KUULI
Back
Sign InGet Started

Cookie Policy

At KUULI, we believe in being clear and transparent about how we use cookies. This page explains exactly which cookies KUULI uses, why we use them, and how you can control them. To learn more about how we process your personal information generally, please read our Privacy Policy.

What are cookies?

Cookies are small text files that are sent to or accessed from your web browser or your device's memory. A cookie typically contains the name of the domain (internet location) from which the cookie originated, the "lifetime" of the cookie (i.e., when it expires) and a randomly generated unique number or similar identifier.

What cookies does KUULI use?

KUULI uses only two cookies. Both are first-party (set by KUULI, not by a third party) and strictly necessary — the app cannot keep you signed in or protect your account without them. KUULI does not use any optional, analytics, advertising, marketing, social, or tracking cookies.

kuuli_csrf — security (strictly necessary)

Protects you against cross-site request forgery. The token stored in this cookie is matched against a token the app sends with each request that changes your data, so we can confirm the request genuinely came from you.

Session cookie — keeping you signed in (strictly necessary)

Stores the identifier for your authenticated session so you stay signed in as you move between pages. It is marked httpOnly, is sent only over HTTPS in production, uses SameSite=Lax, and expires after 30 days of inactivity.

What KUULI does not use

To be clear about what KUULI does not do:

  • No analytics cookies or analytics SDKs.
  • No advertising, marketing, or retargeting cookies, pixels, or web beacons.
  • No social-networking or social-share cookies.
  • No mobile attribution, measurement, or fraud-fingerprinting SDKs.

KUULI also sends no SMS messages of any kind. Two-factor authentication uses an authenticator app (TOTP), and verification codes and notifications are delivered by email — not by text message.

Because KUULI uses no non-essential cookies or tracking, there is no cookie-consent banner, no consent-management tool, and no Global Privacy Control (GPC) handling — there is nothing optional to opt in or out of.

How can you control cookies?

KUULI's two cookies are strictly necessary, so there are no optional cookies to turn off inside the app. On the web, most browsers still let you block or delete cookies through their settings — the exact steps differ by browser, so check your browser's help menu. Please note that if you block or delete KUULI's cookies, you will not be able to sign in or use the app securely.

On mobile, the app stores an equivalent session token on your device to keep you signed in. It is used only to operate and secure your account — never for advertising or tracking.

How to contact us?

If you have questions about this Cookie Policy, you can contact us at Brandan@kuuli.io.