Log in
Effective date: on publication · Version 2026-07-11
Language: This Notice is available in both English and Bahasa Malaysia (Personal Data Protection Act 2010, s.7(3)).
"Taokeh" is a cloud accounting and ERP service operated by Enya Venture, a sole proprietorship registered with the Companies Commission of Malaysia (SSM), business registration no. 003853053-D (new format 202603132312), with a registered address at Inspirasi Mont Kiara, Jalan Kiara 4, 50480 Kuala Lumpur, Malaysia.
In this Notice, "we", "us" and "our" mean Taokeh (Enya Venture); "you" means anyone using our website or the Taokeh application at https://taokeh.my.
We keep our use of cookies deliberately small and honest.
tk_attr) that simply notes which ad link first brought you, so a later sign-up can be credited to the right campaign.The essential cookie is strictly necessary to deliver a service you have asked for (logging in), so it needs no consent. The advertising-measurement cookies are optional, so — on the public marketing pages where they could run — we show a short banner and set nothing until you choose. The signed-in Taokeh application carries no advertising or measurement tags — none.
A cookie is a small text file a website stores in your browser. This is the full list:
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
Session / sign-in cookie (the app's connect.sid session cookie) |
Keeps you signed in across pages after you log in; maintains your session; protects against cross-site request forgery (CSRF) and helps secure the login. Strictly necessary to deliver the service you requested. | First-party; HttpOnly, SameSite=Lax and Secure in production (cannot be read by client-side scripts or third parties) |
About 7 days — also expires when you log out or when your browser session ends |
Your advertising-cookie choice (tk_ads_consent) |
Remembers whether you accepted or declined the advertising-measurement cookies on the banner, so we don't ask again on every page and only load the Meta cookies if you said yes. It is a functional preference cookie, not a tracker in itself. Value is simply granted or denied. |
First-party; SameSite=Lax and Secure in production |
About 180 days (roughly six months), then we ask again |
Meta Pixel cookies (_fbp, and _fbc if you arrived from a Meta/Facebook ad link) |
Set by Meta's advertising Pixel to measure whether our ads led to a visit, a use of the free tools, or a sign-up. Loaded on public marketing pages only after you accept the banner. Provider: Meta Platforms — see Meta's Cookies Policy. | Third-party (Meta), set only after opt-in | Set and managed by Meta (typically up to about 90 days); you can clear them any time (see section 5) |
First-touch attribution (tk_attr) |
A small first-party record of how you first reached us — a Google click id (gclid) and/or campaign tags (utm_*) from the link you arrived on — so that if you later sign up we can tell which campaign brought you. It is set only if the link you arrived on actually carried those parameters, it is never shared with a third party from your browser, and it holds no name, email or browsing history. A functional first-party cookie, not a tracker that follows you around the web. |
First-party; SameSite=Lax and Secure in production |
About 90 days; you can clear it any time (see section 5) |
Google Ads tag (gtag.js, and the Google cookies it sets such as _gcl_*) |
Google's advertising-measurement tag, used to measure whether our Google Search ads led to a visit or a sign-up. Loaded on public marketing pages only after you accept the banner. Provider: Google — see Google's cookie information. | Third-party (Google), set only after opt-in | Set and managed by Google (typically up to about 90 days); you can clear them any time (see section 5) |
The session cookie is set only after you choose to log in. The tk_ads_consent cookie is set only when you click a choice on the banner. The Meta cookies are set only if you accept, and never inside the signed-in application.
Related browser storage (not a cookie). If — and only if — you accept the advertising banner and you arrived on a page carrying campaign tags (for example utm_source or a Meta click id), we also keep a small first-party record of that landing in your browser's localStorage (keys tk_first_touch and tk_last_touch) so that a later sign-up can be attributed to the campaign that brought you. This stays in your browser; clearing your site data removes it. Decline the banner and nothing is stored.
To be clear, Taokeh does not:
tk_ads_consent);We also do not use AI features to track you. Our optional AI helper features only process the text a user submits to them, and are separate from cookies (see our Privacy Policy / PDPA Notice).
The banner. On our public marketing pages, the banner lets you Accept or Decline the advertising-measurement cookies. Nothing in that category loads until you choose, and your choice is remembered in the tk_ads_consent cookie so you are not asked on every page. The essential sign-in cookie works either way.
Changing your mind. To be shown the choice again, delete the tk_ads_consent cookie for taokeh.my in your browser settings — the banner will reappear on your next visit to a public page and you can choose afresh. If you had accepted and want the Meta cookies gone, also clear Meta's _fbp / _fbc cookies (and, if you wish, the tk_first_touch / tk_last_touch entries in site data) at the same time. Your banner choice also governs the server-side measurement events described in section 7: our server follows your most recent recorded choice, so choosing Decline (including when the banner reappears after you delete the cookie) stops future server-side events too.
Browser controls. You are always in control of cookies in your browser. You can view, block or delete cookies through your browser settings (for example in Chrome, Safari, Firefox or Edge), and most browsers let you block or delete cookies for a specific site. Blocking or deleting the strictly-necessary session cookie will prevent you from logging in and stop the Taokeh application from working properly; blocking the optional advertising cookies simply means we can't measure our ads — the service itself is unaffected.
Beyond the essential sign-in cookie, we use exactly one optional category: advertising measurement (Meta/Facebook and Google), on our public marketing pages only. When you accept the banner, this loads Meta's advertising Pixel and Google's Ads tag (setting the cookies listed in section 3) so we can measure whether our ads lead people to visit Taokeh, try the free tools, or sign up. It is strictly opt-in: nothing in this category is set, and no measurement event fires, until you accept — declining or ignoring the banner keeps it fully off. Separately, the small first-party tk_attr cookie (section 3) simply notes the ad link you first arrived on; it is not a tracker and shares nothing with a third party from your browser.
If we ever introduce a further optional category — for example web analytics, or embedded third-party content — we will again update this Notice and obtain your consent (opt-in) before activating it, in line with PDPA practice. We will not switch on any non-essential cookie behind your back.
As part of the opt-in advertising measurement described above, when you have accepted the banner and then sign up, we also send Meta a server-side sign-up event that includes a one-way SHA-256 hash of your email address — never your raw email — along with your IP address and browser user-agent, which Meta uses for matching, so the sign-up can be matched to our ad measurement even if browser cookies are blocked. These server-side events follow your most recent recorded banner choice (see section 5) — choose Decline and they stop too. How we handle your personal data, including this, is set out in our Privacy Policy / PDPA Notice.
This Cookie Notice is short by design. The substantive privacy details are in our Privacy Policy / PDPA Notice, which is our notice under the Personal Data Protection Act 2010 (as amended by the Personal Data Protection (Amendment) Act 2024). That document sets out:
Please read this Cookie Notice together with the Privacy Policy / PDPA Notice and our Terms of Service.
We may update this Cookie Notice from time to time — for example if our cookie usage changes. This version introduced one opt-in advertising-measurement category (Meta), as described above. We revise the effective date above whenever the Notice changes, and for any material change (such as introducing a further non-essential cookie category) we will notify you and obtain consent where required.
Questions about cookies or your personal data?