Cookie Policy

This Cookie Policy explains how Kapsule Cloud (Kapsule Group Limited) uses cookies and similar tracking technologies on kapsulecloud.com, kpanel.kapsulecloud.com, our marketing sites, and any other site, application, or property that links to this Policy ("Sites"). It should be read together with our Privacy Policy.

We use strictly necessary cookies automatically - these are required for the Sites to function securely and cannot be disabled. We currently do not use analytics or marketing cookies. The only additional browser storage we use is set when you actively make a choice: selecting your language or currency using the locale switcher, or opening the Kora AI chat widget. No tracking or profiling cookies are set.

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, to remember preferences, to authenticate users, to measure usage, and to deliver advertising.

In this Policy, "cookies" includes traditional cookies as well as similar technologies that store or read data on your device, including: (a) HTML5 local storage and session storage (small data stores in your browser); (b) IndexedDB (a structured browser data store); (c) web beacons and pixels (tiny invisible images used to track that a page or email has loaded); (d) server-side and first-party fingerprinting signals (information about your browser and device used to identify you across sessions); (e) tags placed by us or by integration partners on the Sites; and (f) SDK identifiers in applications.

We use first-party cookies set by us under the kapsulecloud.com domain. We also rely on third-party services that may set their own cookies (see clauses 3 and 4).

These are essential for the Sites to function. You cannot disable them without breaking core functionality. We do not require consent for strictly necessary cookies because they are required for the Sites to operate.

Authentication and session (kc_session, kc_sid): set on kpanel.kapsulecloud.com only when you sign in to KPanel. Session or up to 24 hours.

Form security / CSRF protection (kc_csrf): set on kpanel.kapsulecloud.com only. Session.

Two-factor authentication state (kc_2fa): set on kpanel.kapsulecloud.com only. Session or 7 days where "remember device" is selected.

Cloudflare security and bot management (__cf_bm, cf_clearance, __cflb): set by Cloudflare on all pages for WAF protection and bot detection. 30 minutes to 30 days. These are technically unavoidable while Cloudflare secures the Sites.

These remember choices you actively make. They are set only when you use a specific feature - not automatically on page load.

Locale and currency preference (NEXT_LOCALE, kc_currency, kc_locale): set when you use the language or currency switcher in the site header. Stored as cookies for 12 months. The kc_locale cookie is set cross-subdomain (.kapsulecloud.com) so your preference carries across KPanel and the marketing site.

Kora AI chat widget (browser localStorage: kora-sales-conv, kora-sales-locale): your conversation history and last-used locale are stored in your browser's local storage when you open the Kora chat widget. These are stored locally in your browser only - they are not sent to any server and are not cookies. Cleared when you reset the conversation or clear your browser storage.

We do not currently use analytics cookies or client-side analytics tracking on kapsulecloud.com. We analyse server-side logs (such as nginx access logs) in aggregate to understand traffic patterns and improve performance - this does not involve setting any cookies on your device.

We may add privacy-respecting analytics in future (for example, a cookieless or server-side tool). If we do so, we will update this Policy and, where required by applicable law, implement a consent mechanism before setting any analytics cookies.

We do not run advertising or marketing cookies on kapsulecloud.com. If we begin to do so, this Policy will be updated and we will implement a consent mechanism and obtain your consent before setting any such cookies.

Some pages of the Sites load third-party services that may set their own cookies and process data through your browser. We do not control those cookies; the third-party's own privacy and cookie policies apply.

Cloudflare, Inc: Security, performance, and bot management on all pages (cloudflare.com/privacypolicy/).

Stripe, Inc: Payment processing and fraud prevention on checkout and billing pages only (stripe.com/privacy).

Sentry: Error monitoring on all pages, only when an error occurs (sentry.io/privacy/).

We do not permit third parties to use cookies on the Sites for their own marketing purposes.

Where you embed content into a page hosted on our Services (for example, YouTube videos, Google Maps, third-party fonts, or social-media share buttons), that content may set its own cookies on your visitors' devices. You are responsible, as the operator of the website, for disclosing those cookies in your own cookie policy and (where required) obtaining consent.

Because we use only strictly necessary and user-initiated functional storage, there is no tracking to opt out of. You can still manage cookies in the following ways.

Your browser settings: all major browsers allow you to block, delete, or limit cookies. Check your browser's help documentation. Note that blocking strictly necessary cookies will break the Sites.

Kora widget storage: to clear Kora conversation history, use the reset button in the widget or clear your browser's local storage for kapsulecloud.com.

Global Privacy Control (GPC): where your browser sends a Global Privacy Control signal, we honour it as a request to minimise any data collection beyond what is strictly necessary.

Do Not Track (DNT): because there is no widely agreed standard for DNT, we do not currently respond to DNT signals. If we introduce analytics or tracking, we will implement appropriate signal handling at that time.

The Sites are not directed at children under 18. We do not knowingly use cookies to collect personal information from children under 18.

We may update this Cookie Policy from time to time to reflect changes in our use of cookies, our service providers, or the law. Material changes (such as adding analytics or advertising cookies) will be notified by email and posted here at least 30 days before taking effect. The "Last updated" date at the top of this Policy shows the most recent change.

Kapsule Group Limited, Christchurch, New Zealand.

Email: [email protected]