1) Introduction — What Are Cookies?
Cookies and similar technologies (e.g., Local Storage, SDKs, pixels) are small identifiers stored on your device or app to help run the Service, improve performance, personalize experiences, and measure usage. This Notice is an integral part of Tokra’s Privacy Policy, which provides additional details on processing and safeguards.
2) Controller & Contact
Data Controller: Tokra, LLC (United States).
Privacy contact: privacy@tokra.ai.
3) Categories We Use & Purposes
Non-essential categories are off by default and only activated with your explicit consent via the Cookie Consent Center.
- (A) Strictly Necessary — required to operate the site/service (session setup, authentication, fraud prevention, load balancing). No consent required.
- (B) Functional/Preferences — remember choices (language, region, UI preferences).
- (C) Analytics/Performance — page views, crash diagnostics, feature usage, and optimization.
- (D) Marketing/Reach — campaign measurement and ad attribution (if enabled). Disabled by default unless you opt in.
- (E) Security/Operational Telemetry — detect anomalies/abuse and combat spam; may be treated as “necessary” when required for protection.
First/Third-Party. We may use first-party cookies (set by Tokra) and third-party cookies (set by trusted providers for services such as analytics or anti-fraud). The complete, up-to-date list of names, purposes, retention, and providers is shown in the Consent Center.
Effect of refusal. Refusing or withdrawing consent for non-essential categories may limit certain features (e.g., personalization, targeted ads, or specific measurements) but will not affect strictly necessary functionality.
Legal basis: (A) and (E) rely on necessity to provide/protect the Service; (B)–(D) rely on consent which you can withdraw at any time.
4) Managing Consent & Changing Your Choices
On first visit, a banner/modal lets you Accept All, Reject All (for non-essential), or Customize categories.
You can adjust choices anytime via a persistent Cookie Settings link in the footer/settings.
Rejection or withdrawal is as easy as acceptance; we do not impose unnecessary steps or penalties. Withdrawal does not affect processing prior to withdrawal.
5) Durations & Storage
- Session — removed when you close the browser/app.
- Persistent — store for a defined period (typically 1–13 months for analytics/preferences) unless deleted earlier.
We periodically review durations and apply data-minimization.
6) Sharing & International Transfers
Some usage data may be processed by subprocessors (hosting, analytics, anti-fraud, email/transactional) under protections equivalent to ours. International transfers may occur for operations; we ensure an equivalent level of protection as described in our Privacy Policy. We do not sell your personal data.
Example service categories: performance analytics, crash monitoring, anti-fraud, and messaging.
7) Browser Signals
Do Not Track (DNT): not universally honored; we make reasonable efforts to respect standardized privacy signals where technically feasible.
Global Privacy Control (GPC) & similar signals: treated as requests to restrict non-essential categories when supported.
8) Browser/OS Controls
You can delete or block cookies via your browser/OS settings. Doing so may impact some features, especially those tied to security/session.
9) Illustrative Examples (Guidance Only)
The actual list appears in the Consent Center with name, purpose, duration, and provider. Examples:
- Strictly Necessary — session/auth, fraud prevention • Session / up to 30 days
- Functional — language/region, UI preferences • 6–12 months
- Analytics — pageviews & performance • 1–13 months
- Marketing — campaign measurement/attribution • Up to 6 months (opt-in)
- Security/Operational — anomaly logs, abuse detection • Session–12 months
10) Children
We do not target children. Where processing children’s data is legally permitted and necessary, we will obtain required consents and apply heightened safeguards.
11) Proving Consent
We keep a minimal record of your consent status, notice version, and timestamp for audit and compliance.
12) Changes to This Notice
We may update this Notice (e.g., when adding categories or changing providers). We will display the new effective date and may re-request consent for materially affected categories.
13) Contact
Tokra — Privacy Team
privacy@tokra.ai