01What cookies are
Cookies are small text files that websites place on your device to remember information between visits, such as whether you are signed in, which region of a site you prefer, or which cookies you have accepted.
Similar technologies (local storage, session storage, and IndexedDB) behave like cookies for privacy purposes. Where this policy says "cookies" it covers those technologies too.
02How we use cookies
The knowa.co marketing site uses cookies for one purpose only: to remember your region preference (UK or US) after you use the region toggle in the navigation. That preference lets us show you the right regional homepage next time you visit, without re-detecting your country from your IP address.
We do not use cookies on knowa.co for:
- analytics, performance measurement, or session replay;
- advertising, retargeting, or audience building;
- profiling or behavioural tracking;
- social-media embeds or third-party widgets.
All cookies we set on the marketing site are classed as strictly necessary under the UK PECR guidance and UK GDPR. They do not require prior consent.
We do measure page views, using a cookieless analytics service (Vercel Web Analytics, run by our hosting provider). It sets no cookies, writes nothing to local or session storage, and cannot recognise you across visits or across sites. It records the page viewed, the referring site, and any campaign tags (utm_ parameters) already present in the page address. Because it stores nothing on your device, it sits outside PECR's consent requirement — which is why it does not appear in the cookie table below and is not controlled by the cookie banner.
03The cookies we set
Complete list as of the date at the top of this page:
| Name | Purpose | Type | Lifetime |
knowa-region |
Remembers whether you chose UK or US when you used the region toggle in the navigation. If set, it overrides our automatic country detection. Attributes: Path=/, SameSite=Lax, Secure. |
Strictly necessary (first-party) |
12 months, or until you clear it |
knowa-region-dismiss |
Set only if you dismiss the small banner that suggests switching region (e.g. a US visitor on the UK home). Stops the banner reappearing on every page load. Attributes: Path=/, SameSite=Lax, Secure. |
Strictly necessary (first-party) |
30 days, or until you clear it |
admin_session |
Set only on the staff-only admin URL (/admin) after a Knowa employee signs in with a password. Keeps them signed in while they edit site configuration. Cannot be read by JavaScript (HttpOnly). A public visitor will never receive this cookie. Attributes: Path=/, HttpOnly, SameSite=Lax, Secure. |
Strictly necessary (first-party, staff-only) |
8 hours, or until sign-out |
knowa-cookie-consent |
Records your response to the cookie banner so we don't show it to you again. Two values: analytics (you accepted optional analytics cookies; none currently load, but the consent is honoured if any are added) or essential-only (you declined; only strictly-necessary cookies are set). Set only after you click a button on the banner. Attributes: Path=/, SameSite=Lax, Secure. |
Strictly necessary (first-party) |
12 months, or until you clear it |
These are the only cookies the marketing site sets today. We do not currently load any third-party scripts that would set cookies on our behalf.
04Third-party cookies
The marketing site sets no third-party cookies. We do not embed advertising networks, tag managers, social-media widgets, live-chat providers, or heatmap tools. The only measurement on the site is the cookieless page-view analytics described in section 2, which sets no cookies.
The marketing site also loads no third-party resources that would expose your IP address to a new external party. Fonts, stylesheets, scripts, and images are all served from knowa.co itself — including the analytics script, which our hosting provider (Vercel) serves from this domain. Vercel already serves every page on this site as our host, so the analytics introduces no party that did not already see the request. There are no embedded widgets, iframes, or tracking pixels from third-party domains.
05Cookies in the Knowa product
This policy covers the marketing site at knowa.co only. The Knowa product (the signed-in application typically served from app.knowa.co or a customer-specific subdomain) uses additional strictly-necessary cookies for authentication, session management, CSRF protection, and preferences. Those cookies are covered by the in-product cookie notice and are documented in the customer Data Processing Addendum (DPA).
If you are evaluating Knowa for your organisation and need the full in-product cookie list for your own cookies or privacy notice, email privacy@knowa.co and we will send it.
06Managing cookies in your browser
You can view, block, or delete cookies at any time through your browser settings. Each browser has its own path. The links below jump to the manufacturer's current instructions:
Blocking the knowa-region cookie will not stop the site working. It means your region will be re-detected from your IP address on every visit instead of remembered.
07Consent & future changes
On your first visit, we show a cookie banner asking how you'd like the site to behave. Two choices:
- Accept all. You consent to optional analytics cookies if and when we add them. None are loading today; if any are added in future, your preference is honoured automatically.
- Essential only. Only strictly-necessary cookies are set. No analytics cookies, no marketing, no third-party tracking — now or later, regardless of what we add. (The cookieless page-view counting described in section 2 stores nothing on your device either way, so it is unaffected by this choice and cannot identify you under either setting.)
Your choice is recorded in the knowa-cookie-consent cookie (12-month lifetime — see section 3). The banner does not reappear unless you clear cookies for this site or the cookie expires.
You can change your mind any time by clearing the knowa-cookie-consent cookie in your browser; the banner will then reappear on the next page load.
Under the UK Privacy and Electronic Communications Regulations (PECR), consent is not legally required for the cookies currently in use, since they are all strictly necessary. The banner exists so we have a clear, evidenced consent record before any optional cookies are introduced.
Material changes will be noted here and, where relevant, in the privacy policy.