KunkaAI Cookie Policy (Cookiebot-ready)

Effective date: 29 October 2025

Controller: KunkaAI

Primary data location: EU — Germany (Frankfurt)

Domains covered: kunka.ai, app.kunka.ai

1) How we use cookies/SDKs

We use Cookiebot CMP to control all non-essential cookies and SDKs. Until you give consent, Functional, Statistics, and Marketing technologies are blocked. You can Accept all / Reject all / Save choices and change them anytime via "Cookie Settings" in the footer or the Cookie Declaration page.

2) Categories

Necessary — required for login, security, payments, core functionality. No consent.
Functional — optional features like embeds/previews and UI preferences. Consent.
Statistics — product analytics and diagnostics. Consent.
Marketing — ad pixels, attribution, remarketing. Consent.

3) What we use (by category)

Necessary

Session/auth: session_id, csrf_token, Supabase auth storage (e.g., supabase.auth.token)
Security: anti-abuse/fraud tokens
Payments (checkout only): Stripe (js.stripe.com, Stripe cookies/SDK)

Functional (read-only by design; loaded only after consent and user action)

Google Drive/Docs previews (google.com, docs.google.com, gstatic.com) — no domain-wide delegation; access limited to items you select
YouTube (privacy-enhanced) embeds (youtube-nocookie.com, ytimg.com)
TikTok Display embeds (tiktok.com, tiktokcdn.com)
Instagram/Meta embeds (instagram.com, facebook.com, fbcdn.net)
UI prefs: feature_flags, similar localStorage keys

Statistics (if enabled)

Plausible (cookieless analytics; events)
Sentry / LogRocket (crash/performance/session diagnostics)

Marketing (if enabled)

Meta Pixel (connect.facebook.net, facebook.com)
TikTok Pixel (tiktok.com, tiktokcdn.com)
Google Ads / gtag (googletagmanager.com, google.com)

Note: If a vendor is not enabled in your workspace, it will not load.

4) Embeds and click-to-load

Third-party embeds are click-to-load. Until you both consent and interact, no third-party requests are sent. YouTube uses privacy-enhanced mode where possible.

5) Consent management

Change or withdraw consent anytime via "Cookie Settings" or the Cookie Declaration page.
Cookiebot stores a minimal consent log (your consent ID, date/time, choices).
If your browser sends Global Privacy Control (GPC), we treat it as an opt-out for Marketing and Statistics.

6) Google Consent Mode (v2)

We propagate your choices to Google via Consent Mode (e.g., ad_user_data, ad_personalization,analytics_storage). When you reject Marketing or Statistics, the corresponding signals are set to "denied".

7) US state privacy (if applicable)

Use "Do Not Sell or Share My Personal Information" (in the footer) to opt out of Marketing/ad-related sharing where required. Cookiebot reflects this choice.

8) Retention

Durations vary by provider. The live Cookie Declaration table on this page lists each cookie/SDK name, purpose, provider, and expiry. Necessary session cookies expire when you log out or close the browser; preference keys typically 6–12 months unless you clear storage.

9) Changes

We update this page when vendors or categories change. The Effective date shows the latest revision.

10) Contact

Email us at privacy@kunka.ai.