Legal
Cookie Policy
Every cookie and browser storage item KROMSE uses on its public pages, what it is for, who sets it and how long it lasts.
Draft pending legal review
This document was drafted by the KROMSE team from the behaviour of the running product. It has not yet been reviewed by a qualified lawyer and is published so that design partners can read what actually happens to their data before they connect a repository. Points KROMSE cannot answer today are stated as open rather than filled with a commitment the product does not keep.
Updated 10 October 2026
Available in English, Spanish and German.
Essential — always on
These keep the site and sign-in working. They do not need consent and they are not used for advertising.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| kromse_consent | KROMSE (first party) | Remembers your cookie choice (analytics and advertising: accepted or rejected). | 6 months |
| __session, __client_uat, __refresh, __clerk_db_jwt, __clerk_handshake (names may carry a suffix) | Clerk, our sign-in provider | Keep you signed in and protect the sign-in and sign-up flow. Set only when you sign in or open a sign-in page. | Session, up to about 1 year |
| tovra-theme (localStorage) | KROMSE (first party) | Remembers light or dark display. | Until you clear site data |
| kromse:app-language (localStorage) | KROMSE (first party) | Remembers the language you chose. | Until you clear site data |
Analytics — only after you accept
Used to count visits to the public pages. Nothing is set until you accept.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_<id> | Google Analytics 4 (Google Ireland Limited) | Tell visits apart and measure pages viewed, approximate location, device and referrer. Google signals and ad personalisation are off. | Up to 2 years |
Advertising — only after you accept
Used to measure whether an advert led to a sign-up or a scan. Nothing is set until you accept.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _gcl_au, _gcl_aw, _gcl_gb | Google Ads (Google Ireland Limited) | Store the ad click and measure conversions such as sign-ups, scans and upgrades to a paid plan. After advertising consent, a new account's hashed (SHA-256) email is sent to Google for enhanced conversions. | Up to 90 days |
| kromse_attr | KROMSE (first party) | Keeps the ad click identifier (for example gclid, or twclid from X) and the UTM campaign fields so a later sign-up is credited to the right campaign. | 90 days |
| _rdt_uuid | Reddit (only if a Reddit campaign tag is active) | Measures visits to public pages and conversions (sign-up, upgrade to a paid plan, free-check request) from Reddit adverts; KROMSE's server also sends these confirmed events to Reddit after advertising consent (no email, name or IP address). | Up to 90 days, as set by Reddit |
| muc_ads, personalization_id (set by the X pixel) | X (Twitter) pixel, X Corp. (loads only after you accept advertising) | Measures visits to public pages and conversions (sign-up, upgrade to a paid plan, free-check request) from X adverts. | Up to 2 years, as set by X |
| LinkedIn Insight Tag cookies, for example li_fat_id, lidc, bcookie | LinkedIn (only if a LinkedIn campaign tag is active) | Measures conversions from LinkedIn adverts. It runs in an isolated frame and cannot read KROMSE cookies. | Up to 1 year, as set by LinkedIn |
Google Consent Mode
In the EEA, the United Kingdom and Switzerland, nothing optional is stored on your device until you accept. Google tags start in a denied state.
If you reject, Google tags may still send cookieless signals that carry no identifier and set no cookie. Google uses them for statistical modelling. They are not used to recognise you.
Before you choose: the ad click in this tab
If you arrive from an advert, the click identifier in the address (gclid, gbraid, wbraid) is held in your browser's sessionStorage under kromse.attr, for the current tab only, so it survives the sign-up. It is deleted when you close the tab, is not sent anywhere until you accept advertising, and is not a cookie.
How to change your choice
Use "Cookie settings" in the footer of any public page to accept, reject or withdraw consent at any time. Withdrawing stops the measurement and deletes the optional cookies KROMSE can reach. You can also delete cookies in your browser settings.
Who is responsible
Kromse Labs, S.L.
- Spanish tax identification number (NIF)
- B05656129
- Registered office
- Calle Gretel Ammann Martínez, 2, planta 9, puerta 3, 08020 Barcelona, España
- Commercial registry
- Registro Mercantil de Barcelona · Hoja B-664079 · Folio 1 · Inscripción 1ª · 25/09/2026
Contact: info@kromse.com
More about how personal data is handled is in the Privacy Policy.
The other documents
KROMSE provides workflow software, not legal advice, certification, or automatic regulatory submission.
Version 2026-11-12.1