Cookies Policy
Plain-English summary
This page explains the cookies and similar technologies we use on klovac.com and the Klovac app, why we use them, and how you control them. You can change your choice any time using the "Cookie settings" button at the bottom-right of every page.
Contents
1. What are cookies?
Cookies are small text files placed on your device by a website. They let the site remember you between visits, keep you logged in, measure usage, or — with consent — track behaviour across sites. "Similar technologies" include localStorage, sessionStorage, IndexedDB, pixel tags, server-side identifiers, and SDK identifiers in mobile apps. This policy covers all of them under the umbrella term "cookies".
2. Categories we use
We classify cookies in line with the EU ePrivacy Directive, the UK PECR, and the IAB Transparency & Consent Framework into four categories:
2.1 Strictly necessary — always on
Required for the site to function — authentication, security, load balancing, CSRF protection, remembering your cookie choice. These cannot be disabled without breaking the Service. We rely on Article 5(3) ePrivacy and the equivalent "strictly necessary" exemption.
2.2 Functional — requires consent
Remembers preferences such as language, dark/light mode, and last-viewed dashboard tab.
2.3 Analytics — requires consent
Helps us understand how visitors use the site so we can improve it — aggregate page views, scroll depth, and feature usage. Where supported, we configure analytics in a privacy-preserving way (IP anonymisation, no cross-site tracking, no advertising signals).
2.4 Marketing — requires consent
Would measure the effectiveness of our marketing channels. We do not currently set any marketing cookies. If this changes, we will update the list below and re-prompt for consent.
3. List of cookies
The list below is current as of the "Last updated" date. We refresh it whenever we change our cookie set.
3.1 Strictly necessary
| Name | Provider | Purpose | Duration |
|---|---|---|---|
klovac_session | klovac.com | Authenticates a signed-in user | Session / 30 days "remember me" |
klovac_csrf | klovac.com | Prevents cross-site request forgery | Session |
klovac_consent | klovac.com | Remembers your cookie preferences | 12 months |
3.2 Functional
| Name | Provider | Purpose | Duration |
|---|---|---|---|
klovac_theme | klovac.com | Light / dark theme preference | 12 months |
klovac_lang | klovac.com | Preferred language | 12 months |
klovac_last_tab | klovac.com | Returns you to the last dashboard tab | 30 days |
3.3 Analytics
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics (Google LLC) | Distinguishes visitors | 13 months |
_ga_* | Google Analytics (Google LLC) | Persists session state | 13 months |
_gid | Google Analytics (Google LLC) | Distinguishes visitors | 24 hours |
3.4 Marketing
We do not currently set any marketing cookies.
"Provider" indicates the party that issues the cookie. Cookies set by klovac.com are first-party; the rest are third-party and only set with your consent.
4. Your consent & how to change it
The first time you visit, our consent banner asks you to Accept all, Reject all, or Customise. Strictly necessary cookies are set regardless; all other categories are off until you opt in. Your choice is stored in klovac_consent and renewed every 12 months.
You can change your choice at any time by clicking "Cookie settings" in the bottom-right corner of every page, or by deleting klovac_consent in your browser. We do not use "cookie walls" — refusing optional cookies never blocks access to content.
5. Managing cookies in your browser
Most browsers let you block or delete cookies at any time. Instructions for the major browsers:
6. "Do Not Track" & Global Privacy Control
Klovac honours the Global Privacy Control (GPC) signal. If your browser or extension sends a GPC signal we treat it as a request to opt out of "sharing" and "sale" as defined under the CCPA/CPRA. Because there is no industry consensus on the older "Do Not Track" header, we do not act on it specifically — please use the consent banner or GPC instead.
7. Third-party cookies
Third-party providers may set cookies on our pages with your consent (see §3). Each provider has its own privacy policy. We have a written processor or controller-to-controller agreement with every third party we engage. We do not allow third-party advertisers to track you across other sites from klovac.com.
8. Changes to this policy
We may update this Cookies Policy whenever we add, remove, or change a cookie. We post the updated list with a refreshed "Last updated" date. Material changes trigger a re-prompt of the consent banner.
9. Contact
Questions about cookies?
Email hello@klovac.com or our Data Protection Officer at hello@klovac.com.