Kismat Cookie & Tracker Policy
Effective: 28 June 2026 (version 3)
1. The short version
The Kismat mobile app does not use browser cookies. Instead it uses your device’s secure storage to remember your login and a few preferences, and it loads ad mediation SDKs that may use mobile advertising identifiers (IDFA on iOS, AAID on Android) only with your consent.
The Kismat website (kismat.at) uses a small number of cookies described below.
2. What we store on your device (mobile app)
- Authentication token (essential) - lets you stay signed in. Stored in iOS Keychain / Android Keystore.
- Theme + language preference (essential) - remembers light/dark mode and your chosen language.
- Push notification token (essential, with your consent) - identifies your device to Apple Push Notification service / Firebase Cloud Messaging.
- Mobile advertising identifier (optional) - only collected if you grant App Tracking Transparency consent on iOS or accept ads on Android. Used to limit ad frequency and for non-personalized ads where required.
3. Cookies on kismat.at (web)
- kismat_session - session continuity (lifetime: session).
- kismat_locale - remembers your chosen language (lifetime: 1 year).
- kismat_consent - records your cookie-consent choices (lifetime: 6 months).
We do not use third-party tracking cookies on kismat.at without your prior consent.
4. Managing your choices
- iOS: Settings → Privacy & Security → Tracking → Kismat.
- Android: Settings → Privacy → Ads, plus the in-app consent dialog.
- Web: manage cookies through your browser, or revisit the consent banner on kismat.at.
5. Contact
Questions about trackers? Email support@kismat.at.