Last updated: 14 August 2026
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your browsing experience. Some cookies are essential for the website to function; others help us understand how you use the site.
KareShift uses a minimal number of cookies. We currently do not use advertising cookies, cross-site tracking pixels, or third-party marketing tools. Our cookie use falls into two categories:
These cookies are strictly necessary for the website and application to function. They cannot be disabled.
| Cookie | Purpose | Retention |
|---|---|---|
session_id |
Maintains your authenticated session in the KareShift application | Session (cleared on browser close) or 7 days if "Remember me" is selected |
auth_token |
JSON Web Token for API authentication. Stored in an HttpOnly cookie for security. | 24 hours (refreshed on activity) |
csrf_token |
Cross-Site Request Forgery protection token | Session |
The following values are stored in your browser's localStorage (not cookies). They persist until manually cleared and are not transmitted to our servers.
| Key | Purpose | Retention |
|---|---|---|
cookie_consent |
Stores your cookie preference (accepted/rejected) so we don't show the banner again | Until cleared by you — see Section 3 to reset your preferences |
These cookies are only loaded if you click "Accept All" on our cookie consent banner. They help us understand how visitors use our website so we can improve it.
| Cookie | Purpose | Retention | Provider |
|---|---|---|---|
_ga |
Distinguishes unique visitors to measure site traffic | 2 years | Google Analytics (if enabled) |
_ga_* |
Maintains session state for Google Analytics | 2 years | Google Analytics (if enabled) |
Note: As of the date of this policy, we have not yet enabled Google Analytics. When we do, it will only load after you consent. If you choose "Essential Only", no analytics cookies are set.
Under UK PECR and UK GDPR, withdrawing consent must be as easy as giving it. You can reset your cookie preferences at any time:
You can also change your preferences by:
We do not set third-party advertising or tracking cookies. Our payment provider (Stripe) may set cookies on its own domain during the checkout process — these are governed by Stripe's privacy policy.
This cookie policy complies with the UK Privacy and Electronic Communications Regulations (PECR) 2003 and the UK GDPR (Data Protection Act 2018). We obtain consent before setting any non-essential cookies and provide clear information about what each cookie does.
If you have questions about our use of cookies, contact us at privacy@kareshift.com.
Related policies: