Cookie policy

Cookies are small text files that a website stores on your device when you visit it. They are used to remember your preferences, keep your session active and collect information about how you use the site.

In addition to cookies, we use similar technologies such as local storage (localStorage, sessionStorage) to maintain session state in the application. This policy also applies to these technologies.

2.1 Strictly necessary cookies

These are essential for the Service to work. Without them you would not be able to log in or navigate the platform. They do not require your prior consent.

• Session cookie (accessToken): JWT token stored in an httpOnly cookie to authenticate your requests. Lasts 15 minutes.
• Refresh cookie (refreshToken): httpOnly token that renews your session without asking for your password again. Lasts 7 days and is invalidated when you log out.
• Bot check (Cloudflare Turnstile): only on sign-up, Cloudflare checks you are a person before the account is created. It runs inside its own frame and is not used for analytics or advertising.

2.2 Preference cookies

These remember settings to improve your experience, such as your selected language.

• Language (locale): stores the selected interface language. Persists across sessions.
• Sidebar (sidebar_state): remembers whether you left the app's sidebar open or collapsed. Lasts 7 days.

2.3 Analytics and performance cookies

We use analytics tools to understand how users interact with the Service. These cookies require your consent.

• Google Analytics: records sessions, page views and browsing behavior in anonymized form. Sets _ga and _ga_XXXX cookies.
• PostHog: product analytics platform that records events and interactions within the app. It knows you by your account's internal identifier —never by your email— and keeps it in a cookie and in localStorage, both under the key ph_<id>_posthog.

To count visits we also use Vercel Web Analytics, which sets no cookies and stores nothing in your browser: that is why it is not in the table below and does not depend on your consent. What it records is in the Privacy policy.

2.4 Marketing and advertising cookies

We use tracking technologies to measure campaign performance. These cookies require your consent.

• Meta Pixel (Facebook/Instagram): records conversion events to measure ad effectiveness and enable retargeting. Sets the _fbp cookie.
• Google Tag Manager: manages and fires tracking tags on the site. Does not set its own tracking cookies but enables those of the scripts it manages.

Koalab uses the following third-party services that may set cookies on your device. All of them are optional and require your prior consent.

You can control and delete cookies from your browser settings:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Note that if you disable necessary cookies, some parts of the Service (such as login) will stop working correctly.

Strictly necessary cookies do not require your prior approval, as they are indispensable for the Service to function correctly.

Analytics (Google Analytics, PostHog) and marketing (Meta Pixel, GTM) cookies require your explicit prior consent before being activated. When you first visit koalab.tech, you can accept or reject these cookie categories via the consent panel.

You can change or withdraw your consent at any time by clicking "Manage cookies" in the footer.

We may update this Cookie policy when necessary. We will notify you of material changes via a notice on the platform or by email.

For any query about our cookie policy:

• Email: privacidad@koalab.tech
• Website: koalab.tech