Legal
This policy explains how Rufkey uses cookies and browser storage, which entries we set, why we set them, and how you can control them.
Last updated: August 2, 2026
Cookies are small text files that a website stores in your browser. They allow the site to remember information about your visit — such as your sign-in state or your display preferences — so the site can work the way you expect when you return. Rufkey also uses the browser's local storage and session storage for the same purpose. In this policy, "cookies" refers to cookies, local storage, and session storage together.
Rufkey uses a small, deliberately limited set of storage. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies. The storage we do use falls into three categories: essential and authentication cookies, analytics cookies, and preference or local-storage entries. Each category is described below.
These entries are required for Rufkey to function. They keep you signed in, protect your session from cross-site request forgery, and remember which listing or dashboard view you were on. Disabling them in your browser will prevent you from signing in or using any feature that requires an account. These entries are set only while you actively use Rufkey and are cleared when you sign out or close the browser session.
Rufkey authenticates you with Internet Identity, the Internet Computer's privacy-preserving identity provider. When you sign in, Internet Identity issues a short-lived session delegation that is stored in your browser's local storage. This delegation — not your password or private key — is what Rufkey uses to authorize your actions on the marketplace. The session expires automatically after a short period and is removed when you sign out. Rufkey never receives or stores your Internet Identity anchor, password, or recovery phrase.
Rufkey uses first-party analytics to understand which features are used and where the experience can be improved. These analytics are aggregated and do not identify you personally. Analytics storage is optional: you can continue using Rufkey without it. We do not share analytics data with advertising networks or third-party trackers.
Rufkey stores a small number of preferences in your browser's local storage so the interface stays the way you left it — for example, your chosen theme, dismissed banners, and in-progress form drafts. These entries stay on your device until you clear them or sign out. They are not sent to Rufkey's servers and are not used to track you across other sites.
By default, Rufkey does not set any third-party cookies. If a third-party service is ever introduced — for example, an embedded map or a payment provider — it will be listed here with the specific purpose and a way to opt out. Any such service will be required to honor your consent choice before setting storage in your browser.
You can view, block, or delete cookies and local storage at any time through your browser's settings. Most browsers offer a privacy or site-data panel where you can control storage per site. Blocking essential cookies will prevent you from signing in; blocking analytics or preference storage will not affect your ability to browse listings or contact sellers. If you clear your browser data, you will need to sign in again and re-enter any preferences.
Essential and authentication entries persist only for the active session and are removed when you sign out or close the browser. Preference entries in local storage persist until you clear them. Analytics entries are short-lived and expire automatically. Rufkey does not set any long-lived tracking cookies that remain in your browser indefinitely.
We may update this Cookie Policy when the way Rufkey uses storage changes. When we do, we will revise the date at the bottom of this page. If a change materially affects how your data is stored, we will also surface a notice in the app before the change takes effect. Continued use of Rufkey after changes take effect constitutes acceptance of the updated policy.
