Kylova uses a minimal number of cookies — only those strictly necessary to operate the service. We do not use advertising, tracking, or analytics cookies.
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly and to provide information to the site owner.
Kylova uses session-based cookies and local storage tokens set by our authentication provider, Supabase. No persistent advertising or tracking cookies are used.
We use essential cookies only. These are strictly necessary for the service to function and cannot be disabled without breaking the login experience.
| Cookie / Token | Provider | Purpose | Duration |
|---|---|---|---|
sb-access-token | Supabase | Authenticates your session with the Kylova database. Without this token the app cannot verify your identity or retrieve your data. | 1 hour (auto-refreshed) |
sb-refresh-token | Supabase | Allows your access token to be silently refreshed so you remain logged in without re-entering your password. | 60 days |
Both tokens are stored in browser local storage (not as HTTP cookies) and are scoped to the Kylova domain. They contain a session identifier only — no personal information is stored in the token itself.
Essential cookies cannot be disabled without breaking core functionality. Because Kylova requires authentication to function, the Supabase session tokens listed above are mandatory. If you prefer not to have these tokens stored, you will not be able to use the Kylova service.
You may clear your browser’s local storage at any time through your browser settings. This will log you out of Kylova.
No third-party advertising, analytics, or social media scripts are loaded on any Kylova page. The only external connections made are to:
ewbwkwbwyhiffqrprjal.supabase.co) — for database reads/writes and authentication. Supabase may set its own session cookies in addition to the tokens described above; these are also strictly functional.fonts.googleapis.com) — to load the DM Sans and DM Mono typefaces used in the interface. Google may set a short-lived cookie as part of font delivery. We do not control this behaviour.If we introduce any new cookies in the future we will update this policy and notify you in advance. We will never introduce advertising or tracking cookies without your explicit consent.
Questions about our use of cookies? Contact us at hello@kylova.co.nz.