Cookies and local storage
Cookies are small files a website can ask your browser to store and return with requests. Local storage keeps values on your device for a website to read. The same privacy principles can apply to both, even when a technology is not technically a cookie.
Kioni uses necessary first-party sign-in cookies in connected mode and local storage for the choices listed below. The inline sample does not authenticate you or save work. No tracking pixels, advertising identifiers, or device fingerprints are used. The hosting and security setup for a public deployment must be reviewed separately before launch.
What is stored
| Name and provider | Purpose and duration |
|---|---|
| Clerk authentication cookies · Clerk Necessary sign-in storage | Clerk uses cookies including __session and __client_uat, plus authentication state on its configured identity domain, to maintain and refresh sign-in. Session JWTs are short-lived; sessions are configured for a maximum of eight hours. Kioni verifies tokens and live session status rather than storing encrypted provider tokens. Exact cookie names, domains and lifetimes depend on the deployed Clerk instance and must be checked at deployment. |
| kioni-cookie-consent Kioni · Local storage | Remembers your privacy choice, analytics permission, policy version, save time and expiry for 180 days. Old choices never authorize a new provider. This preference is stored locally, without a visitor identifier. |
| kioni-theme Kioni · Local storage | Stores only “light” or “dark” after you explicitly choose a theme. Remains until you change it or clear browser storage. Without it, Kioni follows your device’s theme. |
| KIONI_LOCALE Kioni | Remembers the selected interface language in a first-party cookie for up to one year. It contains only a language tag and is used to render the language you request. |
| kioni-language-explicit / kioni-auth-locale Kioni | Tab-scoped session storage remembers whether you explicitly selected a language during sign-in. It contains only language tags, is cleared after sign-in preference restoration, and expires when the tab is closed. |
The two local-storage entries stay in this browser and are associated with this site. Different browsers and devices have their own choices. No work example, career report, email address, password, or verification code is written to these local-storage entries.
Necessary and optional uses
Necessary:remembering your privacy choice and the theme you request. These functions do not serve advertising or measurement purposes. Where local law permits, storage strictly necessary for the service or function you request does not require optional-cookie consent.
Analytics:On the live site, with your permission, Statcounter measures visits to public pages. It receives page URLs, referrers, IP addresses, browser/device information and approximate location. Statcounter uses analytics cookies to distinguish new and returning visitors; its default cookie duration is five years. Private workspace, sign-in and admin pages are excluded. Your saved work and account identity are not sent by this integration. New reports are available in Statcounter; previous first-party reports remain separate.
Advertising:not in use. There are no advertising providers or sale or sharing for cross-context behavioural advertising.
Allow or reject analytics in the notice, or change the analytics toggle in privacy settings. Closing settings, scrolling or browsing does not grant permission.
Change your choice
opens the same controls available in every page footer. You can review the inventory and save necessary-only settings whenever you wish. Closing the settings window without saving preserves the previous choice. Scrolling, browsing, or closing the window is not consent.
Your choice is remembered for 180 days. If the stored value expires, is invalid, or belongs to a different consent version, you will be asked again. If storage is blocked, the choice applies in memory to the current visit, and a message explains that it could not be remembered.
Browser site-data controls can remove both entries. Blocking all storage may mean your theme and cookie choice are not remembered; the preview remains readable. Clearing data does not send a deletion request to any hosting provider.
Browser privacy signals
When your browser exposes Global Privacy Control, the settings window acknowledges it. No sale, sharing for targeted advertising, or advertising tracking is enabled, with or without that signal. It is never treated as permission for additional processing.
Do Not Track and Global Privacy Control prevent Statcounter analytics, even when an earlier choice allowed it.
Future changes and contact
Before introducing any optional storage, Kioni must update this inventory with its provider, purpose, type, duration, and recipients; implement prior consent where required; and make withdrawal effective. Optional services must stay blocked until a valid choice authorises the specific purpose.
Relevant frameworks include the EU ePrivacy rules and GDPR, UK PECR and UK GDPR, and, where applicable, Germany’s TDDDG. Their application depends on the final operation and launch markets. See our privacy policyfor the wider data practices and rights.
Kioni’s legal operator, business address, country of establishment, and privacy contact have not yet been designated. A working contact for privacy requests and any required EU or UK representative or data protection officer details must be published before public launch.
Until then, this is a draft for local/staging testing. Please use fictional details in the forms. Cookie and theme preferences can be cleared directly in your browser without contacting us.
Optional Statcounter visitor analytics
On the live site, with your permission, Statcounter measures visits to public pages. It receives page URLs, referrers, IP addresses, browser/device information and approximate location. Statcounter uses analytics cookies to distinguish new and returning visitors; its default cookie duration is five years. Private workspace, sign-in and admin pages are excluded. Your saved work and account identity are not sent by this integration. New reports are available in Statcounter; previous first-party reports remain separate.
Statcounter: is_unique, is_visitor_unique and project storage (sc_*13363522*). Optional visitor measurement after consent on public pages only. The vendor’s default analytics cookie duration is five years; project/session storage may also be used. Browser controls can remove third-party storage.
Analytics is off until you allow it. Your choice is stored in this browser for 180 days. You can withdraw it here at any time; withdrawal clears accessible Statcounter storage and reloads the page to stop tracking. Do Not Track, Global Privacy Control and blocked browser storage prevent tracking. Third-party cookies can also be removed in your browser settings.
Statcounter