Cookies and browser storage
Updated 25 September 2026
What we use
The public website and invoicing service use browser storage for language choices, secure sign-in and protection against abusive traffic. Our website and app do not include advertising pixels, audience analytics, social-media embeds or third-party font downloads. No optional tracking is offered, so there is no ‘accept all’ banner.
Your language choice
On krascorp.com and www.krascorp.com, krascorp-language in session storage remembers only en, de or es for the current tab session. A previous persistent language preference is removed when the homepage loads. On invoicing.krascorp.com and its staging service, the krascorp-language cookie remembers the language for the browser session. Your browser may restore a session when it restores tabs. Language links also carry lang=en, lang=de or lang=es; this is not a visitor identifier.
Signing in
The invoicing app uses the __Secure-krascorp.session_token cookie after a successful sign-in. It is restricted to the app host, is marked Secure, HttpOnly and SameSite=Strict, and identifies an eight-hour session. Signing out ends that session. It is needed to open your private workspace and is not used for advertising.
Security cookies
The public website is delivered through Cloudflare security systems. The __cf_bm cookie helps distinguish ordinary visits from automated traffic; Cloudflare specifies 30 minutes of inactivity. Depending on a security check, cf_clearance can record that the check passed. Its expiry depends on the security configuration. These cookies and associated browser/request checks are managed by the hosting layer, not an advertising service.
Your choices
You can inspect, block or remove site cookies and storage in your browser’s privacy settings. Removing a language preference means you may need to choose a language again. Removing the login cookie signs you out in that browser; use the app’s Sign out button to end the server session as well. Blocking authentication or security storage can prevent access. Clearing browser storage does not delete enquiry emails or business records held on the server.
Questions
Contact martin.brun@krascorp.com about cookies or your personal data. Krascorp is operated by Fibuag AG, Oberneuhofstrasse 5, 6340 Baar, Switzerland.