Koemi

cookies

Two cookies. No trackers.

Last updated July 17, 2026

Working draft. Koemi is in heavy beta and this document is still under legal review; the reviewed version will replace this page before wide launch.

1. The two cookies

NameWhat it doesTypeLifetime
koemi_sessionKeeps you signed in. It carries a random token tied to your login session and nothing else.Strictly necessary30 days
koemi_oauth_stateProtects a Google or Discord sign-in while it is in progress from tampering. Set when you start one, cleared the moment it finishes.Strictly necessaryA few minutes

Both are HttpOnly (scripts cannot read them), Secure (HTTPS only), and SameSite=Lax (they do not travel on cross-site requests). Neither exists before you sign in.

2. What there is not

  • No analytics cookies, no advertising cookies, no third-party cookies.
  • No fingerprinting, no cross-site tracking, no social embeds.
  • Visitor counting happens on our server without any cookie: the IP address is hashed with a salt that changes daily, so the count for one day can never be connected to the next.

3. Why there is no cookie banner

Consent banners exist for storage that is not necessary to provide the service you asked for. Koemi sets nothing in that category, so there is nothing to ask consent for. If that ever changes, a real consent choice will appear before any such cookie is set.

4. Browser storage that stays in your browser

A few preferences live in your browser's own storage. They never leave it and identify nothing:

KeyWhat it holdsWhere
jc-themeLight or dark.localStorage
koemi:web:settingsDesk preferences: volume, how she idles, her size and framing, your microphone pick.localStorage
koemi:web:sessionA per-tab connection identifier, reset when the tab closes.sessionStorage

5. Questions

About cookies or storage: support@koemi.ai. The wider picture is in the Privacy Policy.