Cookie Policy

Last updated: December 30, 2024

1. What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They help websites remember your preferences and enable core functionality like authentication.

2. Cookies We Use

2.1 Strictly Necessary Cookies

These cookies are essential for the Service to function and cannot be disabled:

Cookie NamePurposeExpiration
access_tokenAuthenticates your session (JWT token)15 minutes
refresh_tokenMaintains login session across visits14 days
XSRF-TOKENPrevents Cross-Site Request Forgery attacksSession (browser close)

Properties: All authentication cookies are httpOnly (inaccessible to JavaScript), Secure (HTTPS only), and SameSite=lax (prevents CSRF attacks).

2.2 Performance Cookies

We currently do not use any third-party analytics or performance cookies. All analytics are first-party and aggregated (query length, result counts, error rates).

2.3 Marketing Cookies

We do not use marketing or advertising cookies.

3. Local Storage and IndexedDB

3.1 IndexedDB (Offline Cache)

For Progressive Web App (PWA) functionality, we store your inventory data in your browser's IndexedDB. This enables offline access and faster loading times.

  • What's Stored: Items, locations, tags, search history
  • Privacy: Data remains on your device only (not transmitted without your action)
  • Clearing Data: Automatically cleared when you log out
  • Security: Protect your device with a passcode or biometric lock

3.2 LocalStorage

We use localStorage for:

  • Theme Preference: Light/dark mode selection
  • UI State: Sidebar collapsed/expanded, sort preferences

This data is non-sensitive and improves your user experience.

4. Third-Party Cookies

4.1 Payment Processing (Stripe)

When you subscribe to a paid plan, Stripe may set cookies during checkout. See Stripe's Privacy Policy for details.

4.2 Content Delivery

We do not use third-party CDNs that set tracking cookies. All assets are served from our domain.

5. Managing Cookies

5.1 Browser Settings

You can control cookies through your browser settings:

  • Chrome: Settings → Privacy and Security → Cookies
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Cookies and Website Data
  • Edge: Settings → Cookies and Site Permissions

Warning: Blocking essential cookies will prevent you from logging in and using the Service.

5.2 Clearing Cookies

To clear all Dokodo cookies and data:

  1. Log out of the app
  2. Clear your browser's cookies and site data for dokodo.app
  3. Clear browser cache and IndexedDB

5.3 Do Not Track

We respect Do Not Track (DNT) browser signals. When DNT is enabled, we:

  • Do not log search queries (already the default - we only log aggregate metrics)
  • Do not use any analytics beyond essential error tracking

6. Mobile Apps (Future)

If we release native mobile apps, this Cookie Policy will be updated to cover mobile-specific storage mechanisms (Keychain, SharedPreferences, etc.).

7. Changes to This Policy

We may update this Cookie Policy to reflect changes in cookies we use or legal requirements. Changes will be posted on this page with an updated "Last updated" date.

8. Contact Us

For questions about cookies, contact us:

Summary

We use minimal cookies:

  • ✅ Essential authentication cookies (3 types)
  • ✅ Offline cache for PWA functionality (IndexedDB)
  • ✅ UI preferences (theme, layout)
  • ❌ No analytics cookies
  • ❌ No advertising/marketing cookies
  • ❌ No tracking across websites

Your data, your control. Export or delete it anytime from Settings.