Cookie policy

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your browsing experience.

2. How we use cookies

Kawaa uses cookies for the following purposes:

2.1 Essential cookies

These cookies are necessary for the website to function properly. They enable core functionality such as authentication, security, and session management.

Cookie	Purpose	Duration
__Host-session	Keeps you signed in to the dashboard	24 hours
__Host-2fa	Holds your sign-in while you complete two-factor authentication	10 minutes
__Host-device	Can be set when you sign in with your password or an API key. Remembers that this browser has signed in to your account before, so signing in from it again does not send you a new-device sign-in alert. It cannot sign you in by itself.	1 year from the last sign-in that set it
__Host-kawaa-hubspot-oauth-, __Host-kawaa-salesforce-oauth-, __Host-kawaa-mailchimp-oauth-*	Set when you start connecting HubSpot, Salesforce or Mailchimp, and checked when that service sends you back, to confirm the connection was started from this browser. The `*` is a random value for that one attempt.	10 minutes
cf_clearance, __cf_bm	Set by Cloudflare Turnstile to protect our sign-up, sign-in, password reset, free email checker, support chat, newsletter and status subscription forms from bots	Up to 30 minutes

2.2 Preference cookies

These cookies remember your preferences such as language and theme settings.

Cookie	Purpose	Duration
kawaa-theme	Remembers dark/light mode preference	1 year
kawaa-locale	Set by our status page (status.kawaa.com) when you choose a language there, and holds only that language’s code, such as `de`. Your browser sends it to every kawaa.com site, but only the status page reads it: kawaa.com itself does not read this cookie.	1 year from when you last chose a language

A language you choose on kawaa.com itself is remembered in your browser’s local storage under the same kawaa-locale name. Local storage stays on your device and is not sent to our servers.

2.3 Analytics

We measure how this website is used with our own software, running on our own servers. It sets no cookies at all, and it is not a third-party analytics or advertising product: nothing it records is sent to another company. (The free email checker and our forms do load Cloudflare Turnstile, which is listed under third-party cookies below. That is a separate thing from the measurement described here.)

What it records:

The pages you open, the page title, how long you stay and how far you scroll
Which site linked you to us: just the site, such as https://www.google.com. The page on it that carried the link is not recorded.
Campaign tags on the link you arrived through (utm_source, utm_medium, utm_campaign, utm_term, utm_content, ref). No other part of the web address you arrived on leaves your browser.
Your browser, operating system, screen size and whether the screen is phone, tablet or desktop sized
Clicks on any link that takes you to app.kawaa.com (sign up, sign in, and links such as Dashboard), recorded as the page you were on, where the link went, and the words on the link. On a sign-up link we add the same random visit number to the web address (kref), so that if you go on to create an account we can tell which page it came from. It is the number described below, not a name, an address or anything about you, and it is not shared with anyone.
Whether the free email checker was used and what class of answer it returned. The address you typed into it is never attached to this.
Whether the free domain-authentication checker (DMARC, SPF and DKIM) was used and what class of outcome the lookup had. The domain you typed goes from your browser to the public DNS resolver, not to Kawaa, and is never attached to this.
Whether the free MX lookup was used and what class of outcome the lookup had (for example, mail servers found, a null MX, or no such domain). The domain you typed goes from your browser to the public DNS resolver, not to Kawaa, and is never attached to this.
Whether the free role-address checker was used, whether what was checked was typed or one of the page’s examples, and whether it was on the role list. The check runs in your browser; what you typed never leaves it and is never attached to this.
Whether a newsletter sign-up from the footer succeeded, and the page it was submitted from. The address you gave goes to the newsletter service and is not attached to this.

It identifies a visit with a random number held in your browser’s sessionStorage, which your browser discards when you close the tab. There is no identifier that follows you between visits, between devices or to any other website, and nothing here is used for advertising.

To switch it off, block JavaScript for kawaa.com in your browser settings, or use a content blocker. The site works without it.

3. Third-party cookies

Some cookies are placed by third-party services that appear on our pages:

Cloudflare Turnstile: to protect our sign-up, sign-in, password reset, free email checker, support chat, newsletter and status subscription forms from bots

4. Managing cookies

You can control cookies through your browser settings. Most browsers allow you to:

View cookies stored on your device
Delete all or specific cookies
Block cookies from specific or all websites
Set preferences for first-party vs third-party cookies

Note that blocking essential cookies may prevent parts of our website from functioning correctly.

Browser-specific instructions

5. Do Not Track

Some browsers offer a "Do Not Track" feature. We currently do not respond to DNT signals, but you can manage cookies as described above.

6. Changes to this policy

We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated revision date.

7. Contact us

If you have questions about our use of cookies, contact us at: privacy@kawaa.com