Cookie Policy
1. What these technologies are#
This Cookie Policy explains how Qiko AI Labs FZCO uses cookies, local storage and session storage across its websites and platform, including this marketing site, the Qiko app and Qiko Signal. It should be read with our Privacy Policy.
Cookies are small text records a website stores through a browser. Local storage keeps a named value in the browser until it is removed or expires logically. Session storage keeps a named value for the browser tab's session. We refer to them together as “technologies”.
2. This marketing site#
This site stores your cookie choices locally so they persist across visits, and otherwise sets no cookies beyond what your browser needs to render the pages. If you accept analytics in the cookie settings panel, this site loads Google Analytics 4 to measure how visitors use the site; until you agree, no analytics script loads and no analytics cookies are set. It does not run marketing technologies.
3. Cookies once you sign in#
The Qiko app and Qiko Signal are separate products with separate accounts (see our Terms). Once you sign in to either, that product sets its own authentication cookies and stores a few interface preferences in your browser. These are necessary for the sign-in and for the product to work as you left it, and do not require optional consent:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| qiko_access | Cookie | Authenticates the current signed-in request to the Qiko app. | 15 minutes |
| qiko_refresh | Cookie | Maintains and renews an authenticated session in the Qiko app. | 14 days |
| qiko_csrf | Cookie | Supports double-submit protection against cross-site request forgery. | 14 days |
| auth_token / auth_refresh_token | Cookie | Authenticates and renews a signed-in session in Qiko Signal. | Session, or up to 30 days if remember-me is used |
| active_workspace_id | Local storage | Remembers which workspace you were using in Qiko Signal. | Until you clear it |
| low-scan-allowance-alert-dismissed, passkey_prompt_dismissed_at | Local storage | Remember that you dismissed a notice or prompt in Qiko Signal, so it is not shown again straight away. | Until you clear it |
Depending on browser and server controls, some cookie attributes prevent JavaScript access and limit when the browser sends them.
4. Conditional security, sign-in and payment providers#
Cloudflare may set security cookies when its protection is active, including cookies such as __cf_bm for bot management or cf_clearance after a security challenge. These are necessary for network security and availability. Their presence and duration depend on the Cloudflare protection presented to the browser and may change with security configuration.
If you choose to sign in with Google or connect Google Search Console or Google Analytics to a project, you are redirected to a Google page, and Google may use cookies on its own domain under Google's notices. Qiko does not load Google sign-in merely because you visit this site.
If payment checkout is enabled and a user chooses to start it, Qiko redirects the user to a Stripe-hosted page. Stripe may then use cookies or similar technologies on its domain for checkout, fraud prevention, security and payment processing under Stripe's own notices. Qiko does not load Stripe checkout merely because a user visits Qiko.
5. Optional categories#
- Necessary: always on for core functionality and security. This category cannot be switched off.
- Preferences: would remember optional interface settings across visits, once introduced.
- Analytics: Google Analytics 4 measures how visitors interact with this site to help improve it. It loads only after you grant analytics consent.
- Marketing: would support advertising or marketing measurement. Not currently loaded on this site.
No script in either optional category loads before consent. Analytics stays off until you agree in the cookie settings panel, and marketing technologies are not used on this site at all.
6. Global Privacy Control and Do Not Track#
When we detect Global Privacy Control (GPC) or Do Not Track (DNT), optional categories default to off. Browsers expose these signals inconsistently, so we can respond only when a signal is made available to the page.
7. Manage or withdraw consent#
You can change your cookie preferences at any time through the “Cookie settings” link in this site's footer, which reopens the consent panel. You can also delete or block technologies in your browser settings at any time. Blocking necessary cookies can prevent sign-in and secure features from working in the Qiko app or Qiko Signal.
8. Changes and contact#
We may update this policy when technologies, providers or legal requirements change. We will revise the effective date and seek consent again where required. Questions can be sent to support@qiko.ai.