Cookie and local storage notice

Klaro manages optional browser analytics and diagnostics choices. These services are enabled by default and can be disabled individually or together at any time.

You can reopen privacy preferences from the footer or the privacy preferences button.

• Consent preferences: browser storage records optional analytics and diagnostics choices for up to 365 days.
• Consent evidence: a pseudonymous consent subject identifier supports minimal consent-change records for up to 400 days.
• Consent reliability: local browser storage may prevent duplicate consent logs and retry failed consent-event submissions until they are submitted or cleared.
• Notifuse storage: when permitted, the self-hosted SDK may store nf_session, nf_dimensions, nf_pending_<tab-id>, nf_tab_id, and nf_session_state in local or session storage. Withdrawal clears nf_* state and reloads the page.
• Authenticated app session: Supabase-managed browser storage keeps signed-in app sessions active for organisation users.
• Workspace preference: local browser storage may remember the user's selected organisation workspace.
• UI preference: a cookie may remember app shell sidebar state where that component is active.
• Support widget storage: Zoho Desk support widget storage may be set when organisation users open the support widget.

• PostHog analytics uses the EU host by default, masks text and element attributes, enables session recording only after analytics consent, and only identifies users after analytics consent. PostHog feature-flag evaluation is a required functional service: it starts after authentication and organisation selection when configured, and sends only `/flags` evaluation requests without analytics or replay.
• Notifuse website analytics is self-hosted at https://n.skilltage.com and enabled by default unless Notifuse is declined. It automatically records page views, SPA navigation, scroll depth, active-time heartbeats, referrer/UTM/ad-click attribution, and anonymous browser/device metadata; landing code does not send form fields or identity data.
• Sentry browser diagnostics only starts after diagnostics consent. Default PII collection is off unless an approved environment setting enables it.
• Sentry server-side diagnostics may run for service operation and reliability, with default PII collection off unless explicitly approved.

The backend stores minimal Klaro consent change evidence: a pseudonymous consent subject, optional authenticated user id, event type, changed service, boolean consent snapshot, config version, and timestamps.

Consent evidence does not store raw IP addresses, full user agents, page-by-page tracking, or banner impressions. It is retained for 13 months.