Cookie Policy
Last updated: PLACEHOLDER: DATE OF PUBLICATION
This Cookie Policy explains what cookies KuddeSoft (“we”, “us”, “our”) uses on this website (the “Site”) and why. It should be read together with our Privacy Policy.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They can be used for many purposes, such as keeping you logged in, remembering preferences, or tracking browsing behaviour across sites for advertising purposes.
2. Our approach: strictly necessary cookies only
KuddeSoft’s Site uses only strictly necessary cookies. We do not use, and this Site does not contain, any of the following:
- Analytics or usage-tracking cookies
- Advertising or ad-retargeting pixels/cookies
- Social media tracking cookies
- Any other behavioural tracking or profiling cookies
We currently do not track your browsing activity on this Site for marketing, analytics, or any other purpose.
3. Cookies we use
| Cookie | Purpose | Type | Duration | Set when |
|---|---|---|---|---|
| Admin session cookie | Keeps an authenticated KuddeSoft staff member logged in to the internal admin system | Strictly necessary | Session / until logout or expiry | When admin staff log in |
| Client session cookie | Keeps an authenticated client logged in to the self-serve client portal | Strictly necessary | Session / until logout or expiry | When a client signs in via our third-party sign-in provider |
| OAuth state/nonce cookie | A short-lived security token used to prevent cross-site request forgery (CSRF) during the third-party sign-in flow | Strictly necessary | Short-lived (minutes) — deleted once sign-in completes or expires | When a sign-in flow is initiated |
All session cookies are set with the HttpOnly flag (not accessible to JavaScript) and, in production, the Secure flag (only transmitted over HTTPS), reducing the risk of theft or misuse.
4. Do we need your consent for these cookies?
No. Under South African and generally-accepted international practice (including the position reflected in guidance issued by South Africa’s Information Regulator and the approach taken under comparable regimes such as the EU’s ePrivacy rules, which exempt cookies that are “strictly necessary” to provide a service you have requested), cookies that are strictly necessary to operate a website feature you have actively requested — such as staying logged in after you sign in — do not require prior opt-in consent or a cookie consent banner. This is because such cookies do not involve tracking, profiling, or purposes beyond delivering the service you asked for.
Because we use only strictly necessary session and security cookies, and because we run no analytics, advertising, or tracking cookies, we do not display a cookie consent banner on this Site. We are nonetheless disclosing our cookie use here in the interest of transparency and to comply with the general POPIA principles of openness and lawful, minimal processing (sections 8, 9 and 18 of POPIA).
5. Third-party cookies
Because sign-in is handled by a third-party identity provider, that provider may set its own cookies during the authentication flow on its own domain, governed by its own cookie and privacy policies, not this Policy. Similarly, if you are directed to a third-party hosted payment page to complete a subscription payment, that payment provider may set cookies on its own domain during checkout, governed by its own cookie and privacy policies. KuddeSoft does not control these third-party cookies. The specific providers used are identified on the relevant sign-in and checkout screens, and further detail is available on request (see section 8).
6. Managing cookies
Because our cookies are strictly necessary for login functionality, disabling them in your browser will prevent you from staying logged in to the admin or client portal. You can still control cookies generally through your browser settings (to view, delete, or block cookies), but doing so for our session cookies will affect your ability to use the login-dependent parts of the Site.
7. Changes to this Policy
If our cookie practices change in the future — for example, if we introduce analytics or marketing tools — we will update this Policy and, where legally required, implement a consent mechanism (such as a cookie banner) before deploying any non-essential cookies.
8. Contact us
For questions about this Cookie Policy, contact:
- PLACEHOLDER: FULL REGISTERED COMPANY NAME
- Email: PLACEHOLDER: PRIVACY/SUPPORT CONTACT EMAIL
- Physical address: PLACEHOLDER: PHYSICAL BUSINESS ADDRESS
This document is a starting draft prepared based on legal research into POPIA and generally accepted cookie-consent principles applicable in South Africa. It is not a substitute for review and sign-off by a South African admitted attorney before publication.