Cookies.Your choice.

1. What we use today.

We use a necessary first-party cookie, __session, to retrieve your privacy choice. It is a random identifier protected with Secure, HttpOnly and SameSite=Lax; it lasts up to 12 months and does not identify your email. It is created when you save a choice, including rejection. It does not require accepting tracking.

If you accept analytics, we do not install PostHog cookies. We use sessionStorage, under klonable_attribution_session, for the selected campaign tags and random visit and interaction references, preserving the source while navigating or reloading. A visit expires after 30 minutes of inactivity; the entry is removed on withdrawal or when the tab closes. A local marker, klonable_privacy_withdrawal, keeps analytics stopped while an offline withdrawal is pending and is removed when confirmed. Consented history is analysed in PostHog using an initial 90-day attribution window, separate from data retention.

2. Permission that is easy to change.

You can accept, reject or configure analytics in the notice. The privacy icon is available on every page to withdraw permission or change your choice. Options start disabled. If we cannot verify or save consent, analytics does not start. Session recording is a separate purpose and is unavailable in this version.

3. Optional analytics in our applications.

Applications have their own preferences, separate from this website’s, for each browser or installation. They use technical storage to remember permission, the reference needed to retrieve the receipt and any withdrawal pending a connection. Web versions also store an SDK permission signal. These values contain no email addresses or shop content. Analytics starts only after checking current permission; see the privacy policy for the data and your rights.

In Business and Operations, open Your account → Privacy to change your choice. Permission is independent of creating an account or using the service.

4. Cookies and technical data are different.

Serving the website also requires processing technical connection information and creating hosting logs, independently of your analytics choice. Our privacy policy explains this processing, providers, retention and your rights.

5. Have a question?

The controller is Klonable SL, Spanish tax ID B05755202, Calle Lepanto 270, 08013 Barcelona, Spain. You can email us at privacy@klonable.com.