KolTheia
Cookies and storage
Last reviewed 29 October 2026.
KolTheia itself sets one cookie, and it is needed for the service to work. It sets no advertising cookies, no analytics cookies and no tracking cookies, so there is nothing to accept or refuse and no banner. If that ever changes, this page changes first and you will be asked before anything optional is set.
| Name | What it is for | How long |
|---|---|---|
koltheia_session (koltheia_session_s on the secure site) | Keeps you signed in. Not readable by page scripts; sent only to KolTheia. | If you choose "Keep me signed in on this device" (the default), up to 180 days, renewed each time you visit; otherwise until you close the browser. Ends when you sign out. |
The "are you a person?" check
KolTheia does not currently run Cloudflare's "are you a person?" check (Turnstile). No page loads a script from Cloudflare, and nothing is stored in your browser for it. If the check is switched on, this page changes with it.
Things kept in your browser (not cookies, never used to follow you)
- Your camera settings and your light or dark choice.
- Your device key, so that your captures can be signed.
- A copy of the file you just sealed, until you leave its result screen.
- The exact spot and secret for each located capture, so you can reveal it later.
- The usernames you have signed in with on this device (usernames only, never passwords), so the log-in page can offer "Continue as @name". You can remove each one with the × beside it.
- The date you chose "Not now" on the offer to add a passkey, so it is not shown again for 90 days. You can still add a passkey from your account page at any time.
- The page itself, saved so it opens quickly (a service worker).
You can clear all of this from your browser's settings; you will be signed out and any exact spot you had not backed up is gone.
If advertising is ever added
Advertising networks set tracking cookies, which need your clear consent before they are set, a way to refuse as easily as to accept, and a way to change your mind. They would also be kept off the capture screen and every certificate, which have to stay clean and neutral to be trusted. Nothing of this exists today.