Cookie Policy

1. What are cookies and similar technologies?

Cookies are small pieces of data stored by a browser. Similar technologies include local storage, session storage, pixels, SDKs, and other mechanisms that store or access information on a device.

2. Strictly necessary storage

KESPA uses session and security storage needed to operate the service. Depending on the page and feature, this can include:

• the PHP session cookie used to keep you signed in and maintain server-side session state;
• OAuth state and authentication workflow state stored within the server-side session;
• CSRF/security state used to protect forms and authenticated actions;
• security or infrastructure storage used to deliver and protect the service where configured.

These technologies are used because the requested service cannot operate securely without them. Blocking them may prevent sign-in or other core functionality.

3. Analytics, personalization, and advertising

KESPA does not currently intentionally set browser-based advertising cookies or cross-site behavioral advertising trackers.

KESPA has internal product and AI telemetry, but that telemetry is primarily generated server-side and is not the same thing as deploying third-party advertising cookies in your browser.

If we later introduce non-essential cookies or similar technologies that require consent under applicable law, including where EU ePrivacy rules or UK PECR apply, we will not activate them for affected users until the required consent or preference control has been provided. We will also provide a way to reject or change those preferences. UK law now includes additional low-risk exceptions introduced by the Data (Use and Access) Act 2025; we will evaluate any future technology against the rules in force before relying on an exception.

4. Third-party services

When you leave KESPA for a third-party service, such as Discord for OAuth or Stripe for hosted checkout, that third party may use cookies under its own policy.

Some externally hosted resources, such as fonts or infrastructure/security services, may receive ordinary network request information such as IP address and browser headers when your browser connects to them.

5. Your controls

You can use browser controls to inspect, block, or delete cookies. Blocking strictly necessary cookies can prevent KESPA from working correctly.

Because KESPA does not currently sell or share personal information for cross-context behavioral advertising, a browser Global Privacy Control signal does not presently trigger a separate sale/share opt-out action. If our practices change, we will honor applicable opt-out signals as required by law.

6. Changes to this policy

We will update this Cookie Policy if our use of storage/access technologies changes. Material additions of non-essential analytics, personalization, or advertising technologies will be accompanied by any consent or opt-out controls required by applicable law.

7. Contact

Questions about KESPA cookies or privacy can be sent to [email protected].