Cookie Policy

Cookies are small files a website stores in your browser. QKAP uses them only to keep creators signed in safely. A few features also keep small notes in your browser's local storage, which stay on your device. This page lists all of them. Our Privacy Policy explains how we handle data more broadly.

All are first-party, HTTP-only (scripts can't read them) and needed for logging in to work:

• tlc_session keeps you signed in to your dashboard. Set when you log in; expires after 30 days without activity or when you log out.
• tlc_2fa is set only during login on an account with two-factor login, after your password is accepted. It lasts 5 minutes and only lets that browser enter a code.
• qkap_ig_state is set only while you connect Instagram for Auto-DM. It lasts 10 minutes and makes sure the Instagram login finishes in the browser that started it.

These notes live in your browser's local or session storage. They are not sent to us automatically:

• Products you save on a creator's page (the Saved list).
• A note that you joined a creator's deal alerts, so the form shows you're subscribed.
• Your light, dark or system theme choice.
• For creators: dashboard preferences such as dismissed cards and banners, the link box being collapsed, and backups of unsaved post drafts, and your edited Reply kit templates.
• On the home page: that you closed the activity pop-ups, for the current browser session only.
• That you closed the Product Hunt badge in the corner of our pages.

• No advertising or retargeting cookies.
• No third-party analytics scripts. Creator statistics are counted on our own servers without cookies.
• No cross-site tracking, and we don't sell or share browsing data.

When you tap Shop on a creator's page, you leave QKAP for the store. The store and any affiliate network may set their own cookies, for example to credit the creator with a commission. Dodo Payments may set cookies on the checkout and billing pages it hosts. The intro video on our home page is hosted by YouTube in its privacy-enhanced mode and only loads when the video opens. The Product Hunt badge in the corner of our pages is an image loaded from Product Hunt. Likewise, a reel or video inside a creator's post loads from Instagram or YouTube only after you tap Watch. Once loaded, Instagram or YouTube may store data under their own policies. Those cookies are covered by their own policies.

You can delete cookies and local storage at any time in your browser settings. Blocking our essential cookies means you can't log in, but creators' pages still work. Clearing local storage removes your Saved list on that browser.

Questions? Email support@qkap.app. Or use our contact page.