Skip to content
KivoHR
Start free trial

Home / Legal

Cookies.

Every cookie our website and app set, what each one is for and how long it lasts, and your choice about the ones that are optional.

Last updated 8 November 2026

1. Your choices

Essential cookies are always on: the website and app cannot work without them. Everything else stays off until you agree, and you can change your mind here at any time.

Essential

Needed for the website and app to work: keeping you signed in, protecting forms and your account, and remembering choices you make, including this one. They cannot be switched off.

Always on

Website statistics

Counts visits to our website with Plausible Analytics, so we can see which pages help people. Plausible sets no cookies, stores no IP address and does not identify you or follow you to other sites. It is never used inside the app.

2. Every cookie we set

All of these are essential. Several are set only when you use the feature they belong to.

__Host-kivo-hr-session Keeps you signed in while you use the site or app, and remembers your progress through a form. Kept for: Until you close your browser, or 120 minutes without activity
XSRF-TOKEN Security: proves a form was sent from our own pages, so another site cannot send it on your behalf. Kept for: The same as the session
remember_web_… Keeps you signed in on that device: always in the KivoHR app, and in a browser only if you tick “Keep me signed in”. Kept for: Until you sign out, up to 30 days
__Host-device Security: recognises a browser you have signed in from before, so we can warn you when your account is used from a new one. Kept for: 2 years
console_trusted Only for KivoHR's own staff, on our admin console: remembers a computer they chose to trust, so they are not asked for a two-factor code at every sign-in there. Kept for: 30 days
signup_draft Only if you start signing up: remembers the signup you started in this browser, so you can carry on where you left off. Kept for: 90 days
station Only on a shared clocking-in device an employer has paired: identifies that device to the app. Kept for: Until the employer unpairs it, up to 5 years
theme Only if you choose light or dark mode: remembers your choice. Kept for: 1 year
kivohr_app_bar Only if you close the “Get the KivoHR app” bar on a phone: keeps it closed on that phone. Kept for: 30 days
cookie_consent Remembers the cookie choices you made here, so we do not ask again on every page. Kept for: 180 days
__cf_bm Security, set by Cloudflare, which protects this site: tells people apart from automated traffic, so the site stays up. It is not used to identify you. Kept for: 30 minutes

We set no advertising or tracking cookies, and no other company sets cookies through our website. Paying by card or Pay by bank happens on Stripe’s own pages, under Stripe’s cookie policy.

How we use personal data more generally is in our privacy policy.

3. Controlling cookies in your browser

Your browser can also block or delete cookies. If you block essential ones, you will not be able to sign in or send forms. The ICO explains how.