Last updated April 28, 2026

Cookie Policy

We keep cookies to the minimum needed to make Karmogram work and to learn, without fuss, what to improve. This page lists every cookie we set, why, and how long it stays.

Three categories

Essential cookies are always on. Without them, sign-in, payment, and basic preferences would break. Analytics cookies only load if you accept them in the banner. We do not run any marketing cookies today.

Every cookie we set

  • __Host-csrf

    Purpose: Anti-CSRF double-submit token validating every state-changing request you make.

    Duration: 1 day

    Set by: Karmogram

    Category: Essential

  • karmogram_session

    Purpose: Iron-session cookie that keeps you signed in after a magic link. HttpOnly + Secure.

    Duration: 30 days (sliding)

    Set by: Karmogram

    Category: Essential

  • km.cookies.v1

    Purpose: Remembers your cookie preferences (essential / analytics / marketing) so we don't ask again.

    Duration: 1 year

    Set by: Karmogram

    Category: Essential

  • km.age.v1

    Purpose: Records that you confirmed being 18+ and accepted the entertainment disclaimer.

    Duration: 1 year

    Set by: Karmogram

    Category: Essential

  • ph_[project]_posthog

    Purpose: PostHog product analytics: anonymous device id and session events. Loaded only if you accept analytics.

    Duration: 1 year

    Set by: PostHog

    Category: Analytics

  • ph_session_id

    Purpose: PostHog session id used to group events from a single visit.

    Duration: 30 days

    Set by: PostHog

    Category: Analytics

We don't run advertising or remarketing cookies today. If that ever changes, you'll see them appear here and the banner will ask for fresh consent.

Third-party services

When you accept analytics, PostHog (EU-hosted) sets the cookies described above. Stripe and Resend never set cookies on karmogram.com; they're only invoked server-to-server.

Change your mind

You can revisit your choices any time by clearing the consent cookie or using the link below. The banner will return on your next visit.

Operated by CyGuru Pharm SRL (registration pending, CUI RO52437696), Branesti, str. Horia 33c, jud. Ilfov. Contract nr. 1/17.04.2026.