Cookie notice

Kevora Cookie Notice

Kevora uses essential first-party cookies for account security, authentication, CSRF protection, session messages, and optional remember-me login. Kevora may also use Plausible Analytics for aggregate website measurement without analytics cookies, advertising cookies, or cross-site tracking cookies.

Last updated: July 4, 2026

Current Cookie Inventory

Name Type Purpose Duration
tp_session Essential first-party cookie Maintains login/session state, CSRF-protected form state, flash messages, and the server-side inactivity timeout marker stored in the signed Flask session. Session cookie by default; production config allows up to 30 days for permanent sessions, with authenticated idle timeout enforced separately.
tp_remember Optional essential first-party cookie Keeps a user signed in only when the user selects remember-me login. It is cleared when the user signs out or when an active remembered session times out. 30 days unless cleared earlier.

Analytics

Kevora may use Plausible Analytics to measure aggregate website activity such as pageviews, referrers, UTM campaigns, hostnames, device category, and conversion events like signup or checkout clicks. Plausible is configured through its browser script and does not require analytics cookies or browser storage tracking identifiers.

What We Do Not Use

  • No advertising cookies.
  • No behavioral analytics cookies.
  • No cross-site tracking cookies.
  • No localStorage or sessionStorage tracking identifiers.

Third-Party Static Assets

Some pages load front-end assets or privacy-friendly analytics from providers such as Plausible, CDNJS/Font Awesome, Google Fonts, and jsDelivr. Those providers may receive normal browser request metadata such as IP address, user agent, request time, and referrer-policy-limited page context. Kevora does not use those providers for advertising or cross-site tracking.

Consent Position

Because Kevora's current cookies are essential to provide authentication, account security, CSRF protection, and requested dashboard functionality, and because Plausible does not require analytics cookies or browser storage tracking identifiers, Kevora provides this disclosure notice instead of a non-essential cookie opt-in banner. If advertising or other non-essential browser storage is introduced later, it should be blocked until valid consent is collected and this notice is updated.

Managing Cookies

You can delete or block cookies through your browser settings. Blocking essential cookies may prevent sign-in, dashboard access, protected form submission, and remember-me login from working correctly.

For privacy questions, contact security@pulsebotics.io.