Privacy and data protection
Cookie Policy
Explains which cookies are used on the www.enaresearch.com website and in the EnaResearch app, and why.
This English version is a translation provided for convenience. In case of conflict the Turkish version prevails.
This Cookie Policy explains how cookies are used on the www.enaresearch.com website, operated by ENA Innovation Sağlık ve Yazılım Teknolojileri San. Tic. A.Ş. ("ENA Innovation"), and in the EnaResearch app used by organizations running research studies. In short: our website does not use cookies. The EnaResearch app uses only cookies that are strictly necessary for the service to work, plus a few interface preferences (language, theme, menu and date range); no advertising, marketing or tracking cookies are used.
1. What is a cookie?
Cookies are small text files saved in your browser when you visit a website. They are used to keep you signed in or keep a site secure. Similar technologies, such as the browser's local storage, are also treated as "cookies" in this policy.
2. Our website (www.enaresearch.com)
2.1. Use of cookies
As of the effective date of this policy, our website does not place any cookies in your browser. Language is chosen through the address (Turkish pages at the root, English pages under /en), and no cookie is used for language preference.
If a cookie strictly necessary for the security or operation of the site is needed in the future, it will be listed on this page with its name, purpose and duration. If we ever use a cookie that is not strictly necessary, we will ask for your explicit consent before using it.
2.2. Cookieless visit statistics
We use Vercel Web Analytics and Vercel Speed Insights to understand how the site is used and how fast it loads. These tools:
- do not use cookies or similar persistent identifiers;
- do not track visitors across different websites;
- give us only aggregate data such as page views, country, device and browser type, and page load performance.
We do not use this data for advertising or profiling. See the Privacy Policy for details.
2.3. Cookie consent banner
Because our website does not use cookies, it does not show a cookie consent banner.
2.4. Organization login
The organization code you enter on the "Login" page is sent to the organization discovery service (discovery.enainnovation.com) to send you to your organization's EnaResearch address. No cookie is placed by our website for this.
3. The EnaResearch app (organizations' environments)
Each organization's environment runs at its own address (organizationcode.enaresearch.com). These environments use only first-party cookies and browser storage: strictly necessary cookies so that the organization user interface and the participant web area work, and a few settings that remember your interface preferences. They are not used for advertising or tracking, and no third-party analytics or marketing tools are used.
Cookies
| Name | Purpose | Duration | httpOnly |
|---|---|---|---|
er_pa, er_pr | Participant session in the participant web area, opened with the participant code and PIN. Sent only over HTTPS (Secure), only to the participant web area (path /p) and not with requests from other sites (SameSite=Strict) | Until the participant session ends (at most 7 days) | Yes |
logto_* | Session of organization users (owner, researcher) with our identity provider, Logto | 14 days; renewed when the session is refreshed | Yes |
ena_post_login_redirect, ena_pending_invitation_id | Return you to the right page during sign-in and invitation acceptance | Up to 10 minutes | Yes |
ena_identity_flash | Shows a one-time message after sign-in or sign-out (for example that access was denied) | 180 seconds | No |
ena_admin_locale | Remembers the language of the organization user interface | 1 year | No |
Browser storage (preferences)
| Name | Purpose | Duration |
|---|---|---|
er-admin-theme | Theme of the organization user interface (dark, light or system) | Until you clear it (local storage) |
er-admin-sidebar | Whether the side menu is collapsed | Until you clear it (local storage) |
ena.dateRange.v1:* | Date range you chose on dashboards and charts | Until you clear it (local storage) |
ena:session-expiry-redirect | Prevents repeated redirects to the sign-in page when a session expires | Until the browser tab is closed (session storage) |
Cookies that carry session or identity credentials are set as httpOnly, which means scripts on the page cannot read them. The cookies marked "No" and the browser storage entries carry no credentials. Organization users are sent to the hosted sign-in pages of our identity provider, Logto; those pages may use their own cookies needed for signing in.
3.1. Responsibility
The organization using an EnaResearch environment is the data controller for personal data processed in it. ENA Innovation acts as data processor for these environments.
3.2. The EnaResearch mobile app
The EnaResearch mobile app does not use advertising or tracking cookies. The app's session details are kept in the device's secure storage (iOS Keychain, Android Keystore). See the "Mobile app" section of the Privacy Policy for details.
4. Legal basis
Strictly necessary cookies are needed to provide the service you request. Personal data processed through these cookies is processed under Article 5(2)(c) (entering into or performing a contract) and Article 5(2)(f) (legitimate interest) of Turkish Law No. 6698 on the Protection of Personal Data; explicit consent is not required for these cookies. The preference settings listed above only remember choices you make in the interface; they are not used to identify or track you. For organizations subject to the GDPR, the UK GDPR or the Swiss FADP, the organization, as data controller, determines the legal basis for strictly necessary cookies.
5. How to control cookies
You can view, delete or block cookies in your browser settings. Common browsers:
- Google Chrome: Settings → Privacy and security → Third-party cookies / Site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions
If you block the strictly necessary cookies in the EnaResearch app, the participant web area or the organization user interface may not work.
6. Changes and contact
We may update this policy; the current version is published on this page. For questions, write to support@enainnovation.com.