Cookie Policy

01

What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, provide analytics, and deliver a better user experience.

Similar technologies — including local storage, session storage, web beacons, and pixel tags — work in comparable ways and are also covered by this policy. We refer to all of these collectively as 'cookies' throughout this document.

Cookies set by us are called 'first-party cookies'. Cookies set by parties other than Kaapaan are called 'third-party cookies'.

02

Cookies We Use

We use the following categories of cookies on the Platform:

Category	Details
Strictly Necessary	Essential for the Platform to function. They enable core features such as authentication, session management, and security controls. These cookies cannot be disabled without breaking the Service. No consent is required for these cookies.
Performance & Analytics	Help us understand how visitors interact with the Platform by collecting anonymized usage statistics — pages visited, time on page, navigation paths, and error events. We use this data to improve the Platform. These cookies are only set with your consent.
Functional	Allow the Platform to remember preferences you have made (such as language settings or UI preferences) to provide a more personalized experience. These cookies are only set with your consent.
Marketing	Used to track visitors across websites and display relevant advertising. We currently use minimal marketing cookies. If this changes, we will update this policy and request fresh consent. These cookies are only set with your explicit consent.

03

Specific Cookies in Use

Below are the specific cookies currently active on the Platform:

Category	Details
__session	Strictly Necessary · Session · Authentication session token managed by Clerk. Enables secure login and maintains your authenticated session.
__client_uat	Strictly Necessary · 1 year · Clerk client token used to detect active sessions across tabs. Required for authentication state consistency.
_kaapaan_csrf	Strictly Necessary · Session · CSRF protection token. Prevents cross-site request forgery attacks on form submissions.
_kaapaan_prefs	Functional · 1 year · Stores your UI preferences such as sidebar state and theme settings.
_vercel_no_cache	Strictly Necessary · Session · Used by our hosting provider (Vercel) to manage CDN cache bypass for dynamic pages.
_ga / _ga_*	Performance · 2 years · Google Analytics cookies used to measure traffic and usage patterns. Anonymized. Set only with consent.

This list is updated as our cookie use changes. Last reviewed: April 2025.

04

Legal Basis for Cookie Use

Our use of cookies is governed by the following legal bases:

Strictly Necessary Cookies: Legitimate interests in operating a secure and functional website. These do not require consent.
Performance, Functional, and Marketing Cookies: Your consent, obtained through our cookie consent banner on first visit. You may withdraw consent at any time.

For users in the EEA, UK, and other jurisdictions with opt-in cookie consent requirements, non-essential cookies are not activated until you provide consent. For users in jurisdictions operating on an opt-out model (such as some US states), non-essential cookies may be active by default and can be disabled via your cookie preferences.

05

Third-Party Cookies

Some cookies are set by third-party services that appear on our pages. We use the following third-party services that may set cookies:

Clerk (clerk.com): Authentication provider. Sets cookies necessary for secure login and session management. Privacy policy: clerk.com/legal/privacy.
Vercel (vercel.com): Hosting and CDN provider. Sets performance and infrastructure cookies. Privacy policy: vercel.com/legal/privacy-policy.
Google Analytics (analytics.google.com): Website analytics. Collects anonymized usage data. Only active with your consent. Privacy policy: policies.google.com/privacy.

We do not control third-party cookies. Please refer to the respective privacy policies linked above for more information about how those parties use cookies.

06

Managing Your Cookie Preferences

You have several options for controlling cookies:

Cookie Banner: When you first visit the Platform, you will be presented with a cookie consent banner where you can accept all cookies, reject non-essential cookies, or customize your preferences by category.
Browser Settings: You can configure your browser to refuse some or all cookies, or to alert you when cookies are being sent. Note that disabling cookies may affect the functionality of the Platform. Common browser cookie settings: Chrome → Settings → Privacy & Security → Cookies. Firefox → Settings → Privacy & Security → Cookies. Safari → Preferences → Privacy. Edge → Settings → Cookies and site permissions.
Opt-Out Tools: For Google Analytics, you can install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
Do Not Track: Some browsers offer a 'Do Not Track' (DNT) signal. We currently honor DNT signals by disabling analytics cookies when such a signal is detected.

07

Cookie Duration

Cookies fall into two duration categories:

Session Cookies: Temporary cookies that expire when you close your browser. Used primarily for authentication and CSRF protection.
Persistent Cookies: Remain on your device for a set period (from hours to years, as specified in the cookie table above) or until you manually delete them.

All persistent cookie durations are set to the minimum necessary to fulfil their purpose.

08

Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will update the 'Last Updated' date and, for material changes, notify you via the cookie consent banner on your next visit.

We encourage you to review this policy periodically to stay informed about our use of cookies.

09

Contact Us

If you have questions about our use of cookies or wish to exercise your rights, please contact us at privacy@kaapaan.com.

For complaints about our cookie practices, EEA users may also contact their local supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.