PrivacyTermsSub-processorsCookies

Cookies & Storage

Last updated: 8 September 2026 · Effective: 8 September 2026

Kuntum & Embun uses cookies and browser storage only for what the Service genuinely needs. We do not use third-party advertising or cross-site tracking cookies.

For full information on how your data is processed, see our privacy policy.

sb-access-tokenessential

Supabase authentication session token. Set on sign-in, cleared on sign-out.

Retention: 1 hour (auto-rotated by Supabase Auth)

sb-refresh-tokenessential

Supabase refresh token. Used to renew the access token without re-prompting for credentials.

Retention: 60 days from last use

kuntum_kd_flowessential

Holds the in-flight KrackedDevs connection request while you approve it on KrackedDevs. Set when you click Connect, cleared when you return.

Retention: 10 minutes (single use)

kuntum_cap_handoffessential

Carries a verification link across sign-in so the link still works after you log in. Set only when you open such a link while signed out.

Retention: 10 minutes (deleted on use)

sb-{project-ref}-auth-tokenessential

Composite auth state managed by @supabase/ssr. Required for server-side session validation.

Retention: 60 days from last use

Aggregate usage measurement

We use Vercel Web Analytics to understand which pages are visited and how people arrive at them. It sets no cookies and does not use any browser storage. Visitors are counted using a hash derived from the incoming request, which resets every 24 hours, so it cannot follow you between days or across other websites.

What it records is limited to the page address, the referring site, approximate location (country, region, city), and device, browser and operating system type. It does not store your IP address, and the records are not linked to your account or to any individual. We do not run advertising or cross-site tracking, and we do not sell or share this data.

Why we don't show a cookie banner

Malaysia's PDPA does not require granular cookie consent the way EU GDPR does. The only cookies we set are the essential ones listed above, needed to keep your session active, so there is no cookie-based tracking to opt out of, and our usage measurement is cookieless and anonymous by design.

If we expand to EU users in the future, we will review this position and introduce a consent manager before running anything that would require one.