Legal
Cookie Policy
Every cookie and browser storage item YUKUZ actually uses, read out of our own source code. There are three cookies, and none of them is an analytics or advertising cookie.
YUKUZ uses three cookies. Two are strictly necessary for signing in, and one remembers the language you chose.
We run no analytics. We run no advertising. We set no tracking cookies, and there are no third party trackers on our site. We do not use Google Analytics, Meta Pixel, or any similar product, and none of them appears anywhere in our code.
Because we set no analytics or advertising cookies, there is nothing for you to opt out of, and we do not show a consent banner.
What a cookie is
A cookie is a small piece of text a website asks your browser to keep and send back on later visits. Browsers also offer other small storage areas, called local storage and session storage, which work similarly but are never sent to a server automatically. We use a little of both, and we list all of it below.
Cookies we set
All three are first party. None of them is set by an advertiser or an analytics company.
1. yukuz_session
| Purpose | Keeps you signed in after you sign in |
|---|---|
| Category | Strictly necessary, authentication |
| First or third party | First party, set by the YUKUZ API |
| Lifetime | 30 days |
| Flags | HttpOnly, Secure, SameSite=Lax |
| Necessary? | Yes. Without it you would be signed out on every page |
It holds a random token, not your email address and not your password. It is marked HttpOnly, so scripts in the page cannot read it, and Secure, so it is only ever sent over an encrypted connection.
2. yukuz_regflow
| Purpose | Lets the browser that started a sign up continue into the account once the email address is verified, including when you verify on a different device |
|---|---|
| Category | Strictly necessary, registration |
| First or third party | First party, set by the YUKUZ API |
| Lifetime | 20 minutes |
| Flags | HttpOnly, Secure, SameSite=Lax, restricted to the path /v1/auth/registration |
| Necessary? | Yes, for that short window. It is cleared as soon as it is used or has expired |
It is deliberately short lived and single use, and it is limited to one API path so it is not sent anywhere else.
3. yukuz_locale
| Purpose | Remembers which of our five languages you chose |
|---|---|
| Category | Preference |
| First or third party | First party, set by the page itself |
| Lifetime | 1 year |
| Flags | SameSite=Lax. This one is readable by the page, because the page needs to know your choice |
| Necessary? | Not strictly. Without it the site falls back to English, and everything still works |
It stores a language code such as en, es, pt-BR, ja or de. It identifies a language, not a person.
Browser storage we use
These are stored by your browser and are not sent to our servers.
Local storage, kept until you clear it
| Name | Purpose | Necessary? |
|---|---|---|
| yukuz_hide_rule_saved_tip | Remembers that you dismissed a one time hint after saving a rule, so we do not show it again | No |
| yukuz_aps | Your personal anti phishing code. You choose a word or phrase and we show it back to you, so you can tell a real YUKUZ screen from a fake one. It stays on your device and is never sent to us | No, it is a security convenience you opt into |
Session storage, cleared when you close the tab
| Name | Purpose |
|---|---|
| yukuz_setup_collapsed | Remembers whether you collapsed the exchange setup guide |
| yukuz_setup_done | Remembers which setup steps you have seen as complete |
| yukuz_welcome | Makes sure a welcome message appears only once |
| yukuz_signup_pending | Marks that a sign up is waiting for email verification, so refreshing the page does not lose your place |
| yukuz_signup_email | Holds the address you just signed up with, so the pending page can show it back to you |
| yukuz_locale_hop | A guard so that a single language redirect cannot loop |
None of these is used to track you, to build a profile, or to identify you across sites.
What we do not use
To be explicit, because these are the things people reasonably worry about:
- No analytics cookies. No Google Analytics, no Plausible, no Matomo, no Fathom.
- No advertising or marketing cookies. No Meta Pixel, no Google Ads tags, no LinkedIn Insight, no TikTok pixel.
- No social media embeds that set cookies.
- No session recording or heatmapping.
- No cross site tracking or fingerprinting.
- No advertising identifiers.
Our website is served with a Content Security Policy that blocks scripts from other domains, which enforces this at a technical level rather than relying on a promise.
Third parties your browser does contact
Cookies are not the whole story, so here is the rest of it honestly.
CoinGecko, on our public homepage
Our homepage shows a small live price display in the product demonstration. Your browser requests those prices directly from CoinGecko. That means your IP address reaches CoinGecko, as it would if you visited their site.
We do not send them anything about you, and we do not receive anything about you from them. Their handling of that request is governed by their own policies.
Stripe, when you subscribe
If you start a subscription you are taken to Stripe's own hosted checkout page. Stripe sets its own cookies there, under its own policy, to run the payment and to prevent fraud. We never see your card details.
Cloudflare, which serves our website
Our website is delivered through Cloudflare. Cloudflare may set cookies of its own for security and network purposes as part of delivering the site.
Cloudflare also offers a privacy focused, cookieless analytics feature. The YUKUZ application does not ship it, and no analytics script exists anywhere in our source code. It can, however, be switched on from the Cloudflare dashboard without any change to our code, which is why we mention it rather than stay silent. If it is on, it counts page views without setting a cookie and without identifying you. This is worded identically in our Privacy Policy.
Managing cookies
You can delete or block cookies in your browser settings, and you can clear local and session storage the same way.
Please note that if you block the two strictly necessary cookies you will not be able to stay signed in, and sign up will not complete.
Changes to this policy
If we add anything that sets a cookie, we will update this page before we ship it, and we will update the date shown at the top.
Contact
Questions about this policy: support@yukuz.com