PrivacyTermsSub-processorsCookies

Cookies & Storage

Last updated: 7 July 2026 · Effective: 7 July 2026

Kuntum & Embun uses cookies and browser storage only for what the Service genuinely needs. We do not use third-party advertising or cross-site tracking cookies.

For full information on how your data is processed, see our privacy policy.

sb-access-tokenessential

Supabase authentication session token. Set on sign-in, cleared on sign-out.

Retention: 1 hour (auto-rotated by Supabase Auth)

sb-refresh-tokenessential

Supabase refresh token. Used to renew the access token without re-prompting for credentials.

Retention: 60 days from last use

sb-{project-ref}-auth-tokenessential

Composite auth state managed by @supabase/ssr. Required for server-side session validation.

Retention: 60 days from last use

Why we don't show a cookie banner

Malaysia's PDPA does not require granular cookie consent the way EU GDPR does. We collect only essential cookies needed to maintain your authenticated session — there is no analytics, advertising, or tracking layer to opt out of.

If we expand to EU users in the future, we will introduce a consent manager covering analytics-class cookies before any tracking goes live.