Legal
Cookie Policy
Effective: May 20, 2026 · Last updated: May 20, 2026
Plain English Summary
We use cookies to keep you logged in, remember what's in your cart, process payments securely, and run essential platform functions. We do not use cookies for advertising or to track you across other websites. You can manage cookies in your browser settings; disabling essential cookies will break core functionality.
1. What Are Cookies?
Cookies are small text files that a website stores on your device when you visit. They allow the site to remember information about your visit, such as your login status, items in your cart, or your language preference.
Cookie types you'll see:
- First-party cookies — set by the site you're visiting (us)
- Third-party cookies — set by other domains (e.g., Stripe for payment processing)
- Session cookies — deleted when you close your browser
- Persistent cookies — remain on your device for a specified period or until deleted
2. Cookies We Use
Essential Cookies (Always On)
These are required for the Service to function. Disabling them will break core features.
| Cookie / Storage Key | Purpose | Set By | Duration |
|---|---|---|---|
| sb-access-token, sb-refresh-token | Keep you logged in (Supabase auth) | GoldenDoko | Access: 1 hr · Refresh: 7 days |
| cart (localStorage) | Remember items in your cart | GoldenDoko | Until cleared by you |
| __stripe_mid, __stripe_sid | Stripe fraud detection during checkout | Stripe | 1 year / 30 min |
| __cf_bm | Cloudflare bot management | Cloudflare | 30 min |
Functional Cookies
These improve your experience but the site works without them.
| Cookie / Storage Key | Purpose | Set By | Duration |
|---|---|---|---|
| lang | Remember your language preference (English / Nepali) | GoldenDoko | 1 year |
| theme | Remember your theme preference (if applicable) | GoldenDoko | 1 year |
Analytics Cookies
We use limited, privacy-respecting analytics to understand how visitors use the Service. Currently no analytics cookies are deployed. If we add analytics in the future (e.g., privacy-respecting tools that do not track users across sites), we will update this Policy.
Advertising Cookies
We do not use advertising cookies. We do not engage in cross-site behavioral advertising.
3. Third-Party Cookies
When parts of the Service integrate with third-party providers, those providers may set their own cookies:
- Stripe — when you initiate or complete a payment · stripe.com/privacy
- Cloudflare — on every page load (bot detection + CDN) · cloudflare.com/privacypolicy
- Supabase — when you log in or maintain a session · supabase.com/privacy
These third parties are subject to their own privacy policies.
4. Local Storage and Similar Technologies
In addition to cookies, the Service uses:
- localStorage — to remember your cart contents across sessions
- sessionStorage — for temporary data during a single visit
- IndexedDB — rarely used; for offline-capable features
These technologies are subject to the same principles as cookies in this Policy.
5. How to Manage Cookies
Browser settings
You can manage cookies in your browser:
- Chrome — Settings → Privacy and Security → Cookies and other site data
- Safari — Preferences → Privacy → Manage Website Data
- Firefox — Settings → Privacy & Security → Cookies and Site Data
- Edge — Settings → Cookies and site permissions → Cookies and site data
Disabling essential cookies will break core functionality (login, cart, checkout).
Opt out of analytics
If we add analytics in the future, we will provide an explicit opt-out mechanism here.
"Do Not Track" signals
We currently do not respond to DNT signals because there is no industry-standard interpretation. We do honor the Global Privacy Control (GPC) signal where applicable under state law.
6. Changes to This Policy
We may update this Cookie Policy from time to time. Material changes will be announced via the Service. The "Last Updated" date at the top reflects the most recent revision.
7. Related Documents
- Privacy Policy — how we collect, use, and protect personal data
- Terms of Service — the contract governing your use of the Service
8. Contact
Questions about our use of cookies?
Email: contact@goldendoko.com
