Cookie policy
Last updated: 21 October 2026
Kernel Security only stores in your browser what the site and the console need to work. We use no advertising, tracking or social media cookies, and our analytics use no cookies. That is why we don't ask for consent: technical cookies are exempt (article 22.2 of the Spanish LSSI).
Cookies
All of them are first-party: set by kernelsecurity.tech or by our sign-in service, and never shared with third parties.
| Name | What for | Duration |
|---|---|---|
| NEXT_LOCALE | Remembers the language you see the site in. | Until you close the browser |
| authjs.* (session-token, csrf-token, callback-url, pkce, state) | Keep you signed in to the console and protect your session. Only if you sign in. | Up to 30 days, or until you sign out |
| AUTH_SESSION_ID, KEYCLOAK_IDENTITY, KEYCLOAK_SESSION, KC_RESTART | Used by our sign-in service (at api.kernelsecurity.tech) to identify you securely. Only if you sign in. | For the length of your session |
| kernel-local-jwt | Administrative access for the Kernel Security team. | 8 hours |
Storage in your browser
Besides cookies, the console keeps some data in your browser. It stays on your device.
| Name | What for | Duration |
|---|---|---|
| kernel-keys (IndexedDB) | Your Kernel ID's private key, which you sign with. It never leaves your device. | Until you delete it |
| kernel_cert (localStorage) | Your Kernel ID's public details. | Until you delete them |
| kernel-operations (sessionStorage) | Signings and verifications in progress, so a page reload doesn't lose them. | Until you close the tab |
| kernel-cookie-notice (localStorage) | That you already closed the cookie notice. | Until you delete it |
| kernel-admin-session (localStorage) | Kernel team only: remembers that this device signed in as an administrator. It holds no credential. | 8 hours |
Analytics
To know which pages are visited we use Umami, hosted on our own servers (analytics.kernelsecurity.tech). It counts visits in aggregate, uses no cookies and does not store your IP address.
How to delete them
You can delete cookies and site data from your browser settings. You will be signed out and, to sign again from that device, you will need to add a signing key again from Kernel ID.
Contact
If you have any question about this policy, write to us at [email protected].