🍪 Cookie Policy – Kiori
Last updated: 04.02.2026
This Cookie Policy explains how Kiori (“we”, “us”, “our”) uses cookies and similar technologies on our website and application.
If you have any questions, contact us at: privacy@crowd-wisdom.com
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website or use an application. They allow us to:
- Enable basic platform functions
- Identify your session
- Improve performance
- Understand how users interact with Kiori
Cookies may be set directly by us (“first-party cookies”) or by external providers (“third-party cookies”).
2. How We Use Cookies
We use cookies for the following purposes:
2.1 Strictly Necessary Cookies
(Always active, no consent required)
These cookies are essential for:
- Logging in
- Authenticating users
- Maintaining security
- Managing sessions
- Remembering core settings
Kiori cannot function properly without these cookies.
Examples include:
- Session tokens
- Authentication cookies
- CSRF protection cookies
2.2 Analytics & Performance Cookies (Consent Required)
These cookies help us understand:
- How users navigate the platform
- Which features are used
- Device and performance data
- Crash reports and anomalies
We use:
PostHog
Provider: PostHog Inc. (data stored in EU — eu.posthog.com) Purpose: Product analytics, event tracking, cross-subdomain user identification Consent: Required Mode: Identified-only (no anonymous person profiles)
Google Analytics 4 (GA4)
Provider: Google Ireland Ltd Purpose: Website analytics, conversion tracking Consent: Required IP anonymization: Enabled
Vercel Analytics
Provider: Vercel Inc. Purpose: Web performance monitoring (Core Web Vitals) Consent: Required
Firebase Analytics (if enabled)
Provider: Google Ireland Ltd Purpose: Usage analytics & performance insights Consent: Required
Analytics cookies are never set without your explicit consent via our cookie banner.
2.3 Advertising Cookies (Consent Required — Currently Disabled)
Kiori has integrated Google AdSense to support free public workspaces. This feature is currently disabled but may be activated in the future.
When enabled, advertising cookies may be set by:
Google AdSense
Provider: Google Ireland Ltd Purpose: Display and interstitial advertising for free-tier users Consent: Required Note: Paid-tier users are never shown ads
Advertising cookies are never set without your explicit consent.
3. Cookie Consent Banner
When you visit Kiori for the first time, you will see a cookie banner allowing you to:
- Accept all cookies
- Reject all optional cookies
- Select specific categories
- Withdraw your consent at any time
Your preferences are stored to ensure compliance with GDPR.
4. Managing Your Cookie Preferences
You can modify your cookie settings at any time by:
- Updating your choices in the cookie banner
- Clearing cookies in your browser settings
- Blocking cookies entirely (which may prevent Kiori from functioning properly)
If you deactivate strictly necessary cookies, you may be unable to use the service.
5. Third-Party Cookies & Data Transfers
Some cookies may lead to data sharing with third-party providers such as Google, PostHog, and Vercel.
These providers may process data:
- within the EU
- or outside the EU (e.g., the United States)
Where transfers occur outside the EEA, they are protected through:
- Standard Contractual Clauses (SCCs)
- Additional security measures by the provider
Additionally, Cloudflare Turnstile may set cookies for bot protection and CAPTCHA verification purposes. These are classified as strictly necessary cookies.
Details on data processing can be found in the Kiori Privacy Policy.
6. Cookie Duration
Cookies may be:
- Session cookies — deleted when you close your browser
- Persistent cookies — stored for a set duration unless deleted manually
Analytics cookies generally have limited retention periods (e.g., 1–13 months).
7. List of Cookies Used
Strictly Necessary
| Cookie Name | Purpose | Provider | Duration |
|---|---|---|---|
| session_token | Authentication | Kiori | Session |
| auth_cookie | Login/session stability | Kiori | Session |
| csrf_token | Security | Kiori | Session |
| cookie-consent | Stores cookie consent preference | Kiori | 1 year |
| cf_clearance | Bot protection / CAPTCHA | Cloudflare Turnstile | Session |
Analytics (Consent Required)
| Cookie Name | Purpose | Provider | Duration |
|---|---|---|---|
| ph_*, distinct_id | Product analytics & user ID | PostHog | 1 year |
| _ga, _gid, etc. | Analytics & usage metrics | Google Analytics | 1–13 months |
| va_* | Web performance metrics | Vercel Analytics | Session |
| firebase_* | Performance analytics | Firebase | Variable (short-term) |
Advertising (Consent Required — Currently Disabled)
| Cookie Name | Purpose | Provider | Duration |
|---|---|---|---|
| _gcl_*, _gads, etc. | Ad personalization & tracking | Google AdSense | 1–13 months |
(Cookie names may vary depending on configuration. Advertising cookies are not currently active.)
8. Updating This Cookie Policy
We may update this Cookie Policy to reflect:
- Changes in functionality
- Legal requirements
- New analytics services
- Improvements in transparency
We will notify users of material changes where appropriate.
9. Contact
For questions about this Cookie Policy or data protection, contact:
Crowd Wisdom SLU Email: privacy@crowd-wisdom.com