Skip to content
Sign in
Last updated: 2026-11-08

Cookie and Browser Storage Policy

Which cookies and browser records Kiwo uses, what they are for and how long they last

In short: Kiwo uses only the cookies and browser records that are necessary to run the service and remember your settings. There are no advertising, third-party analytics or tracking cookies, so no cookie consent banner is shown. More about data: Privacy Policy.

This document is not legal advice.

1. Cookies (set by our server)

1.1. Cookies are set only after you sign up or sign in to the dashboard. On the public home page, pricing page, help and legal pages Kiwo sets no cookies.

__Host-kiwo_session
Necessary. Keeps you signed in to the dashboard. HttpOnly, Secure, SameSite=Lax. Valid up to 7 days of inactivity and no longer than 30 days; removed when you sign out.
__Host-kiwo_pending
Necessary. Ties the sign-up to your browser while you confirm your e-mail. HttpOnly, Secure, SameSite=Lax. Valid 24 hours or until confirmed.

1.2. The cross-site request forgery (CSRF) token is not a cookie: it is held in the page memory and in the server-side session.

2. Browser records (localStorage)

2.1. These records stay on your device, are never sent to the server and only remember your choices. You can delete them in your browser settings at any time; the service keeps working with default settings. Duration: until you delete them.

kiwo-lang
Interface language of the site, pricing, sign-in and legal pages.
kiwo-theme
Light or dark theme.
kiwo-cur
Last chosen currency on the pricing page; in the dashboard also the last opened site.
kiwo-dash-lang
Dashboard language.
kiwo-help-lang
Help language.
kiwo-ed-tab
Last tab of the site editor.
kiwo-kx
Free-canvas editor settings: grid, language, device.
kiwo-smp-…
A dashboard flag that the site still shows sample text (one per site).
kiwo-session
Only in the demonstration mode without a server: an e-mail to show the sample. Not written in normal operation.

3. Third-party services

3.1. Third-party services load only where and when they are needed for security or payment:

  • Cloudflare Turnstile (challenges.cloudflare.com): the “you are not a bot” check on the sign-up, sign-in, password reset and report forms. This is a security function; Cloudflare may process technical browser data for the check. The script is loaded on those forms only.
  • Paddle.js (cdn.paddle.com): only on the pricing page and only when you go on to pay in countries served by Paddle. Paddle processes the payment under its own policy.
  • LiqPay: payment in hryvnia takes place on the LiqPay page; Kiwo sends it only the signed order form.

3.2. Kiwo pages use system fonts and the QR code library is hosted on our own servers: there are no third-party requests for fonts or scripts. There is no third-party analytics.

4. Published customer sites

4.1. Published sites (addresses *.kiwo.site) set no cookies. The visit counter works without cookies: the visitor identifier is a salted hash that changes daily and the IP address is not stored in readable form. A site owner is responsible for any extra code they add.

5. Why there is no consent banner

5.1. Under the ePrivacy rules and the GDPR, consent is not needed for cookies and records that are strictly necessary for a service you ask for, or that only remember your choice (language, theme). If we ever add analytics, advertising or another optional script, we will first show a banner and will not switch it on without your consent.

6. Contacts

Operator
Individual entrepreneur (FOP) Maksim Lysokhmara, Cherkasy, Ukraine
E-mail
support@kiwo.cc
Kiwo is operated by Maksim Lysokhmara, sole proprietor (FOP), Cherkasy, Ukraine.support@kiwo.ccCookie Policy