Cookie Policy
KudosDrop is designed from the ground up to be privacy-first. We do not use advertising trackers, marketing pixels, or cross-site profiling cookies. Below is an itemized inventory of every cookie and storage technology we use.
Global Privacy Control (GPC)
We support and automatically honor the Global Privacy Control (GPC) signal. If your browser sends the GPC signal, all optional analytics and performance telemetry are automatically disabled by default.
Storage technologies in use
| Name | Type | Category | Purpose | Duration |
|---|---|---|---|---|
| kd_consent | Cookie & LocalStorage | Strictly necessary | Stores your selected cookie and privacy consent choices with an anonymous audit identifier. | 180 days |
| kd_admin | HttpOnly Cookie | Strictly necessary | Authenticates card organizers after PIN verification for card settings and recipient reveal. | 12 hours |
| kd_ops | HttpOnly Cookie | Strictly necessary | Authorizes platform operators for administrative maintenance and support. | Session |
| cf_clearance / Turnstile | Security Tokens | Strictly necessary | Cloudflare bot verification and DDoS mitigation to protect greeting cards from spam and abuse. | Session / 30 min |
| kd-theme | LocalStorage | Preferences & functional | Remembers your preferred display theme (light, dark, or system preference). | Persistent |
| kd-locale | LocalStorage | Preferences & functional | Remembers your language choice across visits. | Persistent |
| kd:create-card:draft | LocalStorage | Preferences & functional | Saves your card creation draft in progress so your work is not lost if your browser closes. | 7 days |
| OpenTelemetry | API (/api/otlp) | Performance & telemetry | Aggregated latency metrics and client error diagnostic traces to help resolve bugs and maintain platform reliability. | Session |