Cookies Policy
Última atualização: 2026-06-12
This policy describes cookies and similar storage used by
oka.kuaray.tech — our marketing pages, the dashboard, and the public landing pages you publish through Kuaray Oka. It complements the Privacy Policy and the DPA.1. Categories we use
- Strictly necessary. Required to make the Service work — sign-in, security, your cookie-consent choice. These cannot be disabled.
- Functional. Remember preferences such as the language you picked. We set these only when you actively use the feature.
- Analytics. We do not currently set analytics or advertising cookies on
oka.kuaray.tech. If we add server-side product analytics later, this list will be updated and consent will be re-requested where required.
2. Cookies on oka.kuaray.tech
| Cookie | Category | Purpose | Retention |
|---|---|---|---|
| next-auth.session-token (or __Secure-next-auth.session-token) | Strictly necessary | Authenticated session for signed-in account holders. Set after sign-in, scoped to oka.kuaray.tech and required for /dashboard access. | 30 days from issue (rolling), cleared on sign-out. Set with HttpOnly and Secure. |
| next-auth.csrf-token | Strictly necessary | CSRF protection on Auth.js callback endpoints (sign-in, sign-out, OAuth code exchange). | Session cookie — removed when the browser closes. |
| next-auth.callback-url | Strictly necessary | Records the page the user wanted to reach so we can return them there after sign-in. | Session cookie. |
| kuaray.cookie-consent | Strictly necessary | Records the choice you made on the cookie banner so it isn't shown again. | 12 months from last interaction. |
| NEXT_LOCALE | Functional | Remembers the language you selected in the language switcher (en-US, pt-BR, pt-PT, es, de). | 12 months. |
3. Cookies on landing pages you publish
Customer landing pages served under /p/{workspace}/… do not set any cookies of their own by default. If you embed a third-party widget (a chat tool, an embed, an analytics pixel), that vendor may set its own cookies; you remain the controller for that processing and are responsible for disclosing it to your visitors.
4. How to manage cookies
You can revisit your choice at any time by clearing kuaray.cookie-consent from your browser — the banner will appear again. Most browsers also let you block or delete cookies per-site in their privacy settings.
Blocking the strictly-necessary cookies will break sign-in and CSRF protection; we cannot offer the dashboard without them.
5. Contact
Questions about this policy: info+privacy@kuaray.tech.