/ legal / cookies

Cookie Policy

Effective date: 13 May 2026 · Last updated: 27 May 2026
Working draft, pending counsel review.

This page lists every cookie and similar local-storage item that Kashi Technologies ("we") sets on your browser when you use our Services — kashilabs.ai, app.kashilabs.ai, paperbrief.app, cloudbrief.app, and kashitechnology.com.

We deliberately keep this list short. We do not run third-party advertising trackers, Google Analytics, Meta Pixel, or similar.

What we set

NamePurposeLifespanType
analyzer.jwt (localStorage, not a cookie) Holds your sign-in token so you stay logged in across page loads. Read by the app's JavaScript; never sent to a third party. Until you sign out or clear browser storage Strictly necessary
sso_state Short-lived state cookie set during a Google / Microsoft SSO sign-in to protect against cross-site request forgery (CSRF). Deleted as soon as the sign-in completes. 10 minutes Strictly necessary
__cf_* (Cloudflare) Set by Cloudflare on our edge to identify trusted web traffic and protect against abuse. We do not control the exact set — see Cloudflare's cookie policy. Up to 1 year (varies) Strictly necessary

What we do not set

Managing cookies

You can clear all of the above from your browser's privacy settings. Clearing analyzer.jwt will sign you out of the app — that's the expected behaviour.

Because we only set strictly-necessary cookies, the law in most jurisdictions does not require us to show a consent banner. If your local law mandates one and you reach this page from such a region, please write to privacy@kashilabs.ai and we will treat it as a consent enquiry.

Updates

If we add a new cookie or storage item, we will update the table above and the "Last updated" date. Material additions will be announced to signed-in users by email.