Cookie Policy

Last updated: January 9, 2026

1. What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help the site function, remember preferences, and understand usage. Similar technologies include localStorage, sessionStorage, and tracking pixels.

This policy covers all such technologies used by KudiFlow AI on kudiflow.online and subdomains.

2. Cookie Categories We Use

CategoryPurposeConsent Required
Essential (Strictly Necessary)Authentication, session management, CSRF protection, load balancing, fraud preventionNo (Art. 6(1)(f) GDPR / legitimate interest)
FunctionalRemember theme (dark/light), language, onboarding completionNo (legitimate interest)
AnalyticsUnderstand usage, improve UX (Vercel Analytics, PostHog)Yes (opt-in via banner)
MarketingWe do not use marketing/advertising cookiesN/A

3. Specific Cookies & Storage

Cookies

NameProviderPurposeExpiresType
__sessionKudiFlowAuth session (HttpOnly, Secure, SameSite=Lax)30 daysEssential
csrf_tokenKudiFlowCSRF protection on formsSessionEssential
themeKudiFlowDark/light preference1 yearFunctional
cookie_consentKudiFlowRemembers your cookie choices1 yearEssential
va_*Vercel AnalyticsPage views, session (anonymized)13 monthsAnalytics
ph_*PostHogProduct analytics (anonymized)13 monthsAnalytics

LocalStorage / SessionStorage

  • onboarding_complete: Boolean — hides onboarding flow (Functional)
  • ussd_guide_dismissed: Boolean — hides USSD banner (Functional)
  • cache_ledger_*: Offline-first ledger data for PWA sync (Essential)

4. Third-Party Cookies & Scripts

We embed the following third-party services. Their cookies are governed by their policies.

  • Vercel Analytics — Analytics cookie (va_*). Privacy Policy. Hosted EU. Opt-out via cookie banner.
  • PostHog — Product analytics (ph_*). Privacy Policy. EU hosting. IP anonymized. Opt-out via banner.
  • Supabase Auth — Sets auth cookies for session management. Privacy Policy. Essential.

We do not use: Google Analytics, Meta Pixel, Google Ads, Hotjar, or any ad-tech tracking.

5. Managing Your Preferences

Cookie Banner

First visit shows a banner. You can Accept All, Reject Analytics, or Customize. Choice saved in cookie_consent.

Change Settings Anytime

  • Click the "Cookie Settings" link in the footer (opens modal)
  • Or clear cookie_consent in DevTools → Application → LocalStorage to re-show banner

Browser Controls

  • Chrome: Settings → Privacy → Cookies → Block third-party / Clear on exit
  • Firefox: Preferences → Privacy → Enhanced Tracking Protection
  • Safari: Preferences → Privacy → Block all cookies
  • Edge: Settings → Cookies → Block third-party

Blocking essential cookies will break login, CSRF protection, and MoMo flows.

6. Contact

KudiFlow AI — Privacy Team

Email: privacy@kudiflow.online

DPO: dpo@kudiflow.online

Phone/WhatsApp: 0203663708

Post: PMB CT 112, Cantonments, Accra, Ghana