Privacy and cookie policy (website)

Scope

This policy covers the website egridium.com and the services served from it: the contact form, the site assistant, the public API and the MCP endpoint.

The ChargeBridge hub portal and the data exchanged between partners over OCPI are outside this policy; they are governed by the participation agreement and the data processing agreement signed with each partner.

Cookies and local storage

This site sets no tracking or advertising cookies and loads no third-party analytics script. Only the following essential storage is used:

• A single flag in browser local storage (localStorage) to remember that you dismissed the cookie notice.
• Session storage (sessionStorage) to keep your site assistant conversation for the duration of the tab, plus a short-lived signed session token for assistant requests.
• When Cloudflare Turnstile is enabled against abuse, Turnstile may set its own essential cookie.

Contact form

The data you provide in the form (role, full name, company, work e-mail, optional phone, optional size and free text) is processed only to answer your application and is delivered by e-mail to E-Gridium. The form uses a hidden field as bot protection; submissions that fill it are rejected.

No announcements are sent unless you tick the marketing consent box. You can withdraw consent at any time by writing to the e-mail address below.

Records are retained for the duration of the correspondence and then for the statutory period, after which they are deleted.

Site assistant

Questions you type into the assistant, together with the earlier messages of that conversation, are sent to a model provider (Anthropic API) to generate an answer grounded in the site content. Answers are AI-generated and carry no commercial commitment; commercial terms are set in the participation agreement.

No account is created. To prevent abuse and review answer quality, the conversation text, page URL, language and IP address are e-mailed to E-Gridium.

Please do not enter personal data (ID numbers, card details, driver data and the like); the assistant does not need it.

Server logs and rate limiting

IP-based request limits apply to the contact form, the assistant, the public API and the MCP endpoint. The IP address is kept for a short period for this purpose and is not used for anything else.

The hosting provider may keep standard server logs for security and debugging; these logs are not used to identify individuals.

Cloudflare Turnstile

Cloudflare Turnstile may be used on the contact form and the assistant against automated abuse. Turnstile processes technical signals to verify that a request comes from a browser; Cloudflare acts as a processor for that check.

Public API and MCP

The public API and the MCP endpoint require no account, serve no personal data and return only the published catalogue. No personal data is expected in requests; incoming requests are counted per IP solely for rate limiting.

Your rights

Under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the GDPR, you have the right to access, rectify and erase your data, to restrict or object to processing, and to lodge a complaint with the supervisory authority. Send requests to [email protected].

Controller

The data controller is E-Gridium. Contact: [email protected].

Changes

This text was last updated on 4 October 2026. Changes are published on this page.