Cookie Policy
Last updated: October 21, 2026
Effective October 22, 2026
1. What cookies are
Cookies are small files that a website stores in your browser. They remember information from one page to the next, or from one visit to the next.
The browser also has local storage, in which a website keeps similar information. This storage stays in your browser only. This Policy describes the cookies and the local storage that the website kafka.com.br and the app app.kafka.com.br use.
2. Who is responsible
KAFKA TECNOLOGIA E DESENVOLVIMENTO DE SOFTWARE LTDA ("Kafka Tech"), CNPJ 69.314.695/0001-82, with its registered office at Rua Pais Leme, 215, conjunto 1713, Pinheiros, São Paulo, SP, CEP 05424-150, offers the website and the app and is responsible for the cookies described in this Policy.
This Policy supplements the Privacy Policy, which describes how we process personal data.
3. Necessary cookies
Necessary cookies make the website and the app work. For this reason, they do not depend on your consent.
- kafka_consent, on the website and in the app: stores your cookie choice. It lasts 6 months.
- __Host-erp_auth_token, in the app: keeps your session open. It lasts 1 hour, and the app renews it while the session is open.
- __Host-erp_refresh_token, in the app: renews the session without asking for a new access code. It lasts 30 days and renews with each use. The session ends 90 days after the sign-in with the code, and the app asks for a new code.
- The app's local storage: keeps your interface preferences, such as the theme, the language, the state of the side menu and the recent searches of each Workspace. This data stays in your browser until you delete it.
- Stripe cookies: on the app's Subscription screen, Stripe, which processes payments, uses its own cookies to prevent fraud. The Stripe Privacy Policy describes these cookies.
- Cal.com cookies: when you open the scheduling of a call in the app, Cal.com, which provides the calendar, loads the booking page and may use its own cookies. Cal.com loads only when you open the scheduling. The Cal.com Privacy Policy describes these cookies.
When you sign out, the app deletes the __Host-erp_auth_token and __Host-erp_refresh_token cookies.
4. Analytics cookies
Only with your consent, the website and the app use Google Analytics 4, from Google, to measure use, such as the number of visits and the most opened pages. Without your consent, the website and the app do not use Google Analytics.
- _ga: tells one visitor apart from another. It lasts up to 13 months.
- _ga_ followed by the code of our Google Analytics account: keeps the state of the session. It lasts up to 13 months.
- kafka_campaign: keeps the campaign that brought you on your first visit, the utm_source, utm_medium and utm_campaign parameters of the address. It lasts 90 days.
When you create an account, create a Workspace or pay your first invoice, our server sends that event to Google Analytics with the identifier of the _ga cookie. For this, your account keeps that identifier until the first payment and the campaign of the kafka_campaign cookie, only if you consented. If you withdraw your consent, the identifier is deleted the next time you create a Workspace or open the payment. Google receives the IP address and browser data. We keep Google Signals and ad personalization turned off, also with Advertising on. Google Analytics keeps the usage data for 14 months and then deletes it. Google processes this data under the Google Privacy Policy.
5. Advertising cookies
Only with your consent to Advertising, Google Analytics shares its measurement with Google Ads, from Google, so we know which Kafka ads brought each visit and each account. Advertising depends on Analytics: without Google Analytics, nothing goes to Google Ads.
- Cookies that start with _gcl_, such as _gcl_aw and _gcl_au: keep the ad click that brought you. They last up to 13 months.
- When you create an account or a Workspace, our server tells Google, with the event, whether you consented to Advertising. Without that consent, Google does not use the event to measure ads.
We do not use your data to show you ads on other sites. Without your consent to Advertising, the website and the app do not use advertising cookies.
6. How to choose
- On the first visit to the website or the app, we show a notice with the Accept and Reject buttons, with the same prominence, and the Preferences button, with one switch for each category. Necessary cookies always stay on.
- Rejecting changes nothing in how the website or the app works.
- To change or withdraw your choice at any time, use Manage cookies in the website footer or the Cookie preferences option in the app's account menu.
- You can also block or delete cookies in your browser settings. Without the necessary cookies, the app cannot keep your session open.
- We ask for your choice again after 6 months.
- When we add a new category, the notice comes back and asks about that category only.
7. Changes to this Policy
We may update this Policy. We give notice of relevant changes by e-mail or in Kafka before they take effect. We publish this Policy and every earlier version at kafka.com.br/en/cookies. Each version shows the day it was published, the day it takes effect and what changed.
A new use of cookies that depends on consent only starts after you accept it.
8. Contact
For questions about this Policy, write to contato@kafka.com.br. To exercise your rights over personal data, write to privacidade@kafka.com.br, the channel of the Privacy Policy.
Versions
- October 22, 2026 (latest version)
The Advertising category, which measures in Google Ads which Kafka ads brought visits and accounts, only with your consent.
- October 21, 2026
The kafka_campaign cookie and the sign-up, trial and first payment events our server sends to Google Analytics.
- October 13, 2026
The app's session cookies are named __Host-erp_auth_token and __Host-erp_refresh_token.
- October 4, 2026
First version