Cookie Policy
Draft for legal review. The banner wording, categories, retention and vendor list must be confirmed before launch.
1. Technologies we use
Aky may use cookies, localStorage and similar technologies for login, CSRF protection, consent storage, language or UI preferences, security, analytics, personalization and marketing.
Strictly necessary technologies may be used without consent. Analytics, marketing and personalization identifiers are enabled only after consent.
2. Current necessary storage
- aky_csrf - CSRF protection for secure form and API requests.
- aky_at and aky_rt - access and refresh tokens for logged-in users.
- aky_consent_v1 - consent choices stored in the browser.
- aky_anon_id - anonymous ID used for consent logging where needed.
3. Optional categories
- Analytics: site usage, performance, errors and marketplace funnel measurement.
- Marketing: ad pixels, conversions, campaigns, remarketing and similar ad services.
- Recommendations: personalization and listing suggestions based on explicit choices or behavior where consent is required.
4. Managing choices and third parties
The banner allows users to accept all, reject optional categories or configure individual choices. Consent can be changed or withdrawn as easily as it was given.
Aky must not load third-party analytics or marketing tools before consent. Before launch, the vendor list must state each vendor, purpose, retention, transfer status and policy link.
Fraud and security signals must not be used for marketing or recommendations. Fingerprinting is blocked until legal approval and DPIA.