Scope and definitions
Cookies are small text records placed on a browser. Similar technologies include local storage and session storage. First-party storage is set for a Kanera domain; third-party technology is provided by another organisation even where its cookie is configured as first-party.
This notice covers www.kanera.app, the documentation served there, and board.kanera.app. A self-hosted Kanera operator controls its own deployment and must provide its own notice for any storage or third-party technology it enables.
Necessary cookies and storage
These records provide authentication, security, consent, navigation, and device-local functionality. They are not used for advertising. Blocking them may prevent sign-in or requested features from working.
| Name or pattern | Technology and provider | Purpose | Lifespan |
|---|
| kanera_rt | First-party HttpOnly cookie · Kanera | Keeps a hosted Kanera user signed in; limited to authentication routes and rotated when used | Normally 10 days |
|---|
| kanera_cookie_consent | First-party cookie · Kanera | Records consent version, time, and Analytics choice across kanera.app subdomains | 180 days |
|---|
| kanera:scroll-top-on-next-load | Session storage · Kanera website | Preserves the expected page position during same-origin navigation | Current browser-tab session; removed on use |
|---|
| Device-local preference and draft keys | Local or session storage · hosted Kanera | Stores theme, layout, filters, recent boards, notification preferences, cross-tab logout, and recoverable unsent drafts | Until removed by Kanera’s feature rules or cleared by the user; recoverable drafts are pruned after 30 days |
|---|
| Turnstile security state, if issued | Cookie or browser storage · Cloudflare | Assesses suspected automated or abusive form and authentication requests | Controlled by the challenge and kept only as Cloudflare requires for security |
|---|
Analytics cookies and storage
Analytics is optional. PostHog is not loaded and the following analytics storage is not created before consent. We disable autocapture, session replay, heatmaps, form capture, and input capture. Marketing has no configured vendor, advertising pixel, or tracking embed.
| Name or pattern | Technology and provider | Purpose | Lifespan |
|---|
| ph_<project-token>_posthog and related ph_ keys | First-party cookie plus local or session storage · PostHog Cloud EU | Maintains a pseudonymous device, session, acquisition and permitted product-analytics identity | Cookie: no more than 180 days; browser storage: until consent expires or is withdrawn, Kanera removes it, or the user clears site data |
|---|
| kanera_analytics_registration_started | First-party cookie · Kanera | Deduplicates the consented signup-funnel hand-off | 30 minutes |
|---|
| kanera_analytics_source, kanera_analytics_medium, kanera_analytics_campaign, kanera_analytics_landing_page | First-party cookies · Kanera | Passes consented acquisition context between Kanera subdomains | 30 days |
|---|
| kanera:analytics:registration-started | Session storage · Kanera website | Deduplicates registration intent in the current browser tab | Current browser-tab session |
|---|
Server-side analytics
Hosted Kanera separately sends a limited set of commercial lifecycle events from its server, including subscription starts, renewals, resumptions, cancellations, and plan or seat-band changes. These events do not place or read information on your device and therefore are not controlled by the cookie setting. Their data fields, legitimate-interests basis, and retention are described in the Privacy Policy.
Your controls
Use Cookie Settings in the footer at any time to accept or reject Analytics. Rejecting or withdrawing Analytics stops future browser capture, resets the PostHog identity, opts the browser out, and removes known PostHog and acquisition storage. The necessary consent record remains so that Kanera can honour the rejection.
You can also delete cookies and browser storage using browser controls. Those controls apply separately to each browser and device. Blocking all cookies may sign you out or prevent requested features from working.
Changes and contact
We update this notice when storage, providers, purposes, or lifespans change. Material changes that require a new consent choice will increment the consent version and ask again. Questions can be sent to [email protected].
This is Cookie Notice version 1, effective August 20, 2026.