Cookie policy

This policy covers the Kullya website only, meaning the product pages you are reading now.

The Kullya panel uses its own cookies, listed below under Panel cookies. Cookies set by customer sites published with Kullya are outside the scope of this policy.

The website does not set any cookies in its own code.

No analytics, advertising or marketing scripts are loaded. Fonts are served from the site itself, so opening a page sends no request to a third-party font service.

If that changes, such as when cookies are added for measurement, this page will be updated first and we will ask for your consent where required.

If you type an idea into the box on the home page and choose to build it with Kullya, your text is kept in the browser's session storage for a short time so it is not lost while you sign in.

This is not a cookie. It stays in that browser tab only, is cleared when the tab closes and expires on its own. The text is never put in the address bar.

When you sign in to the Kullya panel, it sets the cookies below. All of them are needed for the panel to work; none are used for advertising or measurement. The lifetimes given are the product's default settings.

jwt_token: Recognises your session. Scripts in the browser cannot read it (HttpOnly), and on an HTTPS connection it is only sent over secure connections. It lives as long as the session token itself: 8 hours with the default settings, and never more than 30 days.

kullya_refresh: Renews your session when it expires, so you are not sent back to the sign-in screen. Scripts cannot read it; on an HTTPS connection it is only sent over secure connections, and only to the session renewal and sign-out addresses. Its default lifetime is 14 days.

_cms_lang: Remembers which language the panel is shown in. It has no set lifetime and is removed when your browser session ends.

_site_version_ and _site_id_: Hold the ID of the site you are working on in the panel and its latest change number, so the code editor shows the site's current state. They last 1 day.

When you sign out of the panel, jwt_token, kullya_refresh, _site_version_ and _site_id_ are deleted; _cms_lang, your language preference, stays.

The list on this page covers the Kullya panel only. Cookies set by customer sites published with Kullya, and by their templates, are outside the scope of this policy.

Those sites set their own cookie and consent rules in the panel, under cookie management in site settings. Each site's policy belongs to its owner.

You can clear or block cookies and site data in your browser settings at any time. Because the website works without cookies, doing so does not change how its pages look.