Cookies & similar technologies

Last updated: 26 May 2026 · Version 1.0

This page explains how Koda uses cookies and similar technologies (like browser localStorage) on kodasocial.co.uk and inside the Koda app. It supplements our Privacy Policy.

The short version: Koda only uses cookies and storage that are strictly necessary to make the app work — sign-in sessions, remembering you've collapsed the sidebar, remembering you've already seen the tour. We don't run advertising trackers, third-party analytics, fingerprinting scripts, or session-replay tools. Because everything we use is strictly necessary, you don't need to give consent under PECR/UK GDPR — but you can clear them at any time in your browser settings.

What we use

Name	Type	Purpose	Duration
session	HTTP-only cookie	Keeps you signed in to the Koda app. Encrypted, HTTP-only, SameSite=Lax, Secure.	30 days (rolling)
koda:sidebar-collapsed	localStorage	Remembers whether you collapsed the sidebar to the icon rail.	Until cleared
koda:tour:v2:seen:home	localStorage	Stops the home tour replaying every time you open Koda.	Until cleared
koda:tour:v2:seen:client	localStorage	Stops the client tour replaying every time you open a client.	Until cleared
koda:brand-tool-used:<clientId>	localStorage	Remembers a client's brand auto-fill panels are collapsed once you've used them.	Until cleared

What we don't use

No advertising cookies, retargeting pixels or marketing trackers.
No Google Analytics, Mixpanel, Amplitude, Heap or other third-party product analytics.
No Facebook Pixel, TikTok Pixel or any other social-network tracking tag.
No session-replay tools (Hotjar, FullStory, LogRocket etc.).
No device fingerprinting.

If we ever add anything in any of these categories, we'll surface a consent banner that meets PECR and UK GDPR's standard for consent — opt-in, granular, and easy to withdraw — before any non-essential cookie is set.

Connected services

When you connect an Instagram account, Meta may set its own cookies during the OAuth flow under Meta's cookie policy. The same applies to Google if you sign in with Google. Koda does not control those cookies.

Stripe sets cookies when you visit the Stripe-hosted billing portal, governed by Stripe's cookie policy.

How to clear or block cookies

Every browser lets you clear cookies and localStorage:

Chrome: Settings → Privacy and security → Clear browsing data → choose "Cookies and other site data".
Safari: Safari → Preferences → Privacy → Manage Website Data.
Firefox: Settings → Privacy & Security → Cookies and Site Data → Clear Data.
Edge: Settings → Privacy, search, and services → Clear browsing data.

Clearing the session cookie will sign you out. Clearing the koda: localStorage entries will reset the sidebar to its default state and play the tour again.

Do Not Track

Because Koda doesn't track you across sites and doesn't use third-party analytics, Do Not Track signals don't change anything we do.

Questions

For questions about this page or how we use cookies, email [email protected].