Legal
Cookie policy
Last updated: November 4, 2026
getfund uses a small number of cookies and browser storage entries so the site works and remembers your choices; one entry, kept in this tab only, tells us which channel a new account came from. Analytics sets no cookie and stores nothing in your browser until you accept in the cookie banner.
Who we are
- Legal name
- SOFTWEEN YAZILIM LİMİTED ŞİRKETİ
- MERSIS number
- 0772146927900001
- Tax ID
- 7721469279
- Address
- Ankara Cad. Yenişehir, 360 Office No:405 Kat:2 Ofis:17, 34912 Pendik / İstanbul, Türkiye
1. What we use
| Name | Type | What it is for | How long |
|---|---|---|---|
| __Host-gf_sid | Strictly necessary cookie | Keeps you signed in | 30 days, renewed while you use the service |
| __Host-gf_otp | Strictly necessary cookie | Ties a sign-in code to the browser that asked for it, so only that browser can use it | 10 minutes, deleted when you sign in |
| __Host-gf_dev | Strictly necessary security cookie | Remembers that this browser signed in to your address before, so sign-in code limits do not lock you out | 180 days, deleted when you delete your account |
| NEXT_LOCALE | Preference cookie | Remembers the language you picked | 1 year |
| fund-theme | Preference (local storage) | Remembers light or dark mode | Until you clear it |
| fund-draft | Functional (local storage) | Keeps the idea and answers you typed before signing in | Until you finish onboarding or clear it |
| fund-apply-unsaved | Functional (session storage, this tab only) | Keeps an application answer you are editing until you save it, so signing in again or reloading does not lose it | Until you save or cancel, log out or close the tab |
| fund-first-touch | Measurement (session storage, this tab only) | Remembers how you first reached getfund in this tab: the link's campaign tags (ref, utm_source, utm_medium, utm_campaign), the domain of the site that linked you here, the first page you opened and, when you came from a Google ad, the ad click identifier Google adds to the link (gclid, gbraid or wbraid), with nothing else that identifies you. Sent with your sign-in code, saved only when that sign-in creates your account and used only to know which channel a new account came from; the ad click identifier is also sent back to Google Ads, only to measure which ads lead to sign-ups and paid plans, and is not used to identify you anywhere else | Until you close the tab |
| fund-internal | Measurement (local storage) | Set only on a team member's own browser when it opens a link with the internal flag, so our own visits are left out of the statistics. Nobody else has it | Until you clear it |
| fund-consent | Preference (local storage) | Keeps your answer in the cookie banner, accept or reject, with its date and version, so we do not ask on every page | 12 months, or until you change it from "Cookie preferences" in the footer |
| ph_<key>_posthog | Analytics cookie and local storage, set only after you accept | PostHog's pseudonymous visitor and session identifiers, so product analytics can recognise your browser across visits and a sampled session recording (form fields masked) can be tied to its session | 1 year, renewed while you use the site; removed when you withdraw your consent |
2. Analytics and your choices
PostHog analytics runs in cookieless mode until you accept in the cookie banner: it sets no cookie and writes nothing to your browser's storage. Visits are counted with a hash that PostHog computes on its servers from your IP address and browser details with a salt that changes every day, so no identifier stays on your device and visits on different days cannot be linked. When you are signed in, your usage events are tied to your account; this rests on our legitimate interest in running and improving the service, and we still ask your consent separately for cookies and recording. With your consent, PostHog sets its cookies so it can recognise your browser on later visits, and records a sampled 10% of the app sessions that reach the matches page, with every form field masked; recordings are kept for 30 days. Your answer is kept in your browser's storage, and you can withdraw your consent at any time from "Cookie preferences" in the site footer: analytics then goes back to cookieless mode and PostHog's cookies are removed. Page addresses are sent without search text. If your browser sends Do Not Track or Global Privacy Control we do not start analytics at all. Events already collected can be deleted on request at support@getfund.space.
3. Checkout and security providers
When you open checkout, and when a pricing view on the Turkish site (/tr) shows prices in Turkish lira, Paddle loads its own scripts and may set cookies it needs to process the payment and prevent fraud, under Paddle's own cookie policy. On sign-in, Cloudflare Turnstile checks that you are not a bot. Cloudflare, our hosting and security provider, may set strictly necessary security cookies when it needs to check that traffic is not automated.
4. Managing cookies
You can delete cookies and site data in your browser settings at any time. If you delete the strictly necessary cookie you will be signed out.