Cookie Policy

1. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and provide information to website owners.

Cookies can be "first-party" (set by the website you are visiting) or "third-party" (set by a different website). Cookies can also be "session" cookies (deleted when you close your browser) or "persistent" cookies (remain on your device for a set period or until you delete them).

2. Similar Technologies

In addition to cookies, we may use a limited set of similar technologies, including:

• Local Storage: Browser local storage used by the Dashboard to hold non-sensitive UI state such as theme or layout preferences;
• Session Storage: Similar to local storage but cleared when the browser session ends;
• JavaScript: Programming code used to implement the Dashboard.

Kodus does not use web beacons, tracking pixels, device fingerprinting, or other cross-site advertising technologies.

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the Dashboard to function. They enable basic features like page navigation, secure areas access, and user authentication. The Dashboard cannot function properly without these cookies.

3.2 Functionality Cookies

These cookies remember non-essential UI choices such as theme or layout state.

3.3 Payment Processor Cookies

When you view or interact with a Square-hosted payment iframe on the Dashboard (for example, when entering or updating a card on file), Square sets cookies within that iframe to process your payment securely and to combat fraud. Those cookies are governed by Square's privacy and cookie policies; we do not read them.

3.4 No Advertising or Cross-Site Tracking Cookies

Kodus does not set advertising cookies, retargeting pixels, or third-party analytics cookies such as Facebook Pixel, Google Ads, TikTok pixels, or Snapchat pixels. We do not sell or share your personal information with advertising networks.

4. Third-Party Cookies

The small number of third-party cookies set through our Services come only from providers strictly necessary to deliver the Service:

• Square: Payment processing; cookies are set within Square-hosted payment iframes as described in Section 3.3.

Please refer to Square's privacy and cookie policies for more information about their cookies. We do not embed advertising, tracking-pixel, or social-widget cookies from any third party.

5. How We Use Cookies

We use cookies for the following purposes:

• Authentication: To recognize you when you sign in and maintain your session;
• Security: To protect your account against CSRF and session hijacking;
• Preferences: To remember non-sensitive UI settings such as theme and sidebar state;
• Payments: To allow Square to process subscription payments securely inside its embedded iframe.

6. Managing Cookies

6.1 Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically:

• View what cookies are stored on your device;
• Delete all or specific cookies;
• Block all cookies;
• Block third-party cookies;
• Clear cookies when you close your browser;
• Open "private browsing" or "incognito" sessions.

Here are links to manage cookies in popular browsers:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

7. Consequences of Disabling Cookies

If you choose to disable cookies:

• You will not be able to sign in to the Dashboard;
• UI preferences such as theme and sidebar state will not be remembered;
• Subscription payment flows served by Square may not operate correctly.

8. Do Not Track and Global Privacy Control

Because Kodus does not engage in advertising, cross-site tracking, or the sale of personal information, Do Not Track (DNT) and Global Privacy Control (GPC) signals have no practical effect on our cookie usage; all cookies we set are either strictly necessary or limited functionality cookies as described above.

9. Children's Privacy

Our Services are not directed to children under 16. We do not knowingly collect cookies or tracking data from children. If you believe we have collected such data, please contact us.

10. International Considerations

10.1 European Union (GDPR/ePrivacy)

If you are located in the European Union, the cookies we set are limited to strictly necessary and functionality cookies supporting the Dashboard you have chosen to sign in to, together with the Square payment iframe when you use paid-plan features; consent for such cookies is grounded in the necessity to provide the Service you have requested.

10.2 California (CCPA)

If you are a California resident, you have rights under CCPA including the right to know and the right to delete. Kodus does not sell or share personal information for cross-context behavioral advertising. See the Do Not Sell or Share page for additional detail.

10.3 Other Jurisdictions

We comply with applicable cookie and privacy laws in all jurisdictions where we operate. If your local law provides additional rights, those rights will be honored.

11. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about our use of cookies or this Cookie Policy, please contact us: