Cookie Policy
Draft — to be reviewed by counsel before launch.
Effective date: [effective date] · Last updated: October 8, 2026
This policy explains the cookies and similar browser storage Clevers LLC uses on Cafy's website (https://cafy.ai) and web apps: Cafy Go for event planners ([Cafy Go web app URL]) and the partner portal for transportation companies (https://app.cafy.ai). It's part of our Privacy Policy.
In short: the website sets no cookies at all. The web apps use only what's strictly necessary to sign you in and take payments securely. We don't use analytics, advertising or tracking cookies, so we don't show a cookie banner. If that ever changes, we'll update this page and ask for your consent before setting any non-essential cookie.
What cookies and browser storage are
Cookies are small files a website stores in your browser. Websites can also keep information in your browser's local storage (which stays until it's cleared) and session storage (which is cleared when you close the tab). The law treats them the same way: anything that isn't strictly necessary needs your consent.
The website (https://cafy.ai)
The website sets no cookies and uses no browser storage, analytics or advertising tools. Its fonts are served from our own site, not from Google. Our hosting provider (Google Firebase Hosting) receives your IP address and browser details to deliver the pages and keep the site secure, as any web server does. Links to the app stores or to a video take you to those sites, which use their own cookies under their own policies.
The web apps
Cookies
| Name | Set by | What it does | How long |
|---|---|---|---|
refresh_token |
api.cafy.ai | Keeps you signed in. It holds a random sign-in token that can't be read by scripts on the page (HttpOnly) and is sent only over HTTPS (Secure). | Until you sign out, or [30 days] |
That's the only cookie we set. We keep your short-lived access token in memory only, never in a cookie or in storage.
Browser storage
The web apps may keep small, strictly necessary items in session or local storage, such as what you typed on an earlier sign-in step or a draft you haven't saved yet. These never leave your browser and don't need consent.
Content from other companies
- Payments (Stripe): when you pay, or when a partner sets up payouts, Stripe's payment form loads from Stripe. Stripe may set its own cookies (for example
__stripe_midand__stripe_sid) to process the payment and prevent fraud. These are strictly necessary for the payment. See Stripe's cookie policy. - Sign in with Google or Apple: when you choose one of them, you go to that provider's sign-in page, or load its sign-in script, and it uses its own cookies under its own policy. See Google's and Apple's privacy policies.
- Maps and address search: when you search for an address or view a route, the map and search results come from [TO CONFIRM: maps / address search provider, e.g. Google Maps Platform], which receives your IP address and what you search for and may use its own cookies.
- Fonts: the web apps load their fonts from Google Fonts, which receives your IP address and browser details to deliver them. Google Fonts doesn't set cookies.
The mobile apps
The Cafy Go and Cafy partner apps don't use cookies. They store your sign-in tokens in your device's secure storage, and a few preferences on your device. See the Privacy Policy for the device information they send us.
Your choices
You can block or delete cookies and site data in your browser's settings. If you block the refresh_token cookie, you'll need to sign in again each time you open a web app. Blocking Stripe's cookies may stop payments from working.
Changes and contact
If we change what we use, we'll update this page and the date at the top. Questions: privacy@cafy.ai.