Cookie Policy

1. What are cookies?

Cookies are small pieces of information stored on your device when you visit a website. They can keep a site working, remember preferences, protect sessions, help understand site use and support features such as live chat.

Similar technologies include local storage, session storage, browser identifiers and other ways a website or embedded service can store or access information on a device. This policy covers those technologies as well as traditional cookies.

2. How Kiyo uses cookies

We aim to keep tracking to a minimum. Necessary browser storage is used for website functionality, security where applicable, remembering consent choices and preserving a shopping or order flow requested by you.

Optional technologies are used only for an appropriate purpose and, where required, after consent. Kiyo is not cookie-free: the optional Tawk.to live chat can use cookies and similar storage after you allow it.

3. Cookie categories

4. Strictly necessary technologies

These are the Kiyo identifiers confirmed in the current codebase:

5. Tawk.to live chat

Kiyo uses Tawk.to for live chat, AI-assisted support, human support and conversation continuity. The widget can store or access information on your device to maintain chat functionality and state.

Kiyo does not load the widget until you allow optional live-chat storage. Tawk.to controls its own technology and may change it over time. The identifiers below are taken from Tawk.to's current published cookie documentation rather than guessed from names:

Support-data processing is explained in our Privacy Policy.

6. Cookie consent

The Kiyo popup offers Accept, Reject and Manage preferences. Necessary storage can operate without optional consent. Accept enables live-chat storage; Reject keeps Tawk.to blocked; Manage preferences lets you choose support storage separately.

Rejecting optional storage does not prevent access to the public website, hosting and domain information, Help Center or support request form.

7. Changing your choice

You can reopen the consent interface at any time using Cookie Preferences in the footer. You can then enable or withdraw optional live-chat consent without clearing all browser data.

Withdrawing support consent hides and unloads the widget and removes accessible Tawk.to storage from the Kiyo origin. Storage controlled entirely by a third-party domain may also need to be managed through browser settings.

8. Cookie preference storage

Kiyo stores your choice in local storage under the identifier kiyo-cookie-consent. This is strictly necessary so the website can respect your decision. It remains until you change the choice or clear the site's browser data; it has no invented fixed expiry date.

9. Analytics

Kiyo Cloud does not currently use optional analytics cookies on the public website. No Google Analytics, Plausible, PostHog or similar browser-side analytics integration was found in the current codebase.

If optional analytics is introduced, it must be added to the inventory and consent manager before being enabled.

10. Authentication and Client Area

The current public login and signup screens do not create real authentication sessions, and no authentication cookie is active. We therefore do not list an invented session-cookie name.

When authentication is implemented, necessary session technologies and their real names and durations must be added here before use.

11. Domain search, cart and checkout

Kiyo uses kiyo-pending-order in local storage after you select a domain, transfer or hosting plan. It preserves the requested shopping flow across pages and is not used for advertising or tracking.

An older migration identifier, kiyo-domain-selection, may exist for previous visitors but the current application no longer writes it and removes it when a current selection is saved.

12. Security

The current public application does not set a named Cloudflare or Vercel security cookie. Our production-page audit found no Set-Cookie header from the public Kiyo response, so no such cookie is listed as active.

If bot protection, fraud prevention or authenticated request-integrity technology later adds browser storage, it will be audited and listed before deployment.

13. Third-party services

Tawk.to is the only current browser-side third-party integration confirmed to use cookie or storage technology, and it is consent-controlled. Vercel serves the application and Cloudflare provides DNS or infrastructure services, but neither currently sets a confirmed browser cookie through the public Kiyo page.

Resend is used server-side for transactional email and does not load a public browser script. Stripe and a domain registrar are not active browser-side integrations, so they are not included in this cookie inventory.

14. How long cookies last

Session technologies generally last until the browser or tab session ends. Persistent technologies remain for a defined provider period, until the relevant flow removes them or until you clear browser data.

The tables above state the confirmed duration for each item. Where Tawk.to does not publish a fixed duration, we say so instead of inventing one.

15. Browser controls

You can also block or remove cookies and site storage through browser settings. Blocking all storage may affect order continuity, future login sessions, chat history or another feature you request.

16. Do not sell and advertising tracking

Kiyo Cloud does not sell personal information and does not currently use behavioural advertising cookies.

17. Policy changes

We may update this policy when integrations are added or removed, storage use changes, legal requirements change or new product functionality is introduced. The update date will change when material revisions occur.

If a new non-essential purpose is introduced, the inventory and consent interface must be updated before that technology is enabled.

18. Contact