KuboRunUpdated: 28 September 2026.
Necessary storage
The app uses __Host-kuborun_session (kuborun_session in development), temporary login/MFA challenges (10 and 5 minutes) and kuborun-account for the selected account. Session and account cookies last up to 24 hours. Requested preferences use kuborun.locale (one year) and local theme/menu storage (until changed or cleared). The editor keeps recovery drafts in IndexedDB until cleared in the editor or browser. None is used for advertising. kubo.consent stores the consent choice for 180 days.
Optional analytics
Configured GA4 loads only after analytics acceptance. _ga and _ga_* cookies distinguish browsers/sessions; we set a maximum 180-day duration without automatic renewal. First-party measurement uses a random identifier and retains limited events for 90 days. Free-text form data and complete private-page addresses are not stored.
Optional campaign attribution
Google Ads conversion measurement requires campaign permission. It may use _gcl_* cookies (typically up to 90 days) and click signals to relate a visit to conversion. Remarketing and enhanced conversions are not enabled. Public utm_source, utm_medium and utm_campaign codes can remain in sessionStorage for up to 24 hours or until the browser session closes.
Shared scope
Marketing and app on the configured common domain share preferences and can relate consented browser events. Consent is not automatically transferred between unrelated domains, and links do not carry our identifiers. We do not join browsers using email or fingerprinting.
Your controls
Privacy preferences offers accept all, reject optional or category selection. Optional categories start unchecked; campaigns require analytics. Dismissing the panel or browsing is not consent. Withdrawal stops new events and removes accessible optional cookies, but does not automatically erase data already received by Google. Browser settings provide additional storage controls.
Third parties
Google is not contacted before the relevant permission. Once enabled, Google processes data under its terms and policies.google.com/privacy. GA4/Ads identifiers and retention need configuration; without them those providers do not track visits.
Your choices
Using an account or requesting help does not require advertising consent. Accept analytics alone, reject both categories or accept both. These choices are separate from terms acceptance and do not subscribe you to commercial messages.
How consent is collected
Purposes and policy links appear before measurement starts. Accept and reject have equal prominence. No optional boxes are preselected and silence is not acceptance. Our receipt records a random identifier, policy version, time and choices without adding IP addresses or form content.
Validity and changes
A choice lasts 180 days. Expiry or a changed policy version requires a fresh choice before measurement. Changed purposes/providers require updated information and assessment of whether fresh consent is needed. Rejected categories are not silently enabled.
Withdrawal
Change your choice on this page, available through the Cookies link in the footer. Withdrawal applies to future events and clears local campaign attribution; rejecting analytics requests erasure of related first-party events. Minimal decision evidence remains for the stated period. Erasing information already held by third parties requires a request through the controller’s rights channel.
Children and contact
The commercial service is not directed at children. A future service aimed at them would need appropriate information, legal bases and safeguards before activation. Controller contact details remain to be completed.