Cookie Policy
This Cookie Policy explains how Junnovate Limited, a company incorporated in Ireland (Company Number 784589), trading as Kodular (“Kodular”, “we”, “us”, or “our”), uses cookies and similar technologies when you access or use our Services. This policy covers all websites and applications operated at kodular.io, creator.kodular.io, auth.kodular.io, my.kodular.io, docs.kodular.io, and community.kodular.io (collectively, the “Services”).
For information about how we collect, use, and protect your personal data, please refer to our Privacy Policy.
1. What Are Cookies
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, to provide information to website operators, and to enable certain features.
In this policy, “cookies” refers collectively to cookies, localStorage, sessionStorage, and other similar client-side storage technologies used by our Services.
2. Cookie Categories
We classify the cookies used across our Services into the following categories:
Strictly Necessary Cookies. These cookies are essential for the operation of our Services. They enable core functionality such as authentication, session management, security protections, and consent management. These cookies cannot be disabled without preventing the Services from functioning. They do not require your consent under the ePrivacy Directive.
Functional Cookies. These cookies enhance your experience by remembering your preferences and settings, such as your preferred theme, colour scheme, or login method. They are not essential for the Services to function but improve usability. These cookies require your consent.
Analytics and Performance Cookies. These cookies help us understand how visitors interact with our Services by collecting anonymised usage data. We use this information to improve the platform. These cookies are blocked until you provide consent via our cookie banner.
3. How We Use Cookies
We use strictly necessary cookies to operate the Services securely, functional cookies to remember your preferences, and analytics cookies to understand how the Services are used so we can improve them.
Non-essential cookies (functional and analytics) are only placed on your device after you provide consent through our cookie banner.
4. Consent and Your Choices
4.1. When you first visit our Services, a cookie consent banner provided by Cookie-Script.com (“Cookie Script”) will appear, allowing you to accept or reject non-essential cookies by category.
4.2. Your consent preferences are synchronised across all Kodular subdomains (kodular.io, creator.kodular.io, auth.kodular.io, my.kodular.io, docs.kodular.io, and community.kodular.io), so you only need to set your preferences once.
4.3. You can change your cookie preferences at any time by clicking the cookie settings link in the footer of any Kodular website.
4.4. We honour Global Privacy Control (GPC) signals transmitted by your browser. When we detect a GPC signal, we treat it as a valid opt-out of non-essential cookies under applicable privacy laws, including the GDPR, the CCPA/CPRA, and other laws that recognise GPC.
4.5. Strictly necessary cookies do not require consent and cannot be disabled through the cookie banner, as they are essential for the Services to function.
5. Cookies on kodular.io
The following cookies are set when you visit the Kodular website.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
_ga | GA4 — distinguishes unique visitors | 2 years | Analytics | |
_ga_<container-id> | GA4 — maintains session state | 2 years | Analytics | |
_gid | GA4 — distinguishes visitors within a 24-hour window | 24 hours | Analytics | |
CookieScriptConsent | Cookie Script | Records your cookie consent preferences | 30 days | Strictly Necessary |
The Kodular website embeds YouTube videos using the privacy-enhanced mode (youtube-nocookie.com). The following cookies and storage items may be set by YouTube when you interact with embedded video content:
| Cookie / Storage Key | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
VISITOR_INFO1_LIVE | YouTube | Estimates bandwidth and tracks visitor interactions | 6 months | Functional |
YSC | YouTube | Session tracking for embedded videos | Session | Functional |
VISITOR_PRIVACY_METADATA | YouTube | Stores video privacy and consent settings | 6 months | Functional |
__Secure-ROLLOUT_TOKEN | YouTube | Manages feature rollout for embedded player | 6 months | Functional |
yt-remote-device-id (localStorage) | YouTube | Stores a unique device identifier | Persistent | Functional |
yt-remote-connected-devices (localStorage) | YouTube | Stores a list of connected devices | Persistent | Functional |
6. Cookies on creator.kodular.io
The following cookies and local storage items are set when you use Kodular Creator.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
Kodular | Kodular | Encrypted session cookie — authenticates your Creator session | 24-hour idle timeout; renewed every 12 hours | Strictly Necessary |
_oauth_state | Kodular | CSRF protection during the OIDC login flow | 5 minutes | Strictly Necessary |
_oauth_pkce | Kodular | PKCE code verifier during the login flow | 5 minutes | Strictly Necessary |
_kodular_creator_tsrc | Traefik | Load balancer session affinity — routes requests to the same backend server | Session | Strictly Necessary |
_ga | GA4 — distinguishes unique visitors | 2 years | Analytics | |
_ga_<container-id> | GA4 — maintains session state | 2 years | Analytics | |
_gid | GA4 — distinguishes visitors within a 24-hour window | 24 hours | Analytics | |
CookieScriptConsent | Cookie Script | Records your cookie consent preferences | 30 days | Strictly Necessary |
Local Storage:
| Key | Purpose | Category |
|---|---|---|
KodularMobileAlerted | Suppresses the repeated mobile device warning after first dismissal | Functional |
7. Cookies on auth.kodular.io
The following cookies and local storage items are set when you use Kodular’s authentication service.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
kodular-auth.session_token | Kodular | Authenticates your session | 7 days | Strictly Necessary |
kodular-auth.session_token.signature | Kodular | HMAC signature verifying session token integrity | 7 days | Strictly Necessary |
_kodular_auth_tsrc | Traefik | Load balancer session affinity — routes requests to the same backend server | Session | Strictly Necessary |
kodular-auth.last_used_login_method | Kodular | Remembers your preferred login method (e.g., email, passkey, Google) | Session | Functional |
_GRECAPTCHA | reCAPTCHA v3 — risk analysis and bot detection on authentication forms | 6 months | Strictly Necessary | |
NID | Set by Google services — stores preferences and information used for risk analysis | 6 months | Strictly Necessary | |
_ga | GA4 — distinguishes unique visitors | 2 years | Analytics | |
_ga_<container-id> | GA4 — maintains session state | 2 years | Analytics | |
_gid | GA4 — distinguishes visitors within a 24-hour window | 24 hours | Analytics | |
CookieScriptConsent | Cookie Script | Records your cookie consent preferences | 30 days | Strictly Necessary |
Google reCAPTCHA v3 is classified as strictly necessary because it protects authentication endpoints (sign-up, sign-in, password reset, and forgot password) from automated attacks. The service cannot safely operate without bot detection on these forms.
Local Storage (set by Google reCAPTCHA v3):
| Key | Purpose | Duration | Category |
|---|---|---|---|
rc::a | reCAPTCHA bot detection signals | Persistent | Strictly Necessary |
rc::b | reCAPTCHA bot detection signals | Session | Strictly Necessary |
rc::c | reCAPTCHA bot detection signals | Session | Strictly Necessary |
8. Cookies on my.kodular.io
The following cookies are set when you use the My Kodular dashboard.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
my-kodular.session_token | Kodular | Authenticates your session | 7 days | Strictly Necessary |
my-kodular.session_token.signature | Kodular | HMAC signature verifying session token integrity | 7 days | Strictly Necessary |
_my_kodular_tsrc | Traefik | Load balancer session affinity — routes requests to the same backend server | Session | Strictly Necessary |
_ga | GA4 — distinguishes unique visitors | 2 years | Analytics | |
_ga_<container-id> | GA4 — maintains session state | 2 years | Analytics | |
_gid | GA4 — distinguishes visitors within a 24-hour window | 24 hours | Analytics | |
CookieScriptConsent | Cookie Script | Records your cookie consent preferences | 30 days | Strictly Necessary |
9. Cookies on docs.kodular.io
The following cookies and local storage items are set when you visit the Kodular documentation website. The documentation is built with MkDocs Material.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
_ga | GA4 — distinguishes unique visitors | 2 years | Analytics | |
_ga_<container-id> | GA4 — maintains session state | 2 years | Analytics | |
_gid | GA4 — distinguishes visitors within a 24-hour window | 24 hours | Analytics | |
CookieScriptConsent | Cookie Script | Records your cookie consent preferences | 30 days | Strictly Necessary |
The documentation also embeds YouTube videos for tutorials. The same YouTube cookies listed in Section 5 may be set when you interact with embedded video content.
Local Storage:
| Key | Purpose | Category |
|---|---|---|
__palette | Remembers your light/dark theme preference | Functional |
10. Cookies on community.kodular.io
Kodular Community runs on the Discourse forum platform. The following cookies are set by Discourse.
Authentication and Session
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
_t | Primary authentication token — identifies the logged-in user | 60 days | Strictly Necessary |
_forum_session | Session management and security | Session | Strictly Necessary |
email | Carries email through authentication flow steps | Session | Strictly Necessary |
destination_url | Redirects to the requested page after login | Session | Strictly Necessary |
sso_destination_url | Manages SSO login redirects, including two-factor authentication | Session | Strictly Necessary |
sso_payload | Carries SSO authentication data during two-factor authentication | Session | Strictly Necessary |
authentication_data | Returns authentication data during full-screen login flows | Next page view | Strictly Necessary |
cookietest | Verifies that cookies are enabled in your browser | Session | Strictly Necessary |
_bypass_cache | Ensures fresh content is served during authentication callbacks | Session | Strictly Necessary |
Security
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
dosp | Denial-of-service protection | Next page view | Strictly Necessary |
Notifications
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
cn | Clears notification state after notifications are read | Session | Strictly Necessary |
Preferences
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
theme_ids | Remembers your selected theme | 1 year | Functional |
color_scheme_id | Remembers your colour scheme preference | 1 year | Functional |
dark_scheme_id | Remembers your dark mode preference | 1 year | Functional |
text_size | Remembers your text size setting | 1 year | Functional |
Analytics and Consent
The following third-party cookies are also set on the Community:
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
_ga | GA4 — distinguishes unique visitors | 2 years | Analytics | |
_ga_<container-id> | GA4 — maintains session state | 2 years | Analytics | |
_gid | GA4 — distinguishes visitors within a 24-hour window | 24 hours | Analytics | |
CookieScriptConsent | Cookie Script | Records your cookie consent preferences | 30 days | Strictly Necessary |
11. Third-Party Cookies
Certain cookies on our Services are set by third-party providers. The following third parties may place cookies on your device when you use our Services:
Google LLC (Google Analytics 4). We use Google Analytics 4 on all of our Services to collect anonymised usage data, including pages visited, features used, session duration, and interactions with the platform. Google Analytics cookies are blocked until you provide consent. Google’s privacy policy is available at policies.google.com/privacy.
Google LLC (reCAPTCHA v3). We use Google reCAPTCHA v3 on authentication forms (sign-up, sign-in, password reset, and forgot password) to distinguish human users from automated bots. reCAPTCHA may set cookies and local storage items for risk analysis. These are classified as strictly necessary for the security of the authentication service.
YouTube (Google LLC). We embed YouTube videos on the Kodular website and documentation using YouTube’s privacy-enhanced mode (youtube-nocookie.com). YouTube does not set cookies until you interact with a video. Upon playback, YouTube may set cookies and local storage items for session management, bandwidth estimation, and player preferences. YouTube’s privacy policy is available at policies.google.com/privacy.
Cookie-Script.com. We use Cookie Script as our consent management platform, loaded from //cdn.cookie-script.com/s/5ff993dd8bf480d77a38d301fa6e1950.js. Cookie Script sets a CookieScriptConsent cookie to record your consent preferences across all Kodular subdomains. This is strictly necessary for the consent mechanism to function. Cookie Script’s privacy policy is available at cookie-script.com/privacy-policy.
Kodular does not use cookies for advertising, cross-site tracking, or behavioural profiling.
12. Managing Cookies
12.1. Cookie consent banner. You can manage your cookie preferences at any time by clicking the cookie settings link in the footer of any Kodular website. This allows you to accept or reject non-essential cookies by category.
12.2. Browser controls. Most web browsers allow you to control cookies through their settings. You can typically view, delete, and block cookies, including blocking cookies from specific websites. Consult your browser’s help documentation for instructions.
12.3. Impact of disabling cookies. If you disable strictly necessary cookies (for example, by blocking all cookies in your browser), core functionality of the Services will be affected. You may be unable to log in, maintain a session, or access protected areas of the Services.
12.4. Global Privacy Control. We honour Global Privacy Control (GPC) signals. If your browser transmits a GPC signal, we treat it as a valid opt-out of non-essential cookies.
13. Non-Essential Cookie Summary
The following table provides a quick reference of all non-essential cookies and storage items across our Services that you can opt out of through the cookie consent banner or your browser settings.
Analytics and Performance:
| Cookie | Service(s) |
|---|---|
_ga | All Services |
_ga_<container-id> | All Services |
_gid | All Services |
Functional:
| Cookie / Storage Key | Service |
|---|---|
VISITOR_INFO1_LIVE | Website, Docs (YouTube) |
YSC | Website, Docs (YouTube) |
VISITOR_PRIVACY_METADATA | Website, Docs (YouTube) |
__Secure-ROLLOUT_TOKEN | Website, Docs (YouTube) |
yt-remote-device-id (localStorage) | Website, Docs (YouTube) |
yt-remote-connected-devices (localStorage) | Website, Docs (YouTube) |
KodularMobileAlerted (localStorage) | Kodular Creator |
kodular-auth.last_used_login_method | Kodular Auth |
__palette (localStorage) | Kodular Docs |
theme_ids | Kodular Community |
color_scheme_id | Kodular Community |
dark_scheme_id | Kodular Community |
text_size | Kodular Community |
14. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in our use of cookies, legal requirements, or operational practices. We will notify you of material changes by email or by prominent notice on the Services at least thirty (30) days before the changes take effect.
Your continued use of the Services after the effective date of any updated Cookie Policy constitutes your acceptance of the revised policy.
We encourage you to review this Cookie Policy periodically.
15. Contact Information
If you have any questions about this Cookie Policy or our use of cookies, please contact us:
Junnovate Limited, trading as Kodular 24A Baggot Street Upper, Dublin, D04 N528, Ireland Email: support@kodular.io