KOVA / Legal

Cookie Policy

How KOVA uses cookies and storage on your device.

Last updated:

1. Cookies and similar storage

Cookies are small records stored by your browser. KOVA also uses local storage, browser databases and cached files. In the app, similar storage exists inside the app's web view. This policy covers these technologies as well as cookies.

2. KOVA's local storage

The following records support the map and features you use. They have no automatic expiry and remain until replaced or cleared. Their contents stay in local storage, although using a related feature can send data as described below and in our Privacy Policy.

Last known location
kova_last_location_v1 remembers coordinates and a timestamp to reopen the map near your last location. Requests for that map area and nearby spots go to the map and database services.
Saved spots
kova_saved_spots_v1 keeps the spots you save on this device.
Route and travel preference
kova_route_spots_v1 and kova_route_mode_v1 remember your planned stops and transport choice. Opening navigation sends the chosen route to the navigation provider.
Previous ratings
kova_spot_ratings_v1 remembers your previous score so you can update it. Rating a spot also updates its aggregate score on the server.
Introduction preference
kova_tutorial_seen_v1 remembers whether you have already seen the introduction.

3. Security, sign-in and cached resources

Firebase App Check and reCAPTCHA Enterprise help protect map data from abuse. They may use browser storage, security cookies and device signals. Google documents the _GRECAPTCHA cookie for risk analysis when reCAPTCHA runs. App Check tokens expire and are refreshed; other security storage is controlled by the provider.

If you sign in through KOVA's account page, Firebase Authentication can keep a persistent sign-in session in browser storage. Browser or app caches can also retain maps, scripts and images to avoid repeated downloads. Their lifetime depends on response headers, provider settings and your browser or device.

See Firebase's privacy information, Google's reCAPTCHA information, Google Cloud's Data Processing Addendum and MapTiler's Privacy Policy for provider details.

4. Analytics and advertising

The current public KOVA pages do not initialise Google Analytics or advertising trackers. Security checks and technical service logs are separate from audience analytics. External websites you choose to open may use their own cookies.

Where applicable law requires consent for non-essential cookies or similar storage, it must be obtained before they are used. This policy is information, not a consent request, and continued browsing is not treated as consent.

5. Your controls

You can block cookies or clear cookies, local storage and site data in your browser settings. On Android, clearing KOVA's app storage removes local app data. Device location permission can be changed separately in system settings.

Clearing local data can remove saved spots and routes, reset the introduction and forget previous ratings. It does not remove published ratings, submitted photos or server-side account data. Blocking security or authentication storage may prevent protected features or sign-in from working. Storage needed by a feature may be created again when you use that feature.

6. Questions and changes

For storage or privacy questions, contact hello@kova.spot. This policy will be updated when KOVA's use of these technologies changes.