iCard Club Cookie and Similar Technologies Policy
Version date: September 28, 2026
Effective date: September 28, 2026
This policy supplements the iCard Club Privacy Policy specifically for cookies and similar technologies on the https://icard.club website. It applies only to the website and does not cover device permissions or SDKs in the mobile app. If the general statements in the Privacy Policy differ from the specific statements in this policy regarding website cookies, local storage or analytics, the specific statements in this policy prevail for those matters. The Privacy Policy continues to apply to other processing of personal information. Accepting the Privacy Policy does not constitute consent to non-essential website analytics.
Hong Kong Manka Technology Limited ("we," "us" or "our") operates iCard Club. This policy explains how the https://icard.club website uses cookies, browser local storage and similar technologies, and how you can manage them.
This policy applies to the website and its Chinese, English, Spanish and Portuguese pages. It does not cover device permissions or SDKs in the iCard Club mobile app. For information about the app and our other processing of personal information, see the iCard Club Privacy Policy and List of Third-Party SDK Service Providers. The User License and Service Agreement sets out the rules for using our services. Accepting that agreement or the Privacy Policy does not constitute consent to non-essential analytics technologies.
1. What are cookies and similar technologies?
Cookies are small pieces of data that a website stores in your browser. They can help a website provide functionality, remember your choices or recognize a visit. Browser local storage (Local Storage) is another way for a website to store data on your device. Unlike ordinary cookies, local storage data is not automatically sent to the server with every page request.
In this policy, “similar technologies” mainly refers to the browser local storage used by our website. The sections below describe how we currently use these technologies.
2. Browser storage currently used on our website
Our website uses the following browser local storage to remember your language preference and analytics choice. If you consent to analytics, it also uses GA4 cookies:
| Name | Provider and type | Information stored and purpose | Retention |
|---|---|---|---|
icard:language | iCard Club; Local Storage | Stores your selected language code so that the website can prioritize that language on future visits. This record does not itself contain your name, account details or contact information. | Until you change your language, clear this site's data, or your browser removes it. No fixed automatic expiration is set. |
icard:analytics-consent | iCard Club; Local Storage | Stores whether you accepted or declined analytics, the applicable version and the time of your choice. | Both acceptance and rejection are stored for 180 days. Ordinary browsing does not extend this period. |
_ga | First-party cookie set by Google Analytics on our website | Stores an identifier used to distinguish visitors' browsers. | Set only after valid consent. Maximum of 365 days, without extension through ordinary visits. Where we can manage the cookie, we remove it earlier if you decline or withdraw consent, or if your analytics choice expires. |
_ga_<identifier> | First-party cookie set by Google Analytics on our website; the suffix varies by data stream | Stores session state for a GA4 data stream. | Set only after valid consent. Maximum of 365 days, without extension through ordinary visits. Where we can manage the cookie, we remove it earlier if you decline or withdraw consent, or if your analytics choice expires. |
“First-party cookie” means that the cookie is set under the icard.club domain. It does not mean that Google will not receive related analytics data. The website checks whether your analytics choice is still valid. After 180 days, it stops relying on that choice for analytics and clears the expired record when you next visit. Your browser may also remove any of the data above sooner.
You can switch the website's language at any time. If you clear this site's data, the website may select a language based on your browser settings; you can still change it manually. Restricting local storage may prevent the website from remembering your language preference.
3. Analytics and advertising technologies
If you actively choose to accept analytics, we use Google Analytics 4 (GA4) to understand page visits, traffic sources, sessions and engagement, as well as interactions on the website such as clicks on app download links and language changes. This helps us improve the website's content and experience. GA4 may receive browser and session identifiers, the pages visited and visit times, traffic source, general browser and device information, approximate location, and information about those interactions. These identifiers and visit records should not be treated as fully anonymous.
When your browser connects to Google's services, the connection necessarily transmits technical information, including the IP address needed to establish it. Google states that GA4 uses IP addresses to derive approximate location but does not log or store complete IP addresses in GA4. Related data may be processed outside your country or region. For more information about Google's practices, see How Google uses information from sites or apps that use our services and the Google Privacy Policy.
We do not intentionally send names, email addresses, phone numbers, account credentials, payment information or the contents of forms to GA4. We also do not link website analytics to app accounts. We do not use the website's GA4 data for personalized advertising or remarketing. Google Signals, user-provided data collection and advertising personalization are not enabled.
The retention period for GA4 user-level and event-level data is set to 14 months. Further activity by a user does not automatically reset the retention period for user-level data. Google deletes expired data according to its deletion cycle. This period is separate from the lifespan of cookies on your device and does not govern all standard aggregated reports. See Google Analytics data retention for details.
After you consent to analytics, we also use Alibaba Cloud SLS to process information about website page visits, clicks on download links and language changes. Logs are stored in the eastern United States, retained for 90 days and not exported separately. The feature that adds visitors' public IP addresses to analytics logs is disabled. Withdrawing consent stops future reporting; logs already sent are deleted upon expiry according to the retention policy.
4. Network requests and server logs
Even if you do not allow your browser to store cookies, or you clear this site's data, your browser still has to send requests to the website's servers to display pages. To provide the pages and keep the service secure, we may process IP addresses, access times, requested pages and related network logs as described in our Privacy Policy. Server logs are separate from the browser storage listed in Section 2. Clearing browser storage does not automatically delete server logs created earlier.
5. How you can manage this data
Analytics is off by default. We load GA4 and send analytics data only after you actively choose to accept analytics. Accepting the Privacy Policy or User License and Service Agreement, continuing to browse, closing a notice, or making no choice does not mean that you consent to GA4 analytics. Declining analytics does not prevent you from browsing public pages, switching languages or using app download links.
If no valid analytics choice is stored, the initial notice appears only on the home and download pages. With valid consent, analytics covers all pages of the website, including policy pages.
You can accept or decline analytics, or withdraw your consent, at any time through “Cookie settings” on the website. You can find this option in the footer of the home or download page. If you withdraw consent, we stop future GA4 collection and transmission and remove the GA4 cookies we can manage on this site. Withdrawal does not automatically delete all historical data already sent to Google.
Both acceptance and rejection remain valid for 180 days. When a choice expires, analytics pauses and we ask you again when you visit the home or download page; it will not resume unless you consent again. The 365-day technical lifespan of a GA4 cookie does not extend your 180-day authorization for analytics. If the purpose or method of analytics changes materially in a way that requires renewed authorization, we will seek your consent again before the related processing begins.
The Chinese, English, Spanish and Portuguese pages share one analytics choice within the same browser. Switching languages does not reset or extend your authorization. Your choice is not automatically synchronized across other browsers or devices. You can also use your browser settings to view, delete or restrict cookies and website data for icard.club. Deleting only GA4 cookies does not withdraw an analytics consent that is still stored. To stop analytics, withdraw your consent through “Cookie settings.”
6. Third-party websites and services
If you follow a link from our website to an app store, social media service or other third-party website, that third party may use cookies or other technologies under its own policies. We recommend reviewing its privacy notice. For third-party services that we choose to integrate into our website, we remain responsible for providing the relevant notices and managing those services as required by applicable law.
7. Updates to this policy and contact information
We will update this policy and its version date if the technologies, purposes, recipients or ways to make choices on our website change. For changes that may significantly affect your rights and interests, we will provide the necessary notice under our Privacy Policy and applicable law. Where renewed consent is required, the relevant processing will begin only after we obtain it.
If you have questions about this policy or our processing of personal information, or if you wish to exercise a privacy right, email service@icard.club. For information on how to access, correct or delete your personal information and exercise other rights, see the iCard Club Privacy Policy.