# Cookie policy

Source: https://kavralab.com/cookie-policy/

Last updated September 19, 2026
The Kavra check that runs on a customer's site needs no cookie in your visitors' browsers — that is true today and it is not changing. This is Kavra Lab's (operated by SIA ADVERTIMO) cookie policy for the other two surfaces: this marketing website and the dashboard at app.kavralab.com, which use a small, fixed set of cookies described below.

- No cookie required for the bot check

- No advertising cookies, anywhere

- Analytics only after you accept

## The check is cookie-free. The website isn't quite.
It is worth separating what people usually mean by "Kavra" into the two things it actually is, because they follow different rules:

- The bot-protection script your customers embed on their own site. It collects and signs signals to produce a verdict, and none of that needs a cookie set in the visitor's browser — by design, not as a privacy feature bolted on afterward.

- This marketing website and the dashboard at app.kavralab.com, which you are reading right now. Like almost any modern site, they use a handful of cookies to keep you signed in and to understand traffic — listed in full below.

## Every cookie kavralab.com uses
Strictly necessary items keep you signed in and your forms safe. Everything else is analytics, and only runs if you accept it.

Cookie / storageProviderPurposeTypeLifetime

kavra-consentkavralab.com (browser local storage — not a cookie)Remembers your accept/decline choice so the banner does not reappear on every pageStrictly necessaryUntil you clear your browser's site data
Session cookiekavralab.com (app.kavralab.com dashboard)Keeps you signed in to your own dashboard sessionStrictly necessarySession — cleared when you close your browser
XSRF-TOKENkavralab.com (app.kavralab.com dashboard)Protects dashboard forms from cross-site request forgeryStrictly necessarySession, typically a few hours
_ga, _ga_*Google Analytics (Google LLC)Counts visits and pages viewed, in aggregate, so we know which pages are actually usefulAnalytics — only after you acceptUp to 13 months (Google's default)

This table lists what the site is built to set. It does not cover every cookie a browser extension or your own network might add outside our control.

## Denied by default. Granted only if you say so.
We use Google's Consent Mode v2. Every signal — analytics, ads, personalization — starts denied the moment the page loads. The banner is the only thing that can change that, and it only ever grants the one signal it asks about: aggregate analytics.

- What analytics does. Counts pageviews, referrers and rough usage patterns across the site, with IP addresses anonymized. It tells us which pages help and which do not — nothing about you individually.

- What it never does. We do not set ad_storage, ad_user_data or ad_personalization to granted, ever. No advertising cookies, no ad identifiers, no cross-site tracking pixels.

- Decline is a real option. Decline and no analytics cookie is set — the site works exactly the same either way. No feature is gated behind accepting.

- Your choice, remembered once. The choice itself lives in your browser's local storage, not a cookie, and the banner will not ask again until you clear it.

## You are in control, in two places

- On this site — the consent banner. Decline turns analytics off. To change an earlier choice, use "Cookie settings" in the footer, or clear kavralab.com's site data in your browser and reload.

- In your browser — browser controls. Every major browser lets you block or delete cookies site by site or entirely, in its privacy or site-settings menu. Blocking cookies here will not break this site's content — you just will not be able to sign in to the dashboard.

## We don't sell what we barely collect
Nothing captured by this site or the dashboard is sold or shared with advertisers, data brokers, or anyone outside Kavra Lab. The evidence Kavra Lab's protection service collects on a Customer's behalf is theirs, scoped to their project, never pooled or resold. For the roles we act in, what is collected and how long it is kept, read our privacy policy.