Cookies Policy

Primer Cookies Policy

Last updated: 28 May 2026

1. Scope

This Cookies Policy explains how Kernel AI Ltd, trading as Primer ("Primer", "we", "us", or "our"), uses cookies, local storage, pixels, SDKs, tags, and similar technologies on Primer websites, applications, checkout flows, emails, and related services (together, the "Services").

This policy should be read with our Privacy Policy, Consumer Terms, Business Terms, and any cookie consent choices shown in the Services.

2. What Cookies and Similar Technologies Are

Cookies are small text files placed on your device by a website or application. Similar technologies include local storage, session storage, pixels, tags, SDKs, device identifiers, and scripts that store information on your device or access information already stored on your device.

These technologies can be used to keep you signed in, remember choices, secure the Services, measure usage, diagnose errors, personalise content, or support advertising and attribution.

3. Categories We Use

3.1 Strictly Necessary Technologies

These are required to provide the Services and cannot be switched off through our cookie controls. They may be used for:

• authentication and session management;
• security, fraud prevention, abuse prevention, and load balancing;
• checkout, billing, and payment processing;
• storing cookie-consent choices;
• remembering privacy, language, accessibility, or account preferences;
• routing requests and maintaining service availability; and
• complying with legal and security obligations.

Examples may include Supabase authentication cookies, session cookies, security cookies, Stripe checkout or billing technologies, and consent-preference storage.

If you block strictly necessary technologies in your browser, parts of the Services may not work.

3.2 Analytics and Product Measurement

Analytics technologies help us understand how people use the Services, which features are useful, where users encounter errors, and how to improve performance and reliability.

The logged-in application currently includes PostHog product analytics. Our implementation is designed to use explicit product events rather than automatic page capture, to disable session recording, and to avoid advertising-network tracking. We may also use error monitoring and operational logs to diagnose issues.

Where applicable law requires consent for analytics cookies or similar technologies, analytics will be disabled until you consent. You can withdraw consent later through the controls we provide.

3.3 Functional and Preference Technologies

Functional technologies remember choices that improve the experience but may not be strictly necessary. They may store preferences such as display settings, dismissed notices, selected surfaces, local UI state, or onboarding state.

Some preference storage may be treated as strictly necessary where it is required to provide a requested feature or remember a privacy choice.

3.4 Advertising, Remarketing, and Attribution

We do not currently intend to use advertising or remarketing cookies in the logged-in application. If we use advertising, remarketing, conversion tracking, or cross-context behavioural advertising on the marketing website or elsewhere, those technologies may be used to measure campaigns, attribute sign-ups, build audiences, or show ads on third-party platforms.

Where required by law, we will ask for consent before setting advertising or remarketing technologies. Where US state privacy laws apply and these technologies constitute targeted advertising, sharing, or sale, we will provide any required opt-out mechanism.

Potential providers, if enabled, may include Google Tag Manager, Google Analytics, Google Ads, LinkedIn, Meta, or similar advertising and analytics platforms. The final published policy must identify the actual providers used.

4. AI, App Telemetry, and Local Storage

The Services may store or access local information to keep the app functioning, preserve session state, remember UI preferences, recover from errors, support authentication, manage uploads, and operate product analytics where consented to or otherwise lawful.

AI prompts, uploaded files, outputs, notes, and workspaces are not stored in cookies. They may be stored in Primer systems as described in the Privacy Policy and applicable terms.

5. Consent

In the UK, EEA, and other jurisdictions with similar rules, we generally need consent before using non-essential cookies or similar technologies, including many analytics and advertising technologies. Strictly necessary technologies do not require consent.

Our consent mechanism should allow you to:

• accept optional cookies;
• reject optional cookies as easily as accepting them;
• choose categories where appropriate, such as analytics and marketing;
• change or withdraw consent later;
• access the Services without consenting to optional cookies unless optional cookies are genuinely necessary for a requested feature; and
• receive clear information about providers, purposes, and expiry periods.

We will store your cookie choices so we can respect them. Consent records may include your choices, timestamp, region, consent version, and technical metadata needed to demonstrate compliance.

6. Managing Preferences

You can manage cookies and similar technologies in several ways:

• use the cookie controls shown in the Services;
• use browser settings to block or delete cookies;
• use device privacy settings where available;
• use provider-level opt-outs where available; and
• contact hello@primerapp.com if you cannot access the controls.

Blocking cookies or deleting local storage may sign you out, reset preferences, disable features, or prevent parts of the Services from working.

7. Third-Party Technologies

Some cookies and similar technologies are provided by third parties. These third parties may process personal data under their own privacy notices as independent controllers, or as processors/service providers for Primer, depending on the context.

Third-party technologies may include authentication, hosting, payment, analytics, error monitoring, customer support, email, advertising, and embedded-content providers. The Privacy Policy describes the main categories of recipients.

• provider name;
• technology or cookie name;
• purpose;
• category;
• expiry period;
• whether the provider is a controller or processor;
• whether the technology is first-party or third-party;
• whether consent is required; and
• links to provider privacy information.

8. Emails

Marketing or transactional emails may contain pixels or similar technologies that help us understand whether an email was delivered, opened, or clicked. Where required by law, we will use these technologies only with consent or another lawful basis, and you can unsubscribe from marketing emails at any time.

9. Changes

We may update this Cookies Policy as our Services, providers, technologies, and legal obligations change. If we make material changes, we will take reasonable steps to notify users or refresh consent where required by law.

10. Contact

For questions about cookies or privacy, contact hello@primerapp.com.