Cookie Policy
Last updated: 2026-10-11
KumoBuilder uses very little browser storage, and no advertising or analytics cookies. This page lists every cookie and storage key we set, what it is for, and how long it lasts. Nothing optional is set before you choose.
The categories
| Category | What it means here |
|---|---|
| Strictly necessary | Needed to sign in, keep you signed in, keep the service secure, and carry out choices you make yourself (like your theme). Always on; exempt from consent. |
| Functional | Makes the site faster or more convenient: caches of public pages, upload time estimates. Only with your consent. |
| Analytics | None in use. If we ever add any, it stays off unless you turn it on. |
| Marketing | Remembering the affiliate who referred you, so they are credited if you sign up. Only with your consent. |
Everything we store
| Name | Type | Set by | Purpose | Duration | Category |
|---|---|---|---|---|---|
kumobuilder.auth.token | Local storage (session storage if “Remember me” is off) | KumoBuilder (via Supabase) | Keeps you signed in | Until you sign out; session storage ends when the tab closes | Strictly necessary |
kumobuilder.auth.token-code-verifier | Local or session storage | KumoBuilder (via Supabase) | Completes “Continue with Google” securely | Minutes; removed after sign-in | Strictly necessary |
kumobuilder.auth.remember | Local storage | KumoBuilder | Your “Remember me” choice | Until changed | Strictly necessary |
kumobuilder.auth.startedAt | Local storage | KumoBuilder | Signs you out after 24 hours when “Remember me” is off | Until you sign out | Strictly necessary |
kb:consent | Local storage | KumoBuilder | Your cookie choices and when you made them | 12 months, then we ask again | Strictly necessary |
kb_google_signin | Cookie (HTTP-only, SameSite=Lax) | KumoBuilder | Connects Google Search Console to the browser that started it | 10 minutes | Strictly necessary |
v-theme-pref | Local storage | KumoBuilder | The light or dark theme you chose | Until changed | Strictly necessary |
kumobuilder.push-nudge | Local storage | KumoBuilder | Not asking again about notifications you dismissed | Until cleared | Strictly necessary |
kb:content:*, kb:content:legal-presence | Local storage | KumoBuilder | A copy of public pages (FAQ, docs, blog) so they open instantly | Replaced on each visit | Functional |
kb.msPerByte | Local storage | KumoBuilder | Upload time estimates from your own past uploads | Until cleared | Functional |
kb:ref | Local storage | KumoBuilder | The affiliate link you arrived through, so they are credited if you sign up | 30 days | Marketing |
kb:ref-click:<code> | Session storage | KumoBuilder | Counts that affiliate visit once per tab | Until the tab closes | Marketing |
Most of these are browser storage rather than cookies: they stay in your browser and are not sent with every request. The only cookie is kb_google_signin, used for ten minutes while you connect Google Search Console.
Third parties
- No third-party cookies are set on kumobuilder.com.
- Cloudflare Turnstile, our bot check on sign-up and sign-in, runs in a frame from challenges.cloudflare.com. In our tests it sets no cookies; it uses signals from your browser to tell people from bots.
- Google: if you choose “Continue with Google”, you sign in on Google’s own pages, which use Google’s cookies under Google’s policy.
- Cloudflare adds its Web Analytics script to our pages; our site’s security policy blocks it, so it never runs.
Websites built with KumoBuilder
A business’s website can include our chat widget, which keeps a random visitor id in that website’s browser storage (kumobuilder.visitor) so a chat continues across pages. It identifies nobody by name. The business that owns the site decides what else it uses, and its own policy applies there.
Changing your choices
— also linked as “Cookie settings” at the foot of every page and in Settings → Profile. Turning a category off removes what it stored. Your choice is kept for 12 months, then we ask again. If your browser sends a Global Privacy Control signal, marketing stays off unless you turn it on.
You can also clear or block storage in your browser. Blocking strictly necessary storage means you cannot stay signed in.
Questions: hello@kumobuilder.com. More on how we use data in the Privacy Policy.