C1COOKIE POLICY · v1.1
Essential cookies, no ad tracking.
KTIMIO uses first-party cookies only for secure sign-in, private-data ownership and short-lived authentication state.
__Host-ktimio_auth
Purpose: secure access to a KTIMIO account after Google or Facebook sign-in. It contains a random opaque session token, not profile information or a provider access token. Maximum duration: 30 days. Attributes: HttpOnly, Secure and SameSite=Lax.
Temporary OAuth cookie
During sign-in, a short-lived cookie protects the Google or Facebook flow with CSRF and state verification. It is removed when the flow completes or is cancelled and otherwise expires automatically after 10 minutes.
ktimio_session
Purpose: ownership and retrieval of private data before sign-in. Maximum duration: 12 months. Attributes: HttpOnly, Secure and SameSite=Lax. It is not used for advertising targeting or cross-site profiling.
Analytics
KTIMIO may record first-party product events such as import success or report completion to operate and improve the service. Google Analytics, Meta Pixel and cross-site advertising cookies are not enabled.
Your control
The Workspace allows export or deletion of account and session-owned data. Deletion clears cases, uploads, watch items, direct submissions, notifications, export metadata and KTIMIO authentication sessions, subject only to an approved mandatory security or legal retention requirement.