Cookie Policy — Kpex | CAF Corporation

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and store certain preferences or session information. We also use similar technologies such as local storage tokens for session management.

This Cookie Policy applies to the Kpex platform (kpex.caf-corporation.com) and the CAF Corporation website (caf-corporation.com). It should be read in conjunction with our Privacy Policy.

Cookies We Use

Cookie Name	Category	Purpose	Duration
kpex2g_session	Strictly Necessary	Maintains your session on the website and the Kpex platform, including sign-in and the language you selected. Required for the site to function.	Session (expires on browser close or after 2 hours of inactivity)
XSRF-TOKEN	Strictly Necessary	Cross-Site Request Forgery (CSRF) protection token. Prevents unauthorised form submissions.	Session
kpex_consent	Strictly Necessary	Records the cookie choices you made in the consent banner, so we do not ask again and only set what you allowed.	12 months
__stripe_mid, __stripe_sid	Strictly Necessary (payment)	Set by Stripe on the registration and payment page only, for fraud prevention when you subscribe.	1 year / 30 minutes
kpex_utm	Campaign attribution (consent)	Remembers which campaign or link brought you to Kpex, so we can measure our marketing. Only set if you accept campaign-attribution cookies.	30 days
_ga, _ga_*	Analytics (consent)	Google Analytics — aggregate statistics on how the website is used. Kpex does not currently use analytics cookies; if introduced, they will only be set with your consent.	2 years

Note: This list will be updated as new features are added to the platform. Last full audit: October 2026.

Strictly Necessary Cookies

These cookies are essential for the platform to function. They enable core features such as authentication, security, and session continuity. Under Article 22(2) of Spanish LSSI-CE and the EU ePrivacy Directive, strictly necessary cookies do not require your prior consent. Disabling them through your browser may prevent you from logging in or using key features of Kpex.

Preference and Campaign-Attribution Cookies

Your language choice is kept in your session, which is strictly necessary and needs no consent. Cookies that are not strictly necessary — campaign attribution and, if ever introduced, analytics — are set only after you accept them in the consent banner shown on your first visit. Rejecting them is as easy as accepting them, and the website works fully either way.

Analytics Cookies

Kpex does not currently use analytics cookies. If we introduce Google Analytics to understand how users navigate the Kpex platform, it will only run if you consent. The data collected is aggregated and does not identify you personally. Analytics cookies are not set until you have given your consent, and you may withdraw consent at any time.

To opt out of Google Analytics tracking globally, you may use the Google Analytics Opt-out Browser Add-on.

Managing Your Cookie Preferences

You can change or withdraw your consent at any time from the Cookie settings link in the website footer; withdrawing consent removes the campaign-attribution cookie. We ask again after 12 months. You can also manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set alerts when cookies are set. Key instructions for common browsers:

Deleting or disabling strictly necessary cookies may prevent you from accessing the Kpex platform.

Changes to This Policy

We may update this Cookie Policy from time to time. Material changes will be communicated via the platform or by email. The "last updated" date at the top of this page indicates the most recent revision.

Contact

For questions about our use of cookies: privacy@caf-corporation.com