Cookie Policy

1. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work efficiently, provide a better user experience, and provide information to website owners.

1.1 How Cookies Work

When you visit a website, it may send a cookie to your browser. Your browser stores the cookie and sends it back to the website on subsequent visits. This allows the website to:

• Remember your login status so you don't have to sign in repeatedly
• Remember your preferences (language, theme, etc.)
• Understand how you use the website to improve it
• Provide essential functionality like shopping carts

1.2 Session vs. Persistent Cookies

• Session Cookies: Temporary cookies deleted when you close your browser
• Persistent Cookies: Remain on your device for a set period or until manually deleted

1.3 First-Party vs. Third-Party Cookies

• First-Party: Set by GDK Digital directly
• Third-Party: Set by services we integrate with (e.g., payment processors)

2. How We Use Cookies

GDK Digital uses cookies for the following purposes:

2.1 Authentication

We use cookies and local storage to keep you logged in to your account. Without these, you would need to sign in on every page.

2.2 Security

We use cookies to detect and prevent fraudulent activity, protect your account, and maintain the security of our services.

2.3 Preferences

We remember your settings and preferences (like dark mode or sidebar state) so you don't have to set them every time.

2.4 Analytics

We use Google Analytics 4 for page measurement on public website pages. It runs by default, without a banner, for visitors outside the European Economic Area, the United Kingdom and Switzerland. It does not run for visitors who decline analytics or send a Do Not Track or Global Privacy Control signal. Visitors in those regions are asked first through a prompt and are measured only if they choose Allow analytics. Microsoft Clarity, for behavioral metrics, heatmaps, and session replay, loads only after you choose Allow analytics on this page. We do not send arbitrary URL query parameters to Google Analytics, enable Google Signals, grant advertising storage to Clarity, or enable advertising personalization.

3. Types of Cookies We Use

Essential Strictly Necessary Cookies

These cookies are required for our services to function. They cannot be disabled. They include:

• Authentication tokens (keeping you logged in)
• Security cookies (CSRF protection)
• Load balancing (ensuring server stability)

Functional Functional Cookies

These cookies remember your preferences and settings:

• Theme preferences (light/dark mode)
• Language settings
• UI state (sidebar collapsed, table sorting, etc.)

Analytics Analytics Cookies

These cookies help us understand how visitors use our website:

• Pages visited and time spent
• Features used
• Clicks, scrolling, and page interaction patterns
• Heatmaps and session replays on public website pages
• Error occurrences

We do not enable advertising storage, advertising personalization, Google Signals, or cross-site ad targeting. Microsoft Clarity masks sensitive input content by default and is not loaded on URLs containing non-UTM query data, fragments, or oversized campaign values. The authenticated product and admin application shells are excluded from this marketing analytics property.

4. Complete Cookie List

Below is a complete list of cookies used by GDK Digital services:

4.1 GDK Digital Website (gdkdigital.com)

4.2 Product Applications (Fortilis, FTC, CRM)

* Stored in localStorage, not cookies. See Section 7.

4.3 Third-Party Cookies

5. Third-Party Cookies

When you use features that integrate with third-party services, those services may set their own cookies. We have no control over these cookies.

5.1 Payment Processing (Stripe)

When you make a payment, Stripe sets cookies for fraud prevention and to process your transaction securely. These are essential for payment functionality.

5.2 Database Services (Supabase)

For products using Supabase (GDK Apex), authentication tokens may be stored by Supabase services.

5.3 Behavioral Analytics (Microsoft Clarity)

After you choose Allow analytics, Microsoft Clarity may set analytics cookies and capture page rendering and interaction signals for heatmaps and session replay. We keep Clarity advertising storage denied, and declining analytics requests cookie removal and stops further tracking.

5.4 We Do NOT Use

• Advertising cookies or pixels (Google Ads, Facebook Pixel, etc.)
• Social media tracking widgets
• Cross-site tracking for ad targeting
• Cookie syncing with data brokers

6. Managing Cookies

6.1 Browser Settings

You can manage cookies through your browser settings. Here are instructions for popular browsers:

6.2 Impact of Disabling Cookies

If you disable or delete cookies:

• Essential cookies: You will not be able to log in or use authenticated features
• Functional cookies: Your preferences will not be saved between visits
• Analytics cookies: No impact on functionality

6.3 Do Not Track

We honor "Do Not Track" browser signals. When detected, we disable non-essential analytics tracking.

6.4 Opt-Out Options

Change your analytics choice at any time. Declining analytics does not affect essential authentication or product functionality.

• Using your browser's "Do Not Track" setting
• Using a browser extension like uBlock Origin or Privacy Badger
• Clearing browser storage for gdkdigital.com

7. Local Storage and Similar Technologies

In addition to cookies, we use other browser storage technologies:

7.1 LocalStorage

LocalStorage allows us to store data persistently in your browser. We use it for:

• Authentication tokens (JWT access and refresh tokens)
• User profile cache
• Application preferences
• gdk_analytics_consent: your analytics choice (Allow or Decline), decision timestamp, policy version, and choice source; stored only when you make a choice
• gdk_analytics_opt_out: persistent analytics opt-out marker
• Draft content (unsaved changes)

Authentication storage is cleared on logout. Analytics preferences remain until you change them on this page or clear browser storage. If the browser cannot save an allow choice, analytics stays off and the preference panel asks you to retry.

7.2 SessionStorage

SessionStorage is similar to localStorage but is cleared when you close the browser tab. We use it for temporary data like form progress.

7.3 IndexedDB

For larger data storage needs (like offline capabilities), we may use IndexedDB. This is used in:

• Fortilis desktop app for encrypted vault cache
• FTC for offline task access

7.4 Clearing Storage

To clear all stored data:

1. Sign out of the application
2. Clear browser cookies and site data for gdkdigital.com
3. Or use "Clear browsing data" in your browser settings

8. Updates to This Policy

We may update this Cookie Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top
• For significant changes, we may notify you via email or in-product notice
• Continued use of our services after changes constitutes acceptance

9. Contact Us

If you have questions about our use of cookies, contact us:

For more information about how we handle your data, see our Privacy Policy.