Cookie policy
katman.pro sets a few first-party cookies: three for signing in, two for our own visit statistics (which one click switches off), and one that remembers that choice. Cloudflare, which hosts the site, sets none. There are no advertising, social-media or third-party analytics cookies, and nothing is set for bots.
The short version
- Sign-in: a session cookie keeps you signed in to your Katman account, and two small cookies remember that you’re signed in and which language the sign-in page should use.
- Statistics: two first-party cookies let us count visits and see which pages and buttons help people. We rely on the statistical-purposes exception in the Privacy and Electronic Communications Regulations (PECR), as amended by the Data (Use and Access) Act 2025. It requires clear information (this page) and a simple way to object (the switch below), and one click switches statistics off.
- Your choice: one click switches statistics off, and a cookie remembers it for a year.
- Security: Cloudflare hosts and protects katman.pro and sets no cookies on it (checked on 30 September 2026).
- Never: advertising, social-media or third-party analytics cookies. Nothing is set for crawlers and bots, and no third party sets or reads our cookies.
Switch statistics off or on
Without JavaScript, use the links: turn off statistics · turn them back on. The same switch sits in the footer of every page.
Turning statistics off sets katman_optout for a year and deletes katman_aid and katman_ft. While it’s set, no first-touch cookie is created, the page sends nothing, and our server drops anything that still arrives. Your sign-in keeps working. We don’t read Do Not Track or Global Privacy Control signals; this switch is how you object.
Cookies we set
| Cookie | What it does | Type | How long |
|---|---|---|---|
katman_session |
Keeps you signed in. It holds a random token; our database stores only its hash. HttpOnly and Secure, replaced at every sign-in | Strictly necessary | 30 days, or until you sign out |
katman_in |
Says “1” while you’re signed in, so the public pages can show “Dashboard” instead of “Sign in”. Holds no personal data | Strictly necessary | 30 days; deleted when you sign out |
katman_lang |
Remembers the language (English or Turkish) of the sign-in page before we know who you are | Functional | 1 year |
__Host-katman_google |
Only while you sign in with Google: a random check value that ties Google’s answer to this browser, and the page to return to. HttpOnly and Secure | Strictly necessary | 10 minutes; deleted when you come back from Google |
katman_ft |
Your first touch, set by our server on the first page you open: the channel you came from (for example ai, search, social, direct), the referring site’s host name such as chatgpt.com (never the full address), your landing page, UTM tags (source, medium, campaign, content) and the time. Signed so it can’t be altered, and readable by our page script, which uses it to show the “came from an AI assistant?” note. Copied onto your account if you sign up |
Statistics | 30 days |
katman_aid |
A random id set by our page script, so we can count returning visitors without knowing who they are. Never joined to your account | Statistics | 1 year |
katman_optout |
1 when you’ve switched statistics off |
Strictly necessary (stores your choice) | 1 year |
katman_ft and katman_aid aren’t set for bots or after you opt out. What the statistics contain, and what they never contain, is in the privacy policy.
Session storage
Our page script also keeps two values in your browser’s session storage. They stay in the tab you’re using and disappear when you close it. We don’t use local storage.
| Name | What it holds | How long |
|---|---|---|
katman_v |
The current visit: a random visit id, the referring site’s origin, your landing page, UTM tags and the number of pages seen, so the pages of one visit can be grouped | Until you close the tab, or after 30 idle minutes |
katman_strip |
That you closed the “came from an AI assistant?” note, so it stays closed | Until you close the tab |
Cloudflare
Cloudflare hosts and protects katman.pro. When we checked the live site on 30 September 2026, Cloudflare set no cookies: the only cookies on katman.pro are our own, listed above. If Cloudflare’s security features ever set one, such as __cf_bm, which helps tell people from bots, it is strictly necessary and isn’t used for tracking or advertising. Cloudflare describes its cookies on its cookie page.
Payments
When you subscribe, the checkout and the customer portal are pages on Stripe’s own domain. Stripe sets its own cookies there, for security and fraud prevention, under Stripe’s cookie policy.
Other websites
Links to other sites, such as Skool for the community, GitHub or OpenRouter, take you to services that set their own cookies under their own policies.
The Katman MCP
The MCP server runs on your computer inside your AI coding tool. It isn’t a website and sets no cookies. What it reads and sends is listed on Permissions.
How to control cookies
Besides the switch above, you can block or delete cookies in your browser’s settings. If you block katman_session, you can’t stay signed in.
More about the personal data we process is in the privacy policy. Questions: hello@katman.pro, or see the contact page.
Frequently asked questions
Does katman.pro use tracking or advertising cookies?
No. There are no advertising, social-media or third-party analytics cookies. Our statistics cookies are first-party, never joined to your account, and one click switches them off.
Why is there no cookie banner?
The sign-in cookies are strictly necessary, and the statistics cookies rely on the UK exception for first-party statistics, which asks for clear information and a simple way to object rather than a banner. Both are on this page.
How do I switch off the statistics?
Use the switch on this page or in the footer of every page, or the plain opt-out link if JavaScript is off. It sets katman_optout, deletes katman_aid and katman_ft, and the page stops sending anything.
What is the katman_ft cookie?
It remembers how you first arrived: the channel (for example an AI assistant or a search engine), the referring site's host name, your landing page and any UTM tags, for 30 days. It is signed so it can't be altered. If you create an account, that first touch is copied onto it.
Does the Katman MCP use cookies?
No. It’s a program on your computer, not a website. It contacts katman.pro only to check your Katman key and when you call katman_sync.