COOKIE POLICY FOR KODION
Effective Date: June 9, 2026 Last Updated: July 13, 2026
This Cookie Policy explains how International Elevators Group Company I.L.C. SARL ("Kodion," "we," "us," or "our") uses cookies and similar technologies on the Kodion website (https://kodion.dev) and within the Kodion application (collectively, the "Service"). It should be read together with our Privacy Policy.
1. What Are Cookies and Similar Technologies?
"Cookies" are small text files placed on your device when you visit a website. We also use related technologies such as local storage, session storage, pixels, SDKs, and mobile identifiers, which we collectively refer to as "Cookies" in this Policy.
Cookies may be:
- First-party (set by us) or third-party (set by our service providers);
- Session (deleted when you close your browser) or persistent (remaining until they expire or are deleted).
2. Categories of Cookies We Use
(a) Strictly Necessary Cookies
Required for the Service to function — for example, to authenticate you, keep you signed in, maintain session security, enforce security and anti-fraud measures (including trial-abuse prevention), and remember your consent choices. These cannot be switched off and do not require consent.
(b) Functional / Preference Cookies
Remember your settings and preferences (such as language and display options) to provide enhanced, personalized features.
(c) Analytics / Performance Cookies
Help us understand how the Service is used so we can improve it (for example, which features are used and where errors occur). We use PostHog (PostHog EU Cloud, hosted in the European Union). These are set only with your consent, given through our cookie banner.
(d) Advertising Cookies
Used to serve and measure the advertisements that support our free tier. We use Google AdSense. When ads are displayed, Google and its certified advertising partners may set cookies and use device identifiers to deliver ads, limit how often you see an ad, measure ad performance, and, depending on your settings and consent, personalize ads. Where required by law (including in the EEA, UK, and Switzerland), advertising cookies are set only with your consent, collected through a Google-certified consent message shown before ads are served. See How Google uses information from sites or apps that use our services.
(e) Crash and Diagnostics Technologies
We do not currently use a third-party crash-reporting tool or SDK. If we adopt one in the future, this policy and the table below will be updated before it is deployed.
Advertising cookies are used only inside the app for signed-in users on free plans. Our public pages (homepage, catalog, articles, blog) do not display third-party advertising, and paid plans remove ads entirely.
3. Cookie Table
| Cookie / Technology | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
authjs.session-token (__Secure-authjs.session-token over HTTPS) | First-party | Strictly necessary | Authentication and session security | 30 days |
authjs.csrf-token, authjs.callback-url | First-party | Strictly necessary | Sign-in security (CSRF protection and redirect integrity) | Session |
kodion-consent | First-party | Strictly necessary | Stores your cookie-consent choices | 12 months |
theme (localStorage) | First-party | Functional | Remembers your light/dark display preference | Persistent until cleared |
recap-checked-* (localStorage) | First-party | Functional | Remembers that you've already seen the current week's progress recap, so it isn't shown again | Persistent until cleared |
kodion:u:* (localStorage) | First-party | Functional | Remembers in-app state on your own device, scoped to your account: your position in a lesson, unsent code drafts, hidden courses, panel sizes, and a pending crypto-payment reference | Persistent until cleared |
ph_* cookies and localStorage entries | PostHog (EU) | Analytics | Usage measurement and improvement — set only after you accept analytics in the cookie banner | up to 12 months |
__gads, __gpi, IDE, test_cookie, and similar Google advertising cookies | Google (AdSense and certified ad partners) | Advertising | Ad delivery, frequency capping, fraud prevention, measurement, and (with consent or per your Google settings) personalization. Ads appear only for free-plan users inside the app; in the EEA/UK/Switzerland these cookies are set only after consent via the Google-certified consent message | up to 13 months |
| Cloudflare Turnstile (embedded widget on sign-in/sign-up) | Cloudflare | Strictly necessary | Bot protection and abuse prevention | Session |
Table current as of July 2026. Google's advertising cookies vary by region and consent state; see [Google's cookie documentation](https://policies.google.com/technologies/cookies) for the current list. We will update this table if our own cookie usage changes.
4. Your Choices and How to Manage Cookies
- Consent banner: Where required by law (including in the EU/UK), we present a consent banner allowing you to accept or reject non-essential Cookies, and to change your choices at any time via the "Cookie settings" link in the website footer.
- Browser settings: Most browsers let you block or delete cookies. Disabling strictly necessary cookies may break parts of the Service.
- Mobile settings: You can manage or reset advertising/device identifiers through your device's privacy settings.
- Analytics opt-out: Where available, you can opt out of analytics via the provider's tools or our cookie settings.
- Advertising opt-out: You can opt out of personalized advertising at Google Ads Settings and www.aboutads.info/choices. In the EEA/UK/Switzerland you can also change your advertising-consent choice through the Google-certified consent message.
- Global Privacy Control: We honor the GPC browser signal as an opt-out where applicable law gives it that effect.
5. Consent
For non-essential Cookies in jurisdictions that require consent, we will not set them until you provide consent, and you may withdraw consent at any time. Consent for analytics cookies is collected through our own cookie banner; consent for advertising cookies in the EEA, UK, and Switzerland is collected through the Google-certified consent message described in Section 2(d). Strictly necessary Cookies are set on the basis of our legitimate interest in operating and securing the Service and do not require consent.
6. Changes to This Cookie Policy
We may update this Cookie Policy from time to time. We will update the "Last Updated" date and, where required, notify you. Please review it periodically.
7. Contact
Questions about this Cookie Policy: privacy@kodion.dev.