Cookies and local storage

Summary

Kurate uses an authentication session cookie where sign-in is enabled, plus local browser storage for interface state and preferences. For connections identified as United States-based, optional Google Analytics is on without a consent prompt unless you turn it off. For other or unknown locations, it stays off until you allow it. Country is estimated from your connection IP address using a local database; no geolocation service receives it. A saved refusal or Global Privacy Control signal keeps analytics off. We do not use advertising cookies.

Essential session cookie

Authenticated deployments use a cookie named kurate_ui_session to keep approved users signed in. It is set after successful sign-in and removed or expired when you sign out. The cookie is configured as HttpOnly, SameSite=Lax, and, on the hosted HTTPS deployment, Secure.

Local browser storage

The interface may store small pieces of state in your browser, such as the last query page state, query form settings, active query job identifier, and the last opened report link. This is used to keep the interface usable during navigation, refreshes, and long-running query jobs.

Optional analytics cookies

The optional interest prompt remembers your response or dismissal in this browser. Choosing “Not now” postpones it for three days; minimising keeps it compact for the current visit. If you register interest, Kurate saves that voluntary response and any role or signup-link interaction on its own server. An opaque browser identifier supports retrying unsent responses and remembering your choice. If you sign in on that browser, your response can be linked to your account so you are not asked again on other devices. No query text, browsing history, or third-party analytics is collected by this prompt.

When analytics is on, Google Analytics 4 can set first-party _ga and _ga_* cookies to distinguish visits on public information pages. Enabled measurement may also record scrolling, outbound-link clicks, file downloads, and video engagement on those pages. The tag is not loaded on account, query, database, or report pages. We remember an explicit choice in this browser for up to 180 days. Turning analytics off stops future tracking and clears accessible Google Analytics cookies; it does not erase information already collected by Google. You can also clear browser storage to reset your choice.

Your choices

Checking your analytics preference…

You can clear Kurate cookies and local storage in your browser settings. Clearing them may sign you out, reset saved query settings and interest-prompt preferences, and remove this browser's pointer to an in-progress query job. A response already linked to your account is remembered when you sign in again.

Related notice

See the privacy notice for a broader summary of account, query, and operational data.