Cookies and storage

What Kego stores in your browser

Kego stores only what it needs to work. There are four things, and all four are strictly necessary. A fifth, the bot check below, is run by Cloudflare:

• A sign-in cookie. It keeps you signed in. It is set when you sign in and removed when you sign out. Its name starts with "sb-" and it is set on kegoapp.com by our sign-in provider, Supabase.
• A short-lived password-reset cookie (kego_pw_reset). It is set only when you open a password-reset link from your email, lasts one hour, and lets the Reset password screen skip asking for your current password. Scripts on the page cannot read it.
• Unsent message drafts. If you start typing a message and leave the conversation, the text is kept in your browser's session storage (chat-draft) so it is still there when you come back. It stays in your browser, is not sent to us until you press Send, and goes when you close the tab.
• Discover keeps your list in the same order for 3 hours using a cookie (kego_discover_seed: a random number and the time you last used Discover), and holds the pages you have loaded in session storage so the Back button returns you to the same place.

The bot check (Cloudflare Turnstile)

The sign-in, sign-up and password forms use Cloudflare Turnstile to block automated bots. It loads a script and a small frame from challenges.cloudflare.com on those pages, only to confirm you are a person.

To do that it may receive your IP address, your browser and device details and how the check is completed, and it may set or read a small security cookie from Cloudflare while the check runs. Kego does not use any of this for analytics or advertising. Cloudflare's own privacy terms for Turnstile apply to what it receives. [TO CONFIRM: the exact cookies and their lifetimes.]

What Kego does not use

No analytics, no advertising and no tracking. Kego does not load third-party fonts, embedded content or trackers. The only third-party script is the bot check described above.

Your choices

Because these are all needed to make the app work, there is nothing to switch on or off. You can clear them at any time in your browser's settings; you will be signed out.

Questions: support@kegoapp.com. See also the Privacy Policy.