In plain English: We use a tiny amount of browser storage to remember your language and that you've seen our cookie notice. That's it. No analytics, no advertising, no third-party trackers. Under EU/UK ePrivacy rules, these "strictly necessary" cookies don't require your consent — we still tell you about them for transparency.
1. What cookies are
"Cookies" is shorthand for any small piece of data a website stores in your browser. This includes:
- HTTP cookies: traditional name-value pairs sent between your browser and our server.
- localStorage / sessionStorage: modern browser storage APIs. Legally treated similarly to cookies under the EU ePrivacy Directive.
- Cookies set by services we use (e.g., security / DDoS protection) — see Section 4.
This Cookie Policy covers all three.
2. What we use, in short
We use only strictly necessary storage. That means:
- No analytics cookies (no Google Analytics, no Mixpanel, no Plausible third-party hosted).
- No advertising cookies (no Facebook Pixel, no Google Ads, no retargeting).
- No social media trackers embedded in our pages.
- No third-party fingerprinting.
If we ever add non-essential cookies (e.g., privacy-friendly analytics like self-hosted Plausible/Umami), we will update this policy and request your consent through a cookie banner with equally prominent "Accept" and "Reject" options before any non-essential cookie is set.
3. Full cookie & storage list
3.1 First-party storage (set by this website)
| Name | Type | Purpose | Expiry |
|---|---|---|---|
cookie_consent_v1 |
localStorage | Remembers that you dismissed our cookie notice, so we don't show it on every page. | Persistent (until you clear browser storage) |
lang (planned) |
localStorage | Remembers your language preference (English / 中文) when i18n is enabled. | Persistent (until you clear browser storage) |
Note: we use localStorage rather than HTTP cookies for our first-party preferences. Both are subject to the same privacy treatment.
3.2 Third-party cookies
The following may be set by infrastructure providers we use. None of them track you across other websites or build advertising profiles.
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
__cf_bm (if Cloudflare) |
Cloudflare | Bot management & DDoS protection. Distinguishes bots from human visitors. | 30 minutes |
cf_clearance (if Cloudflare) |
Cloudflare | Records that you passed a security challenge so you don't repeat it. | 30 minutes |
These are strictly necessary security cookies exempt from consent under EU ePrivacy Directive Article 5(3) and equivalent provisions in other jurisdictions. We will confirm and update this list once deployment infrastructure is finalized.
4. Third parties & external resources
Our pages reference a few third-party resources at page-load time. These do not set tracking cookies, but they do receive your IP address as part of normal HTTP requests:
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com): serves the Inter and Fraunces typefaces used on this site. Google may log IP addresses but does not set tracking cookies via the standard font CSS request. - Tailwind CDN (
cdn.tailwindcss.com): serves the CSS framework used on this site during the design-preview phase. Will be replaced by self-hosted assets when the production site ships.
We do not embed third-party social media widgets, analytics scripts, comment systems, or chat widgets.
5. Legal basis (EU/UK)
Under the EU ePrivacy Directive (Cookie Law) and the UK Privacy and Electronic Communications Regulations (PECR), we may store information on your device without your consent only when it is strictly necessary to provide the service you requested.
All cookies and local storage listed in Section 3 fall under this "strictly necessary" exemption — either because they enable a feature you explicitly opted in to (language choice, cookie-banner dismissal) or because they are required for the site's security and integrity (Cloudflare bot management).
Should we ever introduce non-essential cookies, we will rely on your opt-in consent (GDPR Article 6(1)(a) and ePrivacy Article 5(3)), collected through a banner with genuine choice — equally prominent Accept and Reject options, no pre-ticked boxes.
6. How to manage cookies
You can clear or block our storage at any time:
- Clear our localStorage: open your browser's developer tools (or Privacy/History settings) and clear data for this domain.
- Block cookies entirely: every modern browser lets you block all cookies in its privacy settings. Blocking them may break our cookie-banner-dismissal memory (so you'll see the notice on every page) but won't otherwise break the site.
- Private/Incognito mode: all storage is automatically cleared when you close the window.
- Browser-specific guides: Chrome, Firefox, Safari, Edge.
7. Changes to this policy
If we add, remove, or change any cookies, we will update this page and bump the "Last updated" date at the top. For material changes (e.g., introducing analytics), we will also surface a fresh consent banner.
8. Contact
Cookie questions, complaints, or requests:
- Privacy team: [email protected]
- Postal address: OKOKAI PTE. LTD. (UEN 202447433Z), 21 Collyer Quay, Singapore 049320
See also our Privacy Policy for the full picture of how we handle your data.
This document is provided in English. Translations are for convenience only; the English version controls in case of conflict.