maxellm.com. Panel users only; keeps the session. At most 12 hours.

Hosting and domain services

maxellm.com’s DNS records are kept at Cloudflare as “DNS only”: our traffic does not pass through Cloudflare, and Cloudflare sets no cookies on our site. During unusual traffic such as an attack, Vercel may show visitors a security check (Vercel Security Checkpoint) on its own; a browser that passes it gets a verification session from Vercel, valid for one hour. It serves only the security of the site and is managed by Vercel.

Consent

Everything listed above is strictly necessary to provide what you asked for (sending a form, signing in to the panel) securely. The legal basis for the personal data processed with it is our legitimate interest in the security of the forms and the panel (KVKK art. 5(2)(f); GDPR art. 6(1)(f) where the GDPR applies), so we do not ask for cookie consent. If we ever start using a cookie or similar technology that is not strictly necessary, such as for analytics, advertising or marketing, we will describe it here first and ask for your consent before using it.

Your choices

You can view, delete or block cookies and local storage in your browser’s settings. If you block challenges.cloudflare.com, the forms cannot complete their check; you can e-mail us instead.

More about the personal data processed this way is in our Privacy Policy.