Kebijakan Cookie

Versi: 1.0.0 · Berlaku: 8 Juni 2026

Pengendali Data: PT Vintora Teknologi Indonesia

Platform: CRIVE — crive.app

Daftar Isi

Apa Itu Cookie?
Cookie yang Kami Gunakan
Cookie Pihak Ketiga
Pengelolaan Cookie
Dampak Menonaktifkan Cookie
Dasar Hukum
Perubahan Kebijakan
Kontak

1. Apa Itu Cookie?

Cookie adalah file teks kecil yang disimpan di perangkat Anda saat mengunjungi situs web atau menggunakan aplikasi. Cookie membantu kami mengingat preferensi Anda dan meningkatkan pengalaman pengguna.

CRIVE menggunakan cookie dan teknologi serupa (local storage, session storage) untuk menjalankan layanan dengan optimal.

2. Cookie yang Kami Gunakan

🔒 Cookie Esensial (Wajib)

Autentikasi: JWT access token (memori) + refresh token (Keychain/Keystore terenkripsi) — RS256, 15 menit + 30 hari
Sesi: Identifikasi sesi pengguna aktif
Keamanan: CSRF protection, rate limiting
Preferensi: Bahasa (id/en), timezone (WIB/WITA/WIT), tema (light/dark/system)

📊 Cookie Analitik (Opsional — Opt-OUT)

Analitik Penggunaan: Memahami fitur yang paling sering digunakan
Behavioral Tracking: 27 event taxonomy (5 kategori) — hanya jika Anda mengizinkan
Performance: Waktu muat, error rate, cold start monitoring

📣 Cookie Pemasaran (Opsional — OFF default)

Tips & Penawaran: Rekomendasi fitur dan promo — OFF secara default
Kami TIDAK menjual data ke pihak ketiga untuk iklan

3. Cookie Pihak Ketiga

CRIVE menggunakan layanan pihak ketiga yang mungkin menyimpan cookie mereka sendiri:

Layanan	Tujuan	Kebijakan
AWS (Singapore)	Hosting & infrastruktur	Link ↗
RevenueCat	Subscription management	Link ↗
Google Sign-In	OAuth authentication	Link ↗
Apple Sign-In	OAuth authentication	Link ↗

4. Pengelolaan Cookie

Anda memiliki kontrol penuh atas cookie non-esensial:

Melalui Aplikasi CRIVE

Pengaturan → Privasi & Keamanan — kelola AI Training Consent, Analitik Penggunaan, Berbagi Data Anonim, dan Tips & Penawaran.

Melalui Browser

Anda dapat menghapus atau memblokir cookie melalui pengaturan browser. Setiap browser memiliki cara berbeda — lihat dokumentasi browser Anda.

🛡️ Default kami: Cookie analitik = ON (opt-out), Cookie pemasaran = OFF (opt-in). Anda selalu bisa mengubah pilihan kapan saja.

5. Dampak Menonaktifkan Cookie

Menonaktifkan cookie esensial akan menyebabkan:

Tidak dapat login atau mempertahankan sesi
Preferensi bahasa dan tema tidak tersimpan
Fitur keamanan (CSRF protection) tidak berfungsi

Menonaktifkan cookie opsional tidak mempengaruhi fungsionalitas utama aplikasi.

6. Dasar Hukum

Penggunaan cookie kami berdasarkan:

UU No. 27 Tahun 2022 tentang Pelindungan Data Pribadi (UU PDP) — Pasal 20-26
Persetujuan eksplisit untuk cookie non-esensial (Pasal 20 ayat 2)
Kepentingan yang sah untuk cookie esensial yang diperlukan agar layanan berfungsi

Semua data disimpan di server AWS ap-southeast-1 (Singapore) sesuai SSOT §62.5 M1-M6, dengan migrasi ke ap-southeast-3 (Jakarta) pada M7+ untuk kepatuhan penuh UU PDP.

7. Perubahan Kebijakan

Kami dapat memperbarui Kebijakan Cookie ini dari waktu ke waktu. Perubahan material akan diberitahukan melalui:

Notifikasi dalam aplikasi
Email ke alamat terdaftar
Banner di halaman ini

Penggunaan berlanjut setelah perubahan dianggap sebagai persetujuan terhadap kebijakan baru.

8. Kontak

Pertanyaan tentang cookie atau data pribadi?

privacy@crive.app

Jamal NR — CEO & DPO ad interim
PT Vintora Teknologi Indonesia
Respons dalam 14 hari kerja

Cookie Policy

Version: 1.0.0 · Effective: June 8, 2026

Data Controller: PT Vintora Teknologi Indonesia

Platform: CRIVE — crive.app

What Are Cookies?
Cookies We Use
Third-Party Cookies
Managing Cookies
Impact of Disabling Cookies
Legal Basis
Policy Changes
Contact

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website or use an application. Cookies help us remember your preferences and improve your user experience.

CRIVE uses cookies and similar technologies (local storage, session storage) to operate our services optimally.

2. Cookies We Use

🔒 Essential Cookies (Required)

Authentication: JWT access token (memory) + refresh token (encrypted Keychain/Keystore) — RS256, 15 minutes + 30 days
Session: Active user session identification
Security: CSRF protection, rate limiting
Preferences: Language (id/en), timezone (WIB/WITA/WIT), theme (light/dark/system)

📊 Analytics Cookies (Optional — Opt-OUT)

Usage Analytics: Understanding which features are used most frequently
Behavioral Tracking: 27 event taxonomy (5 categories) — only if you allow
Performance: Load time, error rate, cold start monitoring

📣 Marketing Cookies (Optional — OFF by default)

Tips & Offers: Feature recommendations and promotions — OFF by default
We do NOT sell data to third parties for advertising

3. Third-Party Cookies

CRIVE uses third-party services that may store their own cookies:

Service	Purpose	Policy
AWS (Singapore)	Hosting & infrastructure	Link ↗
RevenueCat	Subscription management	Link ↗
Google Sign-In	OAuth authentication	Link ↗
Apple Sign-In	OAuth authentication	Link ↗

4. Managing Cookies

You have full control over non-essential cookies:

Via CRIVE App

Settings → Privacy & Security — manage AI Training Consent, Usage Analytics, Anonymous Data Sharing, and Tips & Offers.

Via Browser

You can delete or block cookies through your browser settings. Each browser has different methods — see your browser documentation.

🛡️ Our defaults: Analytics cookies = ON (opt-out), Marketing cookies = OFF (opt-in). You can always change your choices at any time.

5. Impact of Disabling Cookies

Disabling essential cookies will cause:

Inability to log in or maintain sessions
Language and theme preferences not saved
Security features (CSRF protection) not functioning

Disabling optional cookies does not affect the core functionality of the application.

6. Legal Basis

Our use of cookies is based on:

Law No. 27 of 2022 on Personal Data Protection (UU PDP) — Articles 20-26
Explicit consent for non-essential cookies (Article 20 paragraph 2)
Legitimate interest for essential cookies required for the service to function

All data is stored on AWS ap-southeast-1 (Singapore) servers per SSOT §62.5 M1-M6, with migration to ap-southeast-3 (Jakarta) at M7+ for full UU PDP compliance.

7. Policy Changes

We may update this Cookie Policy from time to time. Material changes will be notified through:

In-app notification
Email to registered address
Banner on this page

Continued use after changes constitutes acceptance of the new policy.

8. Contact

Questions about cookies or personal data?