Cookies and browser storage
Updated 6 October 2026
What we use
The public website and Dokcheck use browser storage for setup drafts, language choices, secure staff sign-in and protection against abusive traffic. Our website and app do not include advertising pixels, audience analytics, social-media embeds or third-party font downloads. No optional tracking is offered, so there is no ‘accept all’ banner.
Language and setup drafts
The public homepage carries language in the URL as lang=en, lang=de or lang=fr; it does not store a homepage language preference in browser storage. On dokcheck.krascorp.com, kp-language in local storage remembers the staff workspace language (English, German or French) until removed. The public subscription setup stores krascorp-setup-draft in session storage for the current tab: firm name, owner name/email, chosen plan/language and a random checkout-attempt reference. It contains no password or card details. Your browser may restore session storage when restoring tabs. Client onboarding drafts inside the staff app are saved on the server, separately from this browser draft.
Staff sign-in and mailbox authorisation
Dokcheck uses the __Host-kp_staff cookie after successful staff sign-in. It is restricted to the app host, marked Secure, HttpOnly and SameSite=Strict, and identifies a session lasting up to 12 hours. Signing out ends the server session. When connecting a firm mailbox, __Host-kp_mailoauth is a Secure, HttpOnly, SameSite=Lax cookie that ties the provider authorisation callback to the same browser. It lasts up to ten minutes and is cleared after the callback. These cookies provide access and connection security and are not used for advertising.
Security cookies
The public website is delivered through hosting security systems, including Cloudflare. Depending on the hosting configuration and challenge, __cf_bm or cf_clearance may be used to distinguish ordinary visits from automated traffic or record a passed check. Their expiry depends on the provider and configuration. These cookies and associated browser/request checks are managed by the hosting layer, not an advertising service.
Your choices
You can inspect, block or remove site cookies and storage in your browser’s privacy settings. Removing kp-language resets the workspace language preference. Removing krascorp-setup-draft removes this tab’s unfinished public subscription setup. Removing the staff session cookie signs you out in that browser; use the app’s Sign out button to end the server session as well. Blocking authentication or security storage can prevent access. Clearing browser storage does not delete enquiry emails, company archives or saved client onboarding drafts held on the server.
Questions
Contact martin.brun@krascorp.com about cookies or your personal data. Krascorp is operated by Fibuag AG, Oberneuhofstrasse 5, 6340 Baar, Switzerland.