Cookie Policy

Cookies are small text files stored in your browser. Quklink uses them to keep you signed in and, only with your consent, to understand how the Service is used. You can change your preference at any time using the button below or the "Cookie Settings" link in the footer.

These cannot be switched off. The Service does not function without them:

• accessToken: a short-lived (15 minute) signed session token that keeps you signed in. HTTP-only, secure in production.
• refreshToken: a longer-lived (7 day) token used to silently renew your session. HTTP-only, secure in production.
• oauth_state and oauth_redirect: short-lived values used only during "Sign in with Google" to prevent cross-site request forgery and to return you to the page you started from.
• quklink_has_session: a flag that records only whether a session exists, so the interface can render the correct state without reading your session token.
• cal_oauth_state, cal_code_verifier, calendly_oauth_state, calendly_code_verifier: set only if you connect a Cal.com or Calendly account. They hold the one-time state and PKCE verifier that prove the authorisation response came back to the browser that started it, and are discarded as soon as the connection completes.
• del_reauth, del_reauth_state, del_reauth_uid: set only when you begin deleting your account. They carry the short-lived re-authentication challenge that confirms the request came from you, and expire with it.
• qk_consent: stores your cookie preference itself, so we don't ask again every visit.

Every cookie in this section is strictly necessary: each one is set either to keep you signed in, to complete an action you started, or to remember the choice you made about the cookies themselves. None is used for advertising, and none is shared with a third party for their own purposes.

These only load after you accept them via the cookie banner or preference center:

• Google Analytics (_ga, _ga_*, _gid): aggregate traffic and usage statistics.
• Microsoft Clarity (_clck, _clsk, CLID): session-replay and heatmap analytics to help us understand how the product is used and where it can be improved.

Rejecting these cookies does not affect your ability to use Quklink. Nothing about the core product depends on analytics cookies.

Google and Microsoft set and read their own cookies as described above under their own privacy policies once you've consented to Analytics cookies. We do not control what those providers do with data beyond what we send them; see their respective privacy policies for their own practices.

Most browsers also let you block or delete cookies directly in their settings. Blocking the strictly necessary cookies listed above will prevent you from staying signed in.

If we add a new cookie category or change what an existing one does, we will update this page and, where the change is material, ask for your consent again the next time you visit.