A short list, because that's the truth.
CraftCred uses four cookies, all required to keep your account signed in and secure. No advertising, no cross-site tracking. Here's exactly what each one does.
Last updated: October 2, 2026
What this policy covers
This Cookie Policy explains the cookies and similar technologies CraftCred uses, why, and for how long. It's published by Billaza Technologies Ltd (RC 9533555), the company behind CraftCred -- see our Privacy Policy for our full contact and company details.
The cookies, in full
| Cookie | What it's for | Type | Duration |
|---|---|---|---|
| cc_at | Keeps you signed in. Holds your short-lived access token. | Strictly necessary, httpOnly | 15 minutes |
| cc_rt | Lets you stay signed in across visits without re-entering your password. Only sent to our sign-in endpoints, not every request. | Strictly necessary, httpOnly | Until you sign out, or up to 30 days of inactivity |
| cc_csrf | A random token that protects your account from cross-site request forgery -- a type of attack where another website tries to act on your behalf without your knowledge. Contains no personal information. | Strictly necessary | 30 days |
| cc_session | A non-secret hint that tells the app whether to attempt a silent sign-in refresh. Contains no personal information and can't be used to sign in on its own. | Strictly necessary | Matches cc_rt |
The cookies we use
This is the complete list. CraftCred does not set, and has never set, any advertising, cross-site tracking, or social-media cookie.
Other on-device storage
- A small amount of browser local storage remembers interface preferences that aren't sensitive -- for example, whether your dashboard sidebar is expanded, or which workspace view (artisan, master, employer) you last had open if your account has more than one. None of this is personal information, and none of it is an authentication token: your sign-in tokens live only in the httpOnly cookies above, which page scripts and local storage cannot read.
- A small amount of browser session storage is used once per browser tab to avoid showing you the same achievement notification twice. It's cleared automatically when you close the tab.
Resources loaded from other domains
CraftCred's pages load web fonts directly from Google Fonts, so your browser makes a request to a Google-operated domain on every page load. This is a standard, widely-used font delivery setup; Google's font-serving infrastructure doesn't set tracking cookies through it, but your device does make a direct network request to Google when you visit CraftCred, which means Google receives your IP address for that request in the same way any website request does.
Do we need your consent for these?
No, and here's why: every cookie in the table above exists to keep you signed in and your account secure -- what's often called "strictly necessary" in data protection law. Cookies in that category are exempt from the consent requirement that applies to non-essential cookies like advertising or analytics tracking, precisely because the site can't function as a logged-in experience without them. We don't show a cookie-consent banner today because we don't use any cookie that requires one.
This will change the day that stops being true. If CraftCred ever adds analytics, advertising, or any other non-essential tracking technology, we will update this policy first and present you with a real choice before that technology is active for you -- not retroactively justify it afterward.
Managing cookies in your browser
You can block or delete cookies through your browser's settings. Because every CraftCred cookie is required to keep you signed in, blocking them will mean you can't stay logged in to your account -- there's no way around this while the cookie is strictly necessary for that function. This is a browser-level setting, not something CraftCred controls directly.
Changes to this policy
We'll update this page if the cookies or storage we use change -- most importantly, before we ever introduce a cookie that isn't strictly necessary. When we do, we'll revise the "last updated" date above.
Questions
If you have questions about this policy, contact us through the Contact page on this website or at support@craftcred.africa.