1. Essential session cookies and cryptographic security
• Cryptographically Signed HttpOnly Cookies: When you sign in to KURYEP web applications (Customer, Courier, Business, or Admin), our systems issue strictly necessary, cryptographically signed cookies (e.g. kuryep_session). These cookies are configured with HttpOnly, Secure, and SameSite=Lax flags to prevent client-side JavaScript access and defend against Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) exploits.
• Role-Isolated Tokens: Session cookies are strictly isolated by user role (Customer vs. Courier vs. Business) to prevent cross-account privilege escalation or session bleeding across shared devices.
• Automatic Destruction on Sign-Out: Session cookies are purged and invalidated immediately upon tapping Sign Out or deleting your account.
2. Local device storage (AsyncStorage and LocalStorage)
Our native iOS and Android mobile apps, as well as our web clients, utilize secure on-device key-value storage (AsyncStorage / LocalStorage) to support essential local app operations:
• Local Preferences: Persisting your preferred interface language (English, Spanish, Turkish, Arabic, French, German, Portuguese), active dispatch filters, and sound alert toggles.
• Offline Synchronization Queue: Storing proof-of-delivery timestamps and geofence events locally if network connectivity temporarily drops during doorstep transit, ensuring automatic synchronization when signal is restored.
• Push Notification Tokens: Storing Apple APNs and Expo push tokens locally to ensure delivery dispatch alerts, real-time arrival notices, and recipient PIN reminders reach your device promptly.
3. Strict zero third-party advertising tracking policy
• ZERO Advertising Cookies: KURYEP DOES NOT USE marketing cookies, commercial tracking pixels (such as Meta / Facebook Pixel, Google AdSense, or TikTok Pixel), or third-party behavioral profiling scripts.
• ZERO Cross-Site Tracking: We never track, monitor, or log your browsing history or online activity across other websites or third-party mobile applications.
• ZERO Data Monetization: KURYEP does not sell, rent, monetize, or disclose your device identifiers or cookie data to data brokers or advertising syndicates.
4. Managing your cookie and storage preferences
Because all cookies and local storage mechanisms deployed by KURYEP are strictly necessary for core functionality, security, and payment processing, disabling cookies in your web browser settings will prevent you from signing in, booking parcel deliveries, or receiving dispatch offers. You may clear your browser cookies and local cache at any time via your browser settings, which will immediately end your authenticated session.