diff --git a/bootstrap/app.php b/bootstrap/app.php
index c2e4939..665ac6e 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -35,8 +35,12 @@ return Application::configure(basePath: dirname(__DIR__))
         $middleware->web(\App\Http\Middleware\BotDetector::class);
         // SEO yönlendirmeleri
         $middleware->web(\App\Http\Middleware\SeoRedirectMiddleware::class);
-        // iyzico callback CSRF muaf
-        $middleware->validateCsrfTokens(except: ['checkout/callback']);
+        // iyzico callback ve arka plan izleme metrikleri (beacon/fetch) CSRF muaf
+        $middleware->validateCsrfTokens(except: [
+            'checkout/callback',
+            'track/*',
+            'api/*',
+        ]);
     })
     ->withExceptions(function (Exceptions $exceptions): void {
         //