Cookies & browser storage
A light touch online.
Optional measurement starts with your permission. Essential features keep the site and your choices working.
Choose what suits you
Use the Privacy choices button at the bottom of the screen to accept optional measurement, reject it or choose audience and performance measurement separately. Neither option is selected for a first-time visitor. You can return to those controls to withdraw just as easily.
On previews and before measurement is activated, the controls explain that optional measurement is inactive. The public website, collections and email form work without measurement. We do not use advertising cookies, Google Analytics, cross-site marketing tags or session replay.
The storage we use
kr8a-privacy-v1 — local storage, essential. Records the two measurement choices, policy version and time for up to six months on this browser. It holds no email, marketing choice or persistent visitor ID. If storage is unavailable, measurement defaults to off until you choose; your choice applies only to the current page.
kr8a-current-v1 and kr8a-saved-v1 — local storage, configurator feature. The existing prototype saves the current design and designs you choose to save on your device. These may include exact furniture dimensions. They are not sent as analytics or email signups. Clear site data in your browser to remove them. The prototype currently has no automatic expiry.
kr8a-email-result — essential first-party cookie. Set after a successful confirmation or unsubscribe POST. It contains an encrypted result, not an email address. It is Secure, HttpOnly and SameSite=Strict, applies only to /early-access and expires after five minutes. It lets the status page verify the result without trusting a URL parameter.
Optional measurement
With your agreement and only on the canonical production site, Vercel Web Analytics reports page visits and collection interest. Vercel Speed Insights reports performance measurements. These services do not require an analytics cookie in this implementation, but they do access browser/device information and send measurement requests. We choose to ask for consent before loading either service.
We use the official packages once, with no separate Google or tag-manager integration. URL parameters and fragments are filtered out; unknown paths, the configurator and private page views are excluded. After withdrawal, the send-time filter rejects further measurements immediately. Historic aggregate reports are not a personal browsing history and are not erased by changing this browser’s choice.
Security & your browser
When signup is enabled and you start its form, Cloudflare Turnstile checks browser signals to prevent automated abuse. The planned widget uses its default one-time-token mode with pre-clearance disabled; it should not issue the optional cf_clearance cookie. Actual widget behaviour must be checked in the protected test before signup opens.
Vercel may apply technical protection mechanisms outside the application. Preview authentication and the Vercel development toolbar belong to the hosting/test environment, not KR8A marketing tracking. We will review the final production domain after routing and record any additional essential storage before launch.
Browser settings let you inspect or remove site cookies and local storage. Removing the privacy record causes us to ask again on the active production site and returns measurement to its default off state. Removing design storage also removes saved prototype designs.