KChat — Cookie Notice
Effective Date: 8 September 2026 · Version: 1.0 (public beta edition)
Part of the Privacy Policy.
1. The short version
Our public website sets no cookies at all. The account portal sets one strictly necessary session cookie. No advertising cookies, no analytics cookies, no tracking pixels, no session recording, no social plugins, no fingerprinting, and no third-party scripts except our payment processor's checkout on the account page.
That is why you do not see a cookie consent banner: under the ePrivacy Directive, consent is not required for cookies strictly necessary to deliver a service you requested.
2. What we set
On chat.the-karya.com (landing, plans, security, contact pages)
Nothing. These pages load no third-party resources; even the fonts are served from our own domain.
On the account portal (chat.the-karya.com/account)
| Cookie or storage | Purpose | Type | Duration |
|---|---|---|---|
kchat_portal cookie |
Keeps you signed in to the portal. Without it you cannot manage your plan. | Strictly necessary | 30 days |
kchat.pkce (session storage, not a cookie) |
Protects the sign-in hop against interception | Strictly necessary | Deleted when sign-in completes; gone when the tab closes |
| Razorpay checkout cookies and storage | Set by Razorpay, under its own domains, when you open checkout, to process your payment securely and prevent fraud | Strictly necessary (third party) | Per Razorpay's policy |
The kchat_portal cookie is httpOnly (JavaScript cannot read it),
Secure (HTTPS only), and SameSite=Lax. It is a random identifier with
no personal data inside it.
3. Inside the desktop app
The KChat app renders its interface in an embedded browser that talks only to a server running on your own computer. That local server sets a sign-in cookie and stores interface preferences — theme, layout, your last-used settings — in the app's local storage. None of this is tracking, and none of it leaves your computer. It is deleted when you delete the app's data folder.
4. What we do not do
- No Google Analytics, Meta Pixel, or equivalent
- No advertising or remarketing cookies
- No cross-site tracking or data brokerage
- No session recording or heatmaps
- No device fingerprinting
- No social media plugins or embedded trackers
- No third-party fonts, scripts, or CDNs on our public pages
5. Managing cookies
You can block or delete cookies in your browser settings — but blocking the
kchat_portal cookie will stop you signing in to the portal.
Since we do not sell or share personal information or run non-essential tracking, a browser Global Privacy Control signal has no processing to switch off.
6. If this changes
If we ever introduce a non-essential cookie — analytics, for example — we will:
- Ask for your consent first, through a banner with a genuine reject option that is as easy to use as accept
- Set nothing non-essential until you agree
- Let you withdraw consent as easily as you gave it
- Honour Global Privacy Control automatically
- Update this notice and tell you before it takes effect