Cookie & Tracking Technologies Policy

Effective date: 2026-08-18 Last updated: 2026-08-18 This Policy explains how D-Card may use cookies and similar technologies on https://d-card.io, related web properties, and authenticated Admin/Web surfaces for D-Card. It should be read with our Privacy Policy. This is a draft for legal review and does not invent a named list of cookie identifiers.

1. What Are Cookies and Similar Technologies?

Cookies are small text files stored by a browser. Similar technologies can include local storage, session storage, pixels, and SDKs. Mobile apps primarily rely on secure/local storage and OS permissions rather than browser cookies; app data practices are covered in the Privacy Policy.

2. Categories We May Use

Depending on environment and configuration, we may use:

Strictly necessary / security Technologies required to deliver the site or Admin session securely, prevent abuse, and remember essential security state.

Session / authentication Admin and authenticated Web surfaces may use authentication/session cookies or equivalent storage so that signed-in users remain signed in for a session. We do not invent specific cookie names here.

Preferences We may store UI or locale preferences so the site remembers choices such as language where implemented.

Analytics / performance We may use analytics or performance measurement technologies to understand aggregate traffic and improve reliability — only when carefully enabled for an environment. We do not claim advertising cookies unless and until they are actually deployed and this Policy is updated. If a surface currently uses only necessary/session technologies, nonessential analytics should not be described as always-on.

3. What We Do Not Do Here

• We do not publish a fabricated table of cookie names, providers, and durations.
• We do not claim advertising, retargeting, or cross-site marketing cookies as current practice.
• We do not claim a certified consent framework until one is implemented and reviewed. When a production cookie inventory is approved, Admin/CMS may publish a structured table (name/technology, provider, purpose, type, duration, category) without hardcoding speculative values into this seed.

4. Your Choices

Browser controls typically let you block or delete cookies. Blocking strictly necessary cookies may break sign-in or security features on Admin/Web. For privacy rights and in-app preferences, see /privacy-choices and contact privacy@d-card.io.

5. Third Parties

Some technologies, if enabled, may be set by or involve processors (for example hosting, analytics, or monitoring providers). Those processors process data under their terms and our agreements. See the Privacy Policy for subprocessor categories.

6. Updates

We may update this Policy as our web stack evolves. Check the dates above on the published version.

7. Contact

• Privacy: privacy@d-card.io
• Support: support@d-card.io
• Website: https://d-card.io
• Entity: D-Card Full privacy practices: /privacy