Cookie Policy
Last updated: 15 August 2026
Kissa uses a small number of cookies and browser storage keys, all of them needed to run the service. We set no advertising cookies and no third-party tracking pixels.
This policy supplements our Privacy Policy. It covers cookies and equivalent technologies — localStorage, IndexedDB, and service-worker caches — which behave like cookies but store data in your browser rather than sending it with every request.
1. Cookies we set
All of these are strictly necessary. Kissa does not work without them, so there is no consent banner to dismiss — there is nothing optional to consent to.
| Name | Purpose | Lifetime |
|---|---|---|
kissa_access | Your signed-in session. An HTTP-only, secure, same-site cookie holding a short-lived access token. Cannot be read by JavaScript. | 15 minutes |
kissa_refresh | Renews your session without making you log in again. HTTP-only and rotated on every use, so a stolen token is detectable. | 30 days |
2. Browser storage we use
| Key | Purpose | Lifetime |
|---|---|---|
| Playback and player preferences | Volume, playback speed, autoplay, and where you paused, so playback resumes correctly. | Until you clear site data |
| Offline downloads | Episodes you chose to download for offline listening, stored in IndexedDB on your device. Never sent to us. | Until you delete the download |
| Service-worker cache | App shell and assets, so Kissa loads fast and works offline as a PWA. | Until you clear site data |
| Onboarding and UI state | Whether you have seen a prompt, so we do not show it repeatedly. | Until you clear site data |
3. Third-party cookies
Kissa sets no advertising, analytics, or social-media cookies, and we do not embed third-party trackers.
- Google Sign-In. If you choose to sign in with Google, Google sets its own cookies on its own domain during that flow, under Google’s Privacy Policy. We receive only your name, email address, and profile picture.
- Cloudflare. Our CDN may set a cookie to distinguish genuine visitors from bots and to mitigate attacks. It carries no information about you as an individual.
4. Controlling cookies
Every browser lets you view, block, and delete cookies and site data, usually under Settings → Privacy. On the Kissa app, clearing app storage from your device settings has the same effect.
Blocking our cookies signs you out and prevents you from signing back in — the session cookie is how we know it is you. Clearing browser storage removes your offline downloads and local player preferences. Nothing else is affected.
5. Do Not Track
Kissa does not track you across other websites, so a Do Not Track or Global Privacy Control signal changes nothing about what we collect — there is no cross-site tracking to turn off.
6. Questions
Email privacy@kissa.texotic.in.