Cookie policy
Last updated: 14 October 2026
1. What this page covers
This page lists every cookie and similar browser storage entry that kadaleo.com sets. We do not load advertising or analytics trackers on kadaleo.com, and nothing optional runs before you choose. Websites that Kadaleo hosts for businesses have their own privacy page, written for the business that owns the website, and show a cookie banner only when that business uses analytics.
2. Cookies and browser storage we set
Strictly necessary items do not need consent. Preference items are set only when you use the feature that needs them.
| Name | Purpose | Duration | Party | Category |
|---|---|---|---|---|
| business_token | Keeps you signed in to the dashboard (session token; HttpOnly, sent only over HTTPS). | 7 days | First party | Strictly necessary |
| business_account_token | Short step between signing in and choosing a business, for accounts with several businesses. | 10 minutes | First party | Strictly necessary |
| agency_token | Keeps an agency account signed in (agency sign-in pages only). | 7 days | First party | Strictly necessary |
| admin_token, admin_oauth_nonce | Sign-in for Kadaleo operators only. Not set for customers. | 12 hours; 10 minutes | First party | Strictly necessary |
| __Host-kd_google_nonce, __Secure-kd_connect_nonce | One-time check that ties a sign-in with Google, or a platform you connect, to the browser that started it. | 10 minutes | First party | Strictly necessary |
| NEXT_LOCALE | Remembers the language you choose on public pages. | 365 days | First party | Preference |
| kadaleo-cookie-consent | Browser storage (localStorage) that remembers your cookie choice, the time and the policy version. | Until you clear it or change your choice | First party | Strictly necessary |
| biz-theme, biz-sidebar | Browser storage for the dashboard's light or dark mode and collapsed menu. | Until you clear it | First party | Preference |
| kd.activeBusiness | Browser storage that keeps your browser tabs on the same business. | Until you clear it | First party | Strictly necessary |
| kd-bookings-first-run, kd-hiw-unlocked, kadaleo.bookings.timezonePrompt.dismissed:*, kadaleo.planRun.*, kd.clipFailureSeen | Browser storage for dismissed hints and an unfinished plan run in the dashboard. | Until you clear it | First party | Preference |
| kd_onboarding:*, kd.supportDraft.*, bookingSetupBannerDismissed:*, kadaleo_global_error_reloaded | Session storage for unsent onboarding answers and support drafts, a dismissed banner, and a guard against reload loops. | Until you close the tab | First party | Strictly necessary |
A star (*) stands for an identifier of your business, plan run or draft.
3. Optional: browser error monitoring (needs your consent)
Only after you choose Accept all, Kadaleo loads Sentry's browser monitoring. It sends technical error and performance details (error message, page address with sign-in tokens and payment links removed, browser and device type, release) to Sentry. In the version we use it does not set a cookie; it may keep a short-lived trace identifier in your session storage. If you choose Necessary only it is not loaded. If you change your choice later, the page reloads and monitoring stops.
| Name | Purpose | Duration | Party | Category |
|---|---|---|---|---|
| sentry_previous_trace | Links errors across page loads for troubleshooting (session storage). | Until you close the tab | Sentry (loaded from our own site) | Optional, needs consent |
4. Server-side error monitoring (no cookies)
Our servers also send error reports to Sentry. They use no cookies, carry no IP addresses or request bodies, and access tokens and sign-in and payment links are removed from them; an error message can still contain a fragment of the data being processed. We run them on the basis of our legitimate interests, to keep the Service secure and reliable.
5. Third parties inside the signed-in product
One third-party resource is loaded only inside the signed-in product, never on public pages:
- Facebook SDK (connect.facebook.net), when you click Connect WhatsApp. Meta may set its own cookies in that sign-in window; see Meta's cookie policy.
It loads only when you open that feature.
6. Your choices
Use Cookie settings below, or in any footer, to open the banner and change your choice. Withdrawing consent is as easy as giving it. You can also block or delete cookies in your browser settings; the Service may then stop working, because signing in needs its session cookie.
7. Legal basis
Strictly necessary items are used without consent because the Service cannot work without them (Article 5(3) of the ePrivacy Directive, as implemented in Portugal). Preference items are used because you ask for the feature. Browser error monitoring runs only with your consent. More information is in the Privacy Policy; to delete your data, see Data deletion.
Who we are and how to contact us
Kadaleo is a trade name of Daniyar Urazov, sole trader, NIF 311834230, Caminho do Amparo, 9000-705 Funchal, Madeira, Portugal. Contact: legal@kadaleo.com.
Privacy, data protection and legal requests: legal@kadaleo.com. General questions: info@kadaleo.com.