Legal
Cookies policy
Last updated 18 May 2026.
Our default is deny
Kartapay runs Google Consent Mode v2 with all analytics and advertising signals denied by default. No analytics or advertising cookie is set until you click Accept all on the banner. If you click Reject all the deny state is locked in for 12 months. You can change your preference any time by clearing the kp_consent_v1 cookie in your browser, then reloading the site.
Cookies we set
| Cookie | Purpose | When set | Lifetime |
|---|---|---|---|
kp_consent_v1 | Records your consent choice (accepted or rejected). Functional, no consent required. | On Accept or Reject click | 12 months |
_ga, _ga_* | Google Analytics 4. Distinguishes anonymised visitors so we can see page popularity, drop-off, and traffic source. | Only after Accept | 13 months |
_clck, _clsk, CLID | Microsoft Clarity. Heatmaps and anonymised session replay so we can see where the UI confuses people. | Only after Accept | 1 year (CLID), 1 day (_clsk), 1 year (_clck) |
Cookies we do not set
No advertising cookies. No third-party tracking pixels. No social media share buttons that load scripts before consent.
Server-side data
Cloudflare records IP, user agent, and request URL in edge logs for security and abuse prevention. This is not a cookie, and is retained for 30 days.
Change your mind
To withdraw consent, clear the kp_consent_v1 cookie from your browser settings, then reload. The banner reappears and you can Reject all.
Questions
Email [email protected]. Full data handling is in our privacy policy.