Cookie Notice
www.duffloo.com and app.duffloo.com · Duffloo Inc.
This Cookie Notice explains the cookies and similar technologies used on www.duffloo.com and app.duffloo.com, and the choices you have. It forms part of our Privacy Policy, which explains how we handle personal information more generally.
1. What cookies are
Cookies are small text files a website stores in your browser. Similar technologies do the same job in different ways: local storage and session storage keep small pieces of information in your browser, and tags (such as the Meta Pixel) are small pieces of code that let a provider measure what happens on a page. In this Notice, “cookies” covers all of these. Some are set by Duffloo (first-party); others are set by the providers named below (third-party), under their own privacy policies.
2. The categories we use
- Strictly necessary — needed for the sites to work: remembering your cookie choice, keeping you signed in, saving an order in progress and preventing payment fraud. These do not need your consent. You can block them in your browser, but parts of the sites may stop working.
- Preferences and functionality — remember things like which prompts you have already seen, credit referrals, and provide features such as maps, video and live chat.
- Analytics — help us understand how the sites are used so we can improve them.
- Advertising — measure whether our ads work and help us show them to people likely to be interested.
Google Analytics, Google Ads, Microsoft Clarity, the Meta Pixel, tawk.to live chat and Firebase Performance Monitoring load only after you select Accept. We do not sell your personal information.
www.duffloo.com
| Name and provider | Purpose | Category | Needs your consent? | How long |
|---|---|---|---|---|
| duffloo_analytics_consent Duffloo (cookie on .duffloo.com, plus a local storage copy) | Remembers whether you accepted or declined cookies, so we do not ask on every page. Shared with app.duffloo.com. | Strictly necessary | No | 180 days (cookie); the local storage copy stays until you clear it |
| _dfl_attr Duffloo (cookie on .duffloo.com) | Records how you first and most recently reached us: campaign tags (utm_*), ad click identifiers (such as gclid or fbclid), the landing page and the referring site. If you sign up, this is saved with your account so we know which channels bring customers and Washer Heroes. This cookie is not shared with advertising partners. | Analytics | No | 90 days |
| _dfl_acq_ref Duffloo (cookie on .duffloo.com) | Holds the referral code from a referral link, so the person who referred you is credited when you sign up. | Preferences and functionality | No | 90 days |
| duffloo.entryModal.lastShownAt (local storage); modalShown, duffloo.pageViews, registrationModalShown (session storage) Duffloo | Limits how often our promotional pop-up and sign-up prompt appear, so you are not shown them repeatedly. | Preferences and functionality | No | Local storage until you clear it (the pop-up can reappear after 7 days); session storage until you close the tab |
| duffloo_support_chat_offset (local storage); portalHandoffDone:*, duffloo.contractPreSignAck.* (session storage) Duffloo (Washer Hero portal only) | Remembers where you moved the support chat button, and keeps track of onboarding steps you have already completed in this visit. | Strictly necessary | No | Local storage until you clear it; session storage until you close the tab |
| Firebase Authentication (browser database firebaseLocalStorageDb) Google (Firebase) | Keeps you signed in to the Washer Hero portal and account pages. | Strictly necessary | No | Until you sign out |
| __stripe_mid, __stripe_sid Stripe | Fraud prevention on pages where you pay, such as buying a gift card. | Strictly necessary | No | 1 year (__stripe_mid); 30 minutes (__stripe_sid) |
| Google reCAPTCHA | Protects phone-number verification during Washer Hero sign-up from automated abuse. | Strictly necessary | No | Set by the provider |
| Google Maps | Displays our service-area map. Google may set or read its own cookies when the map loads. | Preferences and functionality | No | Set by the provider |
| YouTube (privacy-enhanced mode, youtube-nocookie.com) | Plays the video on our home page. The player loads only after you press play. | Preferences and functionality | No — nothing loads until you press play | Set by the provider |
| Google Analytics 4 (_ga, _ga_WEWPNGXLC8), loaded through Google Tag Manager | Measures visits, pages viewed and sign-ups so we can understand and improve the site. | Analytics | Yes | 2 years |
| Google Ads conversion linker and conversion tags (such as _gcl_au) | Measures whether our Google ads lead to sign-ups and orders. | Advertising | Yes | 90 days |
| Microsoft Clarity (such as _clck, _clsk) Microsoft | Shows how pages are used (clicks, scrolling and session replays) so we can find and fix problems. | Analytics | Yes | 1 year (_clck); 1 day (_clsk) |
| Meta Pixel (such as _fbp, _fbc) Meta | Measures whether our Facebook and Instagram ads lead to visits and sign-ups, and helps us reach people likely to be interested in Duffloo. | Advertising | Yes | 90 days |
| tawk.to live chat tawk.to | Provides the live chat window on public pages and keeps your conversation connected. Not loaded in the Washer Hero portal, which has its own support chat. | Preferences and functionality | Yes | Set by the provider |
app.duffloo.com
| Name and provider | Purpose | Category | Needs your consent? | How long |
|---|---|---|---|---|
| duffloo_analytics_consent, _dfl_attr, _dfl_acq_ref Duffloo (cookies on .duffloo.com) | The same cookies described for www.duffloo.com, shared across both sites: your cookie choice, how you reached us, and any referral code. If you have accepted analytics, the app also reads the Google Analytics cookies so an order can be linked to the visit that led to it. | Strictly necessary; Analytics; Preferences and functionality | No | 180 days (choice); 90 days (the other two) |
| Firebase Authentication (session storage firebase:authUser:*) Google (Firebase) | Keeps you signed in while the tab is open. | Strictly necessary | No | Until you sign out or close the tab |
| orderFormV2:state, gift_card_idempotency_*, @duffloo_referral_claim (local storage); duffloo.pendingOrderDeepLink (session storage) Duffloo | Saves an order you have started, prevents a gift card from being redeemed twice by accident, remembers a referral you are claiming, and reopens an order you followed a link to after you sign in. | Strictly necessary | No | Local storage until cleared or no longer needed (gift card entries expire after 24 hours); session storage until you close the tab |
| @banner_views_v2, duffloo.homeAppPrompt, duffloo.signupAppPrompt (local storage) Duffloo | Remembers which announcements and app-download prompts you have already seen, so they are not repeated. | Preferences and functionality | No | Until you clear it |
| __stripe_mid, __stripe_sid Stripe | Fraud prevention on payment screens. | Strictly necessary | No | 1 year (__stripe_mid); 30 minutes (__stripe_sid) |
| Google Maps address autocomplete | Suggests addresses as you type your pickup address. Google may set or read its own cookies. | Preferences and functionality | No | Set by the provider |
| Google Analytics 4 (_ga, _ga_WEWPNGXLC8) and Google Ads conversion tags (such as _gcl_au), loaded through Google Tag Manager | Measures app use, orders and whether our Google ads lead to orders. | Analytics; Advertising | Yes | 2 years (_ga, _ga_WEWPNGXLC8); 90 days (_gcl_au) |
| Microsoft Clarity (such as _clck, _clsk) Microsoft | Shows how screens are used (clicks, scrolling and session replays) so we can find and fix problems. | Analytics | Yes | 1 year (_clck); 1 day (_clsk) |
| Meta Pixel (such as _fbp, _fbc) Meta | Measures whether our Facebook and Instagram ads lead to orders. | Advertising | Yes | 90 days |
| Firebase Performance Monitoring Google (Firebase) | Measures page-load and network performance so we can keep the app fast. | Analytics | Yes | Set by the provider |
Durations are the defaults each provider documents and may change. Where we could not confirm a duration, the table says “Set by the provider”.
3. How consent works
The first time you visit either site, a banner asks whether you accept cookies. If you select Decline, none of the tags that need consent are loaded. If you select Accept, they load on that page and on later visits. Your choice is saved for 180 days in a cookie shared by www.duffloo.com and app.duffloo.com, so you are asked only once for both sites.
Changing your choice
- On www.duffloo.com, select “Cookie Preferences” in the footer of any page to reopen the banner and choose again. If you change from Accept to Decline, the page reloads so the tags stop straight away.
- On app.duffloo.com, there is no separate control yet. Because the choice is shared, changing it on www.duffloo.com also changes it for app.duffloo.com the next time you open the app.
- Declining later does not delete cookies that providers have already set. To remove them, clear cookies and site data for duffloo.com in your browser settings. Clearing them also clears your saved choice, so the banner will ask you again.
4. Opting out of interest-based advertising
You can also limit interest-based advertising directly with the providers:
- Digital Advertising Alliance of Canada: youradchoices.ca
- Google ad settings: adssettings.google.com
- Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout
- Meta ad preferences: facebook.com/adpreferences
Opting out of interest-based advertising does not mean you will stop seeing ads; the ads you see may be less relevant to you.
5. Mobile apps
This Notice covers our websites, www.duffloo.com and app.duffloo.com. How our iOS and Android apps handle information is described in our Privacy Policy.
6. Changes to this Notice
We update this Notice when the technologies we use change. The effective date at the top shows when it was last changed.
7. Contact us
Questions about this Notice can be sent to our Privacy Officer at privacy@duffloo.com, or by mail to Duffloo Inc., Attn: Privacy Officer, 58 Red Fox Place, Toronto, Ontario M1B 0B1, Canada.