Cookie Policy

Cookies are small text files stored on your device when you visit a website. Similar technologies such as local storage and analytics scripts may be used for comparable purposes.

We use cookies and similar technologies for:

• Keeping you signed in to your Kustmr workspace
• Protecting account access and maintaining session security
• Optionally remembering a trusted browser after two-factor verification (up to 30 days)
• Understanding how public marketing pages are used
• Measuring product interest and trial conversion on marketing pages

Strictly necessary cookies. These are required for authentication, security and core site functionality. They include the session cookie used after you log in (kustmr_session), the short-lived login verification cookie (kustmr_login_challenge), and the optional trusted-device cookie (kustmr_trusted_device) that can remember a browser for up to 30 days after successful password email-code verification. These cookies are HttpOnly security cookies — they are not used for analytics or advertising, and no consent banner is required for them.

When you choose Continue with Google, Google Identity Services may set or use cookies on Google domains as part of that user-selected sign-in flow. Those cookies are controlled by Google, not by Kustmr. Google sign-in is authentication — not analytics or advertising. Kustmr still uses its own strictly necessary kustmr_session cookie after a successful Google sign-in. The Google Identity Services script is loaded only on relevant login, signup and account-security surfaces when Google auth is enabled — not globally across the CRM.

When you choose Continue with Microsoft, your browser is redirected through Microsoft's sign-in pages (Microsoft Identity Platform). Microsoft may set or use cookies on Microsoft domains during that user-selected flow. Those cookies are controlled by Microsoft, not by Kustmr. Microsoft sign-in is authentication — not analytics or advertising. During the redirect, Kustmr may set a short-lived strictly necessary HttpOnly cookie to validate the sign-in request. After a successful Microsoft sign-in, Kustmr uses its own kustmr_session cookie for your workspace session.

Analytics cookies. These help us understand traffic and usage on public marketing pages. We currently use Google Analytics and Contentsquare on marketing pages only.

We do not use advertising or third-party marketing cookies to sell workspace data.

Analytics tools are loaded on public marketing pages such as the homepage, features, pricing, our story, security, articles and related public content.

Authenticated CRM pages rely primarily on session cookies needed to operate the product. Marketing analytics scripts are not intended for authenticated application routes. First-party product-usage measurement inside the authenticated application is recorded server-side and does not load Google Analytics or Contentsquare on CRM pages.

You can control cookies through your browser settings, including blocking or deleting cookies. Blocking strictly necessary cookies may prevent you from logging in or using core product functionality.

You can also use browser extensions or opt-out tools offered by analytics providers where available.

For more information about personal data processing, see our Privacy Policy and Subprocessors pages.

Questions about this Cookie Policy can be sent to support@kustmr.com.