KULT AI AGENCY · KULT GENERATE
Cookie Policy
Version of 5 October 2026
This policy explains which cookies and similar technologies kultai.agency uses (in the AI studio KULT GENERATE, on the agency site kultai.agency/production/, on the legal pages and, where stated, in the KULT app and the Telegram Mini App), what each one is for, how long it lasts and how you accept, refuse or withdraw consent. It completes section 6 of our Privacy Policy.
1 Who is responsible
The cookies and similar technologies described here are used by KULT AI AGENCY, the name under which Karen Grigoryan, a private individual resident in Spain, operates (full details: Privacy Policy, section 1). Questions: support@kultai.agency or on Telegram @kultaibot.
2 What cookies are
A cookie is a small text file that a website stores in your browser and receives back on later visits. Websites can also keep data in the browser in other ways: in localStorage (kept until it is deleted), in sessionStorage (deleted when the tab is closed) and in the cache of a service worker. The law treats these similar technologies like cookies, so this policy covers them too.
Everything listed in sections 4 and 5 is first-party: it is set by kultai.agency and only our own pages and server can read it. Third-party services are described in section 7.
3 Your choice
The first time you open a page of kultai.agency, a banner offers three buttons: Accept all, Reject all and Customize. Accepting and rejecting are equally easy: the same place, the same kind of button. Until you choose, nothing optional is stored. Closing or ignoring the banner, or scrolling the page, is not consent.
- Essential cookies and storage (section 4) are always on. Sign-in and the site do not work without them, so the law does not require consent for them.
- Partner link (section 5) is the only optional purpose today. Accept all switches it on and Reject all keeps it off; under Customize you switch it on or off yourself.
- Analytics and Marketing are shown in the settings switched off and cannot be switched on, because we use neither (section 6).
Your choice is stored in this browser as kult-consent (localStorage): the version of this policy, the date and your choice for each purpose. It contains no identifier and is never sent to us. It applies to all pages of kultai.agency in this browser (the studio, /production/ and the legal pages) for 12 months. After that, or when we add a new purpose or provider, we ask again. You can change your choice at any time (section 9).
4 Essential cookies and storage
These are strictly necessary for what you ask us to do: sign you in, keep your account safe and remember what you chose or typed. They do not follow you to other sites and are not used for analytics or advertising.
| Name | What it does | How long | Where |
|---|---|---|---|
kult_u | Keeps you signed in to KULT GENERATE. It holds a random session token, is sent only over HTTPS and cannot be read by scripts. | Until you close the browser; 90 days if you tick “Stay signed in” when you sign in. In the KULT app: 90 days. In the Telegram Mini App: for the session only, because Telegram signs you in again each time you open it; 90 days once you open it from a button of our bot’s keyboard, which comes without that sign-in. Deleted when you sign out. | Cookie |
kult_oa | While you sign in with Google, Apple or Microsoft, ties the provider’s answer to your browser, so that nobody else can complete your sign-in. Sent only to our sign-in addresses. | 30 minutes | Cookie |
kult_kd | Known device: recognises a browser in which the account has signed in before, which protects sign-in against password guessing. It also shows us when several accounts sign in from the same browser, which we check against self-referral fraud in the referral programme (Privacy Policy, 2.6). We keep only a hash of it with the account, for at most 20 browsers per account. Sent only to our sign-in addresses. | 365 days | Cookie |
kult_admin | Signs our own staff in to the administration pages (/admin). It is never set for other visitors. | 30 days | Cookie |
kult-consent | Your cookie choice (section 3). | 12 months | localStorage |
kult-lang-v2 | The language you chose, shared by all our pages. | Until you delete it | localStorage |
kult-gen-…, kult-os-…, kult-api-tab | Your interface settings: chosen formats and models, favourite settings and voices, the layout of the KULT OS desktop, notices you closed, the code language on the API page. | Until you delete them | localStorage |
kult-gen-auth | Which account this browser shows (account number and time only), so that your other open tabs follow a sign-in or sign-out. | Until you delete it (after you sign out it holds no account number) | localStorage |
Drafts: kult-gen-p-…, kult-gen-chat-draft, kult-gen-vo, kult-gen-ls, kult-gen-consent… and similar | Unsent prompts and settings of this tab and the ticks with which you confirmed your rights to an upload, so that a reload does not lose them. | Until you close the tab; deleted when you sign out | sessionStorage |
kult-infl-draft, kult-infl-guest, kult-mkt-brief, kult-mkt-guest | Unfinished drafts of the AI-influencer builder and the marketing brief (your texts and references to your uploads), including those started before you signed in, so that you can continue later. | Until you finish or delete them; deleted when you sign out | localStorage |
kult-gen-oauth, kult-gen-promo, kult-gen-seen, kult-gen-welcome | The return from a sign-in with Google, Apple or Microsoft; a promo code you opened through a link; whether the start screen and the welcome notice were shown in this tab. | Until you close the tab | sessionStorage |
kult-ref-pend | A partner code from a link, kept only until you answer the banner. | Until you answer or close the tab | sessionStorage |
kult-gen-rv:…, kult-gen-wf2 | Copies of the model catalogue and of the preset list for this tab, and drawings of audio waveforms, so that pages load faster. No personal data. | Catalogue: until you close the tab. Waveforms: until you delete them. | sessionStorage, localStorage |
kult-order-v4, kult-intro | On /production/: what you chose and typed in the order builder, so that you can continue later; whether the intro animation was shown in this tab. | Order builder: until you delete it. Your name, contact, business details and note are removed when you send the order or 30 days after your last change; after sending, only your preferred contact channel stays. Intro: until you close the tab. | localStorage, sessionStorage |
/sw.js, kult-shell-1 | A service worker, registered only when you install the studio as a web app or switch on notifications in the browser. It shows an offline page when there is no connection and delivers the notifications you switch on. Its cache holds only that page and two icons, never your pages, data or media. | Until you clear the site data | Service worker, Cache Storage |
kult_pwa, kult-push-ask | Whether you installed the web app or closed its install hint, and when we last asked about notifications, so that we do not ask again. | Until you delete them; deleted when you sign out | localStorage |
| Push subscription | Only if you switch notifications on in your profile and allow them in the browser: the address your browser’s push service gives us (Privacy Policy, section 13). | Until you switch notifications off or sign out | Browser |
__telegram__… | Only inside Telegram: Telegram’s own Mini App script keeps the launch and theme settings of this session. | Until the Mini App is closed | sessionStorage (Telegram’s script) |
5 Partner link (with consent)
| Name | What it does | How long | Where |
|---|---|---|---|
kult_ref | If you open KULT GENERATE through a partner’s referral link (…/?ref=CODE) and are not signed in, it remembers the partner’s code and the time of the click, so that the invitation counts if you create an account. Our server sets it only after you agree (“Accept all”, or “Partner link” switched on). It is sent only over HTTPS and cannot be read by scripts. It is also sent when you come back to us from the sign-in page of Apple or Microsoft, so that a sign-up there still counts. | 60 days. Deleted when your account is created (the invitation is then recorded with the account) or when you withdraw consent. | Cookie |
Without your consent no such cookie is set. The click is still counted for the partner’s statistics as a number per code: nothing is stored in your browser and no account is linked to it. You can also type the partner’s code yourself when you sign up. If you are already signed in, an invitation is never attributed to you and you are not asked.
In our Telegram bot, an invitation through a start link is remembered on our server for your Telegram account, not in a cookie (Privacy Policy, section 7).
6 Analytics and marketing
We use no analytics tools, no advertising cookies or pixels, no social-media plug-ins and no other third-party trackers, and we do not build profiles of visitors. In the settings, Analytics and Marketing are therefore shown switched off and cannot be switched on.
If we ever want to use such a tool, we will first name it here with its provider, purpose, cookies, lifetime and any transfer outside the EU. It will load only after you have agreed in the banner, and we will ask everyone again, because consent given earlier does not cover a new purpose or provider. In the KULT app such a tool would also need the declarations in the app stores and, for tracking, Apple’s App Tracking Transparency permission.
7 Third-party services
- Sign-in with Google, Apple, Microsoft or Telegram, only when you choose it: you go to the provider’s sign-in page, or the studio opens Google’s sign-in script (only where the redirect is not available) or Telegram’s sign-in widget. The provider may set its own cookies there under its own privacy policy; we do not receive or control them.
- Payments with Stripe: the payment page and the subscription portal are Stripe’s own pages on stripe.com. Stripe sets its own cookies there, for example against fraud, under its own policies.
- Profile pictures: if you signed in with Google or Telegram, your picture is loaded from their servers (googleusercontent.com, t.me, telesco.pe). Like any image request, this gives them your IP address and browser details; we send no referrer.
- Telegram Mini App: inside Telegram the studio loads Telegram’s Mini App script from telegram.org (section 4, last row).
- Fonts, videos and all other files come from our own server in the EU. Nothing is loaded from Google Fonts or other content networks.
- Links to other sites (app stores, social networks, sources in SUPERCOMPUTER answers) load nothing until you click them.
8 The app, Telegram and other browsers
- KULT app (iPhone, Android). The app shows the studio from kultai.agency in its own web view, with the essential cookies and storage of section 4. It asks about the partner link only when you open it through a partner’s link. The app contains no analytics, advertising or tracking, as declared in the App Store and on Google Play. Settings: Profile → Cookie settings. The app’s own functions, such as notifications and in-app purchases, are described in section 13 of the Privacy Policy. In the app, this page, the Privacy Policy and the Terms of Use open in the app’s own web view and share its storage, so a choice made here applies in the app. Other pages that the app opens in its in-app browser keep their own storage: a choice made there does not change the app.
- Telegram Mini App. Inside Telegram the studio uses only essential storage. There is no partner cookie (invitations through the bot are handled on our server) and no analytics or advertising, so no banner is shown. You can still open the settings in the studio’s profile.
- Other browsers and devices each keep their own choice, and so does the site installed on the home screen of an iPhone or iPad.
- Some browsers, for example Safari, delete data that websites store when you have not visited them for some time. Your choice is then gone and the banner appears again.
9 Changing or withdrawing consent
- “Cookie settings” at the bottom of every page of kultai.agency, in the studio under Profile, and the button below open the settings. Withdrawing is as easy as agreeing: switch “Partner link” off and save, or choose “Reject all”.
- Scripts cannot read or delete kult_ref, so our server deletes it from your browser when you withdraw.
- Withdrawal works for the future. An invitation that was already recorded with your account when you signed up stays part of your referral record (Privacy Policy, 2.6).
- You can also delete the cookies and site data of kultai.agency in your browser’s settings (usually under privacy or site settings). This also deletes your cookie choice, your language and your drafts, and signs you out. If you block all cookies, you cannot sign in to the studio.
- Signing out deletes the session cookie kult_u.
10 Legal bases and your rights
- Essential cookies and storage need no consent: Article 22(2) of the Spanish Information Society Services Act (LSSI) and Article 5(3) of the EU ePrivacy Directive (2002/58/EC) exempt storage that is strictly necessary to provide a service you have expressly asked for. Personal data in them is processed to perform our contract with you and, for the protection of sign-in and against fraud, on the basis of our legitimate interest in a secure service (Art. 6(1)(b) and (f) GDPR; Privacy Policy, section 3).
- Partner link: your consent (Art. 22(2) LSSI; Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future (Art. 7(3) GDPR).
- Push notifications: you switch them on yourself, so the browser subscription needs no cookie consent; the processing of your push address rests on your consent (Privacy Policy, section 13), which you can withdraw in your profile.
- Your rights, and how to complain to the Spanish data protection authority (Agencia Española de Protección de Datos, www.aepd.es), are described in section 8 of the Privacy Policy.
11 Changes to this policy
We update this policy when we change cookies or storage and publish the new version here with a new date. If we add a purpose or a provider that needs consent, the banner asks you again.
Current version: 5 October 2026.