Plain-English summary
- We use a handful of cookies, almost all of them strictly necessary to log you in and keep the app secure.
- We don't run advertising or cross-site tracking cookies.
- You can clear or block cookies in your browser at any time — the marketing site will keep working, but the app won't (you can't stay signed in without a session cookie).
What cookies are
Cookies are small text files a website saves in your browser to remember things between requests — most commonly that you're logged in. “Similar technologies” include localStorage, sessionStorage and IndexedDB, which we use sparingly to cache UI state in your browser.
Cookies we use
| Name | Type | Purpose | Duration |
|---|---|---|---|
| bukucloud_session | Strictly necessary | Keeps you signed in. Without this cookie the app can't work. | Session (until logout) |
| XSRF-TOKEN / bukucloud_xsrf | Strictly necessary | Cross-site request forgery (CSRF) protection on every state-changing request. | Session |
| remember_web_* | Strictly necessary | Set when you tick "Remember me" at login so you don't have to sign in every visit. | 30 days |
| lang | Preference | Stores your language preference (English / Bahasa Malaysia) on the marketing site. | 1 year |
| audience | Preference | Remembers whether you're browsing the SME or Accountants view of the marketing site. | 30 days |
| consent | Strictly necessary | Stores your cookie consent choices so the banner doesn't ask again. | 12 months |
Third-party cookies
We do not run third-party advertising or cross-site tracking cookies. The only third-party cookies you may encounter are those set by services we embed for narrow purposes, e.g. ToyyibPay's payment iframe during checkout. Those cookies are governed by ToyyibPay's own cookie policy, not ours.
Managing cookies
You can clear or block cookies in your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Safari: Settings → Privacy → Manage Website Data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Edge: Settings → Cookies and site permissions.
If you block strictly-necessary cookies, the BukuCloud application can't keep you signed in.
Do Not Track
We do not currently respond to Do Not Track signals because we don't run cross-site tracking that DNT was designed to block. The strictly-necessary cookies above are still set so the app can function.
Changes
We will update this page if we add or remove a cookie and bump the version at the top.
Contact
Questions about cookies? Email privacy@bukucloud.com or our DPO at dpo@bukucloud.com.