Cookie Policy

What this policy covers

This Cookie Policy explains how Kumand uses cookies and similar technologies (such as browser local storage and session storage) when you visit kumand.com or use the Kumand platform. It supplements our Privacy Policy.

What are cookies and similar technologies

Cookies are small text files that a website places on your device. Local storage and session storage are similar mechanisms built into modern browsers that allow a website to store data on your device. We use both. Throughout this policy, "cookies" refers to all of these technologies.

Categories of cookies we use

Strictly necessary

Required for the Services to function. These cannot be turned off without breaking core functionality.

• Authentication tokens. Stored after you sign in to keep you logged in across pages. Cleared when you sign out or your session expires.
• Briefing draft (kumand_briefing_draft). Saves your in-progress intake form answers in your browser's local storage so you do not lose work if you navigate away. Cleared when you submit the briefing or when you choose Start Fresh.
• CSRF and security tokens. Protect against cross-site request forgery and similar attacks.

Functional

Help us remember your preferences and recognize your device across visits.

• Anonymous device identifier (tmp_anon_id). A randomly generated UUID stored in local storage to recognize your device on return visits. Used to associate session activity without requiring you to sign in.
• Session identifier (tmp_session_id). A per-tab session ID used to group your activity within a single browsing session.
• Guest identity UUID. Minted by snypir-identity.js on your first visit to maintain continuity if you start a briefing as a guest before creating an account.

Analytics and performance

Help us understand how the platform is used so we can improve it.

• Presence heartbeats. Sent every 60 seconds while a tab is visible, recording page path, event type (pageview, click, pagehide), referrer, user-agent, and approximate IP.
• Google Analytics. If enabled on a specific page, Google Analytics may set its own cookies to measure aggregate traffic patterns.

Marketing

We do not currently use marketing or advertising cookies on kumand.com. We do not engage in cross-context behavioral advertising. If this changes, we will update this policy and offer an opt-out mechanism through the Cookie Settings button in the footer.

Third parties that may set cookies

• Google (Google Fonts, Google Workspace authentication, Google Analytics where enabled).
• Stripe (payment pages only, for fraud prevention).
• Twilio (when interacting with embedded SMS or voice features).

How long cookies last

Session cookies expire when you close your browser. Persistent cookies and local storage entries remain until they expire, are cleared by you, or are programmatically removed. The anonymous device identifier persists until you clear your browser storage. Briefing drafts persist until you submit or clear them.

How to manage cookies

You can control cookies in several ways:

• Cookie Settings button. The button in our footer opens a preference manager (when our consent platform is active) where you can grant or withdraw consent for non-essential categories.
• Browser settings. All major browsers let you block or delete cookies. See your browser's help documentation for instructions.
• Opt-out tools. For Google Analytics, you can install the Google Analytics Opt-Out Browser Add-On.
• Do Not Track. We honor Global Privacy Control (GPC) signals where required by law. See our Do Not Sell or Share My Personal Information page.

Disabling strictly necessary cookies will prevent core features from working, including signing in and saving briefing drafts.

Changes to this policy

We may update this Cookie Policy from time to time. When we add new tracking technologies or change how we use existing ones, we will revise this page and update the "Last updated" date.