Cookie Policy

Last updated: July 2026

What we store, and where

This page covers every kubehz surface: the website (kubehz.cloud), the dashboard (app.kubehz.cloud), the sign-in app (auth.kubehz.cloud) and our identity provider (id.kubehz.cloud), the status page (status.kubehz.cloud) and community chat (chat.kubehz.cloud). Nothing here is analytics or tracking (see below).

Signing in — auth.kubehz.cloud

Stored	Purpose	Kept for
kubehz_login Cookie · HttpOnly · Secure	Carries one sign-in attempt from the e-mail step to the password step.	10 minutes
kubehz_login_sso Cookie · HttpOnly · Secure	Keeps you signed in across the dashboard and our other apps, so you enter your password once.	12 hours
lang Cookie	The language you picked on the sign-in page. Only set if you pick one.	1 year
htmx-current-path-for-history sessionStorage	Lets the browser’s Back button work during sign-in.	Until the tab closes

Our identity provider — id.kubehz.cloud

Stored	Purpose	Kept for
__Host-zitadel.useragent Cookie · HttpOnly · Secure	Recognises your device during sign-in. This is our own ZITADEL instance on our own domain, not an outside service.	1 year

The dashboard — app.kubehz.cloud

Stored	Purpose	Kept for
i18n_redirected Cookie	Which language to show you.	1 year
kubehz-tenant Cookie	Which of your projects you are working in. Only set if you belong to more than one.	Until you close the browser
kubehz-theme localStorage	Light or dark theme.	Until you clear it
oidc.user:… sessionStorage	Your signed-in session.	Until you close the tab

The website — kubehz.cloud

The website sets no cookies at all. It remembers one thing, in your own browser:

Stored	Purpose	Kept for
vitepress-theme-appearance localStorage	Light or dark theme on the website.	Until you clear it

Your session token lives in sessionStorage, not in a cookie: closing the tab ends the session. The 12-hour kubehz_login_sso cookie is what spares you the password prompt if you open the dashboard again in a new tab.

The status page — status.kubehz.cloud

Stored	Purpose	Kept for
i18n_redirected Cookie	Remembers the language you were last shown, so the page does not switch back on every visit.	1 year
kubehz-theme localStorage	The light or dark theme you chose. Only set if you use the theme toggle; unset means the page follows your operating system.	Until you clear it

Community chat — chat.kubehz.cloud

Stored	Purpose	Kept for
oidc_session, oidc_session_no_samesite Cookie · Secure	Keeps you signed in to chat after you authenticate. The second is the same value without SameSite, for browsers that need it during the sign-in redirect.	Session
htmx-current-path-for-history sessionStorage	Lets the browser’s Back button work inside chat.	Until the tab closes

About the language cookie

i18n_redirected is written on your first visit from the language your browser asks for, before you choose anything, and again whenever you switch language yourself. It stores a preference, never an identifier. Clearing site data removes it; the site then falls back to your browser’s language on the next visit.

No analytics, no tracking, no third parties

We do not use Google Analytics, Facebook Pixel, or any other analytics or tracking service. We do not collect behavioural data. No outside company sets storage on any kubehz domain: the identity-provider cookie above is our own ZITADEL instance on our own domain.

If analytics is ever added in the future, it will be:

• Consent-first (opt-in, not opt-out)
• Privacy-respecting (self-hosted, e.g., Plausible or Umami)
• Anonymised (no personal data)
• Announced on this page

Why there is no consent banner

Under the ePrivacy Directive (in Slovenia, ZEKom-2), storage that is strictly necessary for a service you asked for is exempt from consent. Sign-in, session, project selection and theme storage are necessary in that sense. The language cookies store a preference and are used for nothing else.

Contact

Questions about our cookie policy: privacy@kubehz.io