Cookie policy
Version COOKIE-2026-1, effective 13 November 2026
Contents
This policy explains the cookies and similar technologies on our websites, www.kualo.com and www.kualo.co.uk, and in MyKualo, our customer area. It sits alongside our privacy policy, which explains how we use personal information more generally. The control panel and webmail that come with our hosting and email services, including our Zimbra webmail, set only the cookies needed to sign you in and keep your session secure; they are not covered by this policy.
What cookies are
A cookie is a small file that a website saves on your device. Some are needed for a site to work. Others remember your choices, measure how a site is used, or come from services we embed, such as a video or a chat window. Similar technologies, such as local storage, do the same job and are covered by this policy too.
How we ask for your choice
When you first visit our websites, a banner asks whether you accept cookies that aren't strictly necessary. Cookies that are strictly necessary are always on, because the site would not work without them. For everything else, we set nothing until you agree. Where a page has something that needs your agreement first, such as a form, blog comments or a video from another company, it shows a box saying so, with a button that switches it on in one click.
You can change or withdraw your choice at any time using the cookie settings link in the footer of our websites. You can also block or delete cookies in your browser settings, although some parts of our sites may stop working.
MyKualo uses the same cookie banner, and analytics and advertising cookies there wait until you agree.
The cookies we use
Some of these are kept in your browser's local storage rather than as cookies; they are listed here too.
Strictly necessary cookies
These are always on.
| Cookie | Set by | What it does | How long |
|---|---|---|---|
| cookieyes-consent | CookieYes | Remembers your cookie choices | 1 year |
| kualo_session | Kualo | Keeps your session as you move between pages on our websites, including security tokens that protect against forged requests | 2 hours |
| XSRF-TOKEN | Kualo | A security token that protects our forms from forged requests | 2 hours |
| MyKualo's session cookie | Kualo (MyKualo) | Keeps you signed in, remembers your basket and protects your session in MyKualo. It is also set when you browse our websites, because each page asks MyKualo for your basket and currency | Until you close your browser |
| PHPSESSID | Kualo (MyKualo) | Keeps your session on the MyKualo sign-in pages | Until you close your browser |
| __cf_bm, _cfuvid and cookies beginning cf_chl | Cloudflare | Cloudflare protects our websites from attacks, and uses these to tell genuine visitors from automated traffic. Its Turnstile check, used on some of our forms and sign-in pages, may also keep data in your browser while the check runs | __cf_bm 1 hour; _cfuvid until you close your browser |
| __stripe_mid and __stripe_sid | Stripe | Set on the page where our online identity check runs, to help Stripe detect fraud | __stripe_mid 1 year; __stripe_sid 30 minutes |
| _GRECAPTCHA, rc::a and rc::c | Google reCAPTCHA | Helps protect our forms and sign-in pages from automated abuse | _GRECAPTCHA 6 months; rc::a until deleted; rc::c until you close your browser |
| user_currency_pref | Kualo | Remembers the currency you chose on our websites | 1 year |
| kualocountry | Kualo (MyKualo) | Remembers whether you use our UK or US customer area | 3 months |
| pagelimit | Kualo (MyKualo) | Remembers how many items you chose to show on each page of a list | 3 months |
| mk_theme and mk_rail | Kualo (MyKualo) | Remember whether you chose the light or dark look, and whether you folded the side menu | 1 year |
| kq_tb | Kualo (MyKualo) | Remembers a browser you have already confirmed when you sign in, so you are not asked for a code every time | 30 days |
| kualo_nomkt | Kualo (MyKualo) | Records that you asked us not to send you marketing, so we keep to it | 5 years |
Live chat
Our live chat is run by Crisp. It loads when you open the chat, or straight away if you have chatted with us before so you can see any reply, and sets a cookie beginning crisp-client. The cookie keeps a conversation going as you move between pages and when you come back, and links the chat to your customer record when you are signed in. It lasts 6 months. Because it is set only once you open a chat, a service you have asked for, and is used only to keep that conversation going, we treat it as strictly necessary.
Functional cookies
These are only set if you agree.
| Cookie | Set by | What it does | How long |
|---|---|---|---|
| WantedWebApp | Kualo | Remembers a hosting product page you visited, so we can show that product more prominently in the menu next time | 1 year |
| AWSALBTG, AWSALBTGCORS, tf_respondent_cc, attribution_user_id, debug, and cookies beginning rl_ | Typeform | Set when a Typeform form is embedded on one of our pages. They keep your form session connected, recognise you if you come back to a form, measure how the form is used and help Typeform fix faults | AWSALBTG and AWSALBTGCORS 7 days; tf_respondent_cc 6 months; attribution_user_id 1 year; debug and the rl_ cookies until deleted |
| kualo_client_region | Kualo (MyKualo) | Remembers whether you signed in to our UK or US customer area, so links from our websites take you to the right one | 1 year |
| Local storage in your browser | Kualo | Our websites keep a few details in your browser's local storage rather than in a cookie: whether you rated a help article, and your recent domain searches | Until you clear your browser's storage |
| Cookies from Canva, Screencast, Vimeo and X (Twitter) | Those companies | Some knowledgebase articles and blog posts show a video or a post from one of these companies. It loads, and the company sets its own cookies, only once you allow functional cookies or press Show it in the box where it would appear. Each company's cookie policy lists its cookies | Set by each company |
| Disqus cookies | Disqus | Blog comments are run by Disqus, which sets its own cookies when the comments load. They load only once you allow functional cookies or press Show comments. Disqus's own cookie policy lists them | Set by Disqus |
Analytics cookies
These are only set if you agree.
| Cookie | Set by | What it does | How long |
|---|---|---|---|
| _ga and _ga_ followed by an identifier | Google Analytics | Counts visits and shows us which pages are used, so we can improve our websites and MyKualo | 2 years. Google keeps the visit data linked to it for up to 14 months |
Advertising cookies
These are only set if you agree, and only in MyKualo. They tell us when someone who saw one of our adverts goes on to order, so we can see which adverts work.
| Cookie | Set by | What it does | How long |
|---|---|---|---|
| _gcl_au | Google Ads | Links an order to the Google advert that led to it | 3 months |
| _fbp | Meta (Facebook) | Links an order to the Facebook or Instagram advert that led to it | 3 months |
| _twpid and _twsid | X (Twitter) | Link an order to the X advert that led to it | About 13 months |
| WHMCSAffiliateID | Kualo (MyKualo) | Set when you arrive through a link from one of our affiliates, so that affiliate is credited if you order | About 1 year |
Videos
Our videos play through YouTube's privacy-enhanced mode, which sets no cookies until you press play. When you play a video, YouTube may set cookies and use your browser's storage to run the player, protect against fraud and count views. These include YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, __Secure-YNID and __Secure-ROLLOUT_TOKEN. YSC lasts until you close your browser; the others last up to 6 months.
Other companies that see your visit
Some of our pages load fonts, code libraries and our service status from other companies, including Google Fonts, Bootstrap CDN, Cloudflare, our status page provider and Ecologi (which shows our tree-planting badge). Loading them sends your IP address and browser details to those companies, as happens whenever a page is displayed, even where they set no cookie.
Changing your mind
Use the cookie settings link in the footer to change your choices, or delete cookies from your browser. If you have questions, email [email protected].
Kualo Limited is registered in England and Wales, company number 04004280. Registered office: 20-22 Wenlock Road, London N1 7GU.