Bukujanji Cookie Policy

Version: 1.1.1 Effective Date: 26 September 2026

1. Introduction

Bukujanji ("we") uses cookies and similar technologies (local storage, session storage) on the Platform's website and apps. This policy explains what cookies are, the types we use, what we use them for, and how you can manage them.

This policy supplements the Bukujanji Privacy Policy. For broader questions about personal data processing, please read the Privacy Policy.

2. What Is a Cookie?

A cookie is a small text file stored on your device when you visit a website. Cookies allow a site to recognise your device, remember preferences, and maintain your login session. Similar technologies (local storage, session storage, IndexedDB) work similarly but are stored in browser storage areas rather than sent automatically in HTTP headers.

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

These are required for the Platform to function. You cannot refuse them without breaking core features such as login and booking.

| Name | Purpose | Duration | |---|---|---| | token | Stores the JWT authentication token after login | 7 days | | branchId | The currently selected outlet (for the merchant dashboard) | 30 days | | companyId | The active company (for the merchant dashboard) | 30 days | | __Secure-csrf | Anti-CSRF token | Session | | locale | Preferred language (id / en) | 1 year |

3.2 Functional Cookies

Help us remember non-essential preferences (e.g. your chosen dashboard layout). Enabled by default but can be deleted in your browser settings without losing access.

3.3 Analytics Cookies

We use Google Analytics 4 to understand page-visit patterns (pages viewed, time on page, device, referral source). We use this to improve the product, not to target you personally. Google processes this data outside Indonesia; see policies.google.com/privacy.

You can refuse analytics cookies through your browser settings, private browsing, or the Google Analytics opt-out browser add-on.

3.4 Marketing Cookies

We use Meta Pixel to measure the effectiveness of our advertising on Facebook/Instagram. The pixel can record your visits and actions on our site and associate them with your Meta account if you have one. Meta processes this data outside Indonesia; see facebook.com/privacy/policy.

Outlet websites (a merchant's subdomain or custom domain) may load GA4, Google Tag Manager, Meta Pixel, or TikTok Pixel belonging to that merchant, configured in their own CMS. For those cookies, the merchant is the data controller.

4. Third-Party Cookies

Some Platform features load assets from third parties that may drop their own cookies:

Midtrans — during payment checkout, the Midtrans payment page may set session cookies. Policy: midtrans.com/privacy.
Google Maps (where used) — venue maps may set Google cookies. Policy: policies.google.com/privacy.

We do not control third-party cookies; please review the respective policies.

5. How to Manage Cookies

You can:

Browser: delete or block cookies via browser settings. Note: disabling strictly necessary cookies may prevent you from logging in or paying.
Consent banner: your choice is stored on your device. To refuse analytics and marketing cookies effectively today, use your browser settings or the opt-out add-on in 3.3.
Logout: pressing Logout clears the token cookie on the current device.

Per-browser instructions:

Chrome: chrome://settings/cookies
Firefox: about:preferences#privacy
Safari: Preferences → Privacy → Manage Website Data
Edge: edge://settings/content/cookies

6. Mobile Apps

Our mobile apps (iOS/Android) do not use traditional HTTP cookies. Instead we store tokens in OS Secure Storage (expo-secure-store / iOS Keychain / Android EncryptedSharedPreferences). You can clear this data by logging out or uninstalling the app.

7. Changes to This Cookie Policy

Updates will be announced via email, an on-Platform banner, and the /legal/cookie-policy page at least 14 days before material changes take effect. Non-material changes (cookie-list adjustments, wording fixes) may be made at any time and will be visible via the "Version" date above.

8. Legal Basis

Our use of cookies is subject to:

Law 27/2022 on Personal Data Protection (especially the principles of transparency, purpose limitation, and explicit consent for non-essential cookies).
Law 11/2008 as amended by Law 19/2016 (the ITE Law) Article 26 (data protection in electronic media).
Permenkominfo 20/2016 on Personal Data Protection in Electronic Systems.

9. Contact

Cookie Policy questions and general support: support@bukujanji.com