Back to Homepage

Cookie Policy

Information about cookies and comparable storage on Kybernos

Last updated: August 27, 2026

What are Cookies?

Cookies are small text files stored on your device when you visit a website. Comparable technologies include entries in the browser’s localStorage.

Kybernos only sets the technically necessary cookies listed below. A localStorage entry for light/dark mode is created only when you trigger the appearance toggle yourself. There is no advertising tracking and therefore no consent banner. Controller: Linus Freund, trading under the business name “Seforth”.

Which Cookies Do We Use?

Necessary Cookies

Always active

These cookies are required for login and security. Whether they may be stored on the device is governed by Section 25 para. 2 no. 2 TDDDG (strictly necessary for the service you request). Processing of session data is governed by Art. 6 para. 1 lit. b GDPR; processing of the CSRF cookie by Art. 6 para. 1 lit. f GDPR. Controller: Linus Freund, trading under the business name “Seforth” (not Vercel, no third-party login).

__Secure-next-auth.session-token

Purpose: Authentication (JWT session)

Type: HTTP-Only, Secure, SameSite=Strict

Storage duration: maximum 12 hours

Legal basis: Device access: Section 25 para. 2 no. 2 TDDDG. Processing: Art. 6 para. 1 lit. b GDPR (use of the platform).

Name (production): __Secure-next-auth.session-token

Name (development): next-auth.session-token

As configured in auth.ts.

CSRF cookie (Auth.js)

Purpose: Protection against cross-site request forgery

Legal basis: Device access: Section 25 para. 2 no. 2 TDDDG. Processing: Art. 6 para. 1 lit. f GDPR (IT security).

Name (production): __Host-authjs.csrf-token or __Secure-authjs.csrf-token (Auth.js default, not renamed in auth.ts)

Name (development): authjs.csrf-token

Storage duration: Session

LocalStorage (not HTTP cookies)

theme

Purpose: Set only when you choose light or dark mode via the toggle. On the first visit the appearance follows the system setting without a stored value.

Legal basis: Device access: Section 25 para. 2 no. 2 TDDDG (strictly necessary for the appearance you expressly request). Personal data is typically not created; if it is, Art. 6 para. 1 lit. f GDPR.

Browser controls

You can delete or block cookies in your browser. Login is not possible without the session cookie.

Further Information

Questions: hello@kybernos.de