Browser storage

Cookie Policy Overview

This Cookie Policy explains how Kiara Spicy uses cookies, localStorage, sessionStorage, service workers, and similar browser technologies. It should be read together with the Privacy Policy.

We use browser storage primarily for essential login, age-gate, language, security, analytics, performance, media caching, and product-state features. We do not currently use behavioral advertising cookies or sell cookie data.

Essential Cookies and Storage

• ks_user: signed user session cookie used to keep you logged in. It is designed as HttpOnly, Secure, SameSite=Lax, and may last up to 90 days unless you sign out or we invalidate sessions.
• ps_sess: admin/operator session cookie used only for protected admin access.
• kiaraspicy.age: localStorage value used to remember that the visitor passed the 18+ age gate.
• kiaraspicy.lang: localStorage value used to remember the selected language.
• Session and request-safety state used by authentication, same-origin checks, rate limits, checkout flows, voice/canvas tools, and UI recovery.

Analytics, Presence, and Error Beacons

Kiara Spicy sends lightweight first-party beacons to understand traffic, performance, errors, feature usage, video engagement, page paths, conversion events, and active presence.

• /api/track records page visits and basic traffic metadata.
• /api/e records batched client events such as clicks, views, scroll depth, video events, page performance, and JavaScript errors.
• The system may use sessionStorage to avoid counting the same browser tab repeatedly.
• IP addresses may be used server-side for geolocation, abuse prevention, rate limiting, and hashed analytics identifiers.
• Analytics is used to operate and improve the platform, not to run behavioral ads.

Third-Party Browser Technologies

Some features may load scripts, iframes, checkout pages, or APIs from third-party providers. Those providers may set their own cookies or storage under their own policies.

• Cloudflare services may be used for hosting, storage, security, caching, and abuse protection.
• Telegram Login Widget may be used for Telegram authentication.
• Google OAuth may be used for Google login when enabled.
• Payment providers such as Plisio or Stripe may use cookies and fraud-prevention technologies during checkout.
• Cartesia or other voice providers may process voice-call connections, session metadata, and realtime communication state.
• Google Fonts or other static assets may be requested to render the site.

Media Caching

Kiara Spicy may register a service worker to cache media assets from the Kiara Spicy media domain. This improves repeat loading of images and videos in the same browser.

Cached media can remain on your device until your browser clears it, the cache expires, or you clear site data.

Your Choices

• You can clear cookies, localStorage, sessionStorage, service workers, and cached media through your browser settings.
• If you block essential cookies, login, checkout, dashboard, upload, and generation features may not work.
• If you clear the age-gate value, Kiara Spicy may ask you to confirm adult access again.
• If you disable third-party cookies, external login or payment providers may not work correctly.

Updates

We may update this Cookie Policy when we add Google login, new payment providers, new analytics, new voice infrastructure, or other browser-based features.

For questions, contact kacinka74@gmail.com.