Cookie and browser storage policy

You can accept all, reject all or customise. Necessary stays enabled; Preferences, Analytics and Marketing default to off. Choices are valid for 180 days; expiry or a version change requests a new choice. Cookie settings in the footer allows changes and withdrawal. This stops future optional loading/events and removes accessible optional site cookies, but cannot retrospectively delete data already received by providers or cookies on their domains.

kn_session: HttpOnly login/registration cookie, up to 30 days or logout. kn_admin_session: administrative session up to 12 hours. kn_google_oauth_state: protection for Google sign-in you initiate, up to 10 minutes, removed at completion.

kn_cookie_consent: cookie and localStorage containing categories, time and version, valid 180 days. karmanumbers_daily_card: localStorage created when drawing a card for the result and daily allowance; logically valid for the local day, with the record remaining until overwritten or browser data is cleared. kn_lang: cookie for an explicitly selected language, up to one year; URL determines page language. These mechanisms do not constitute marketing consent.

After Preferences consent, pwa-banner-dismissed can remember dismissal of the installation prompt in localStorage; kn_reading_offer_seen_v1 remembers the consultation invitation with a logical seven-day pause. These records have no physical expiry of their own and may remain until withdrawal or browser-data clearing. Refusal preserves content access. If a birthday campaign is active, kn_birthday_offer_started_at, kn_birthday_offer_popup_seen and kn_birthday_offer_banner_closed use sessionStorage only with Preferences consent, until the tab session ends or withdrawal; otherwise they work in page memory. Documenting these keys does not reactivate the campaign.

Google Analytics 4 (G-HEZLRWNKYY) and Vercel Analytics load only after Analytics consent. Google may create first-party _ga and _ga_* cookies; duration depends on property settings and browser (TODO_PROVIDER_RETENTION for confirmation). We do not assume the legacy Universal Analytics _gid cookie is present. This project configures no identification cookie for Vercel Analytics. Provider event retention must be confirmed separately.

Google Ads (AW-18440015586) and Meta Pixel (1462856878970117) load only after Marketing consent. Google may use _gcl_*; Meta may use _fbp and _fbc, the latter associated with a Facebook click. Provider cookie presence and lifetime depend on configuration and browser.

karma_referral_code: first-party localStorage for referral attribution, only with Marketing consent, until use, withdrawal or browser-data clearing. Google Consent Mode defaults analytics_storage, ad_storage, ad_user_data and ad_personalization to denied. Optional scripts are blocked before consent; categories are updated separately.

Choosing to load/play YouTube activates the youtube-nocookie.com player following a notice. Even this mode can transmit IP, browser and playback information to Google; YouTube determines its technology lifetimes. You may decline to load it. Thumbnails come through the site's server. Telegram/WhatsApp and social links open the chosen provider; displaying the link is not consent to its cookies.