1. The short version
Our public website sets no analytics cookies. Public information pages use Umami Cloud for cookieless page-view analytics. The account portal sets one strictly necessary session cookie. We use no advertising cookies, tracking pixels, session recording, social plugins, or fingerprinting.
Umami does not set cookies. We configure it to respect Do Not Track and omit query strings and URL fragments from the tracked page URL. There is no analytics cookie to accept or reject.
2. What we set
On chat.the-karya.com (public information pages)
These pages load one deferred script from Umami Cloud's EU service. It records the page path and title, referrer, browser, operating system, device type, country, and anonymous session/pageview identifiers. It receives no KChat account identity, and we send no custom events. Account, admin, sign-in, and authorization-callback pages do not load it. Fonts and all other assets remain on our own domain.
On the account portal (chat.the-karya.com/account)
| Cookie or storage | Purpose | Type | Duration |
|---|---|---|---|
kchat_portal cookie |
Keeps you signed in to the portal. Without it you cannot manage your plan. | Strictly necessary | 30 days |
kchat.pkce (session storage, not a cookie) |
Protects the sign-in hop against interception | Strictly necessary | Deleted when sign-in completes; gone when the tab closes |
| Razorpay checkout cookies and storage | Set by Razorpay, under its own domains, when you open checkout, to process your payment securely and prevent fraud | Strictly necessary (third party) | Per Razorpay's policy |
The kchat_portal cookie is httpOnly (JavaScript cannot read it),
Secure (HTTPS only), and SameSite=Lax. It is a random identifier with
no personal data inside it.
3. Inside the desktop app
The KChat app renders its interface in an embedded browser that talks only to a server running on your own computer. That local server sets a sign-in cookie and stores interface preferences — theme, layout, your last-used settings — in the app's local storage. None of this is tracking, and none of it leaves your computer. It is deleted when you delete the app's data folder.
4. What we do not do
- No advertising analytics, pixels, or remarketing
- No advertising or remarketing cookies
- No cross-site tracking or data brokerage
- No session recording or heatmaps
- No identified users, custom events, or device fingerprinting
- No social media plugins or embedded trackers
- No third-party fonts or CDNs; the only public-page script is Umami analytics
5. Managing cookies
You can block or delete cookies in your browser settings — but blocking the
kchat_portal cookie will stop you signing in to the portal. Enabling your
browser's Do Not Track setting stops Umami analytics on this site.
Since we do not sell or share personal information or use it for targeted advertising, a browser Global Privacy Control signal has no sale, sharing, or targeted-advertising processing to switch off.
6. If this changes
If we ever introduce a non-essential cookie or browser-storage identifier, we will:
- Ask for your consent first, through a banner with a genuine reject option that is as easy to use as accept
- Set nothing non-essential until you agree
- Let you withdraw consent as easily as you gave it
- Honour Global Privacy Control automatically
- Update this notice and tell you before it takes effect