Cookie Policy

Version applicable as of May 1, 2026

This Cookie Policy ("Policy") explains how Koenig Solutions S.L. (operating under the brand name KiroSleep, hereinafter referred to as the "Company", "we", "us", or "our") uses cookies and other similar tracking technologies on its website (the "Website"), the purposes they serve, and the options available to manage your cookie preferences.

This Policy has been prepared in accordance with the European Union's General Data Protection Regulation (GDPR) (2016/679), the ePrivacy Directive, and other applicable data protection laws and regulatory requirements. We are committed to protecting your personal information and complying with all relevant privacy laws.

By using the Website, you agree to the use of cookies in accordance with the preferences you have selected and as described in this Policy. Please note that we may update this Policy from time to time. Any changes will become effective immediately upon publication; therefore, we recommend regularly reviewing this Policy to stay informed about how we manage and protect your data.

1. Who is Responsible for Protecting My Information?

In brief

We are: Koenig Solutions S.L., operating under the trade name KiroSleep.

Company Name: Koenig Solutions S.L.

Registered Address: Carrer de Jules Verne, 19, Sarrià-Sant Gervasi, 08006 Barcelona, España

Registration Number: B16446106

Our Email Address: support@kirosleep.com

If you have any questions, comments, or complaints regarding how we collect, use, and store your personal information, please contact us by email at: support@kirosleep.com

2. What Are Cookies and How Are They Used?

Cookies are small text files stored in your browser or device that help the Company and its Partners recognize you, track your visit history, and personalize content based on your preferences. They improve your user experience by enhancing website performance, tailoring content, analyzing user behavior, and delivering relevant advertisements.

3. How Can I Manage Cookies?

In brief

Before starting your session, you will see a management banner at the bottom of the Website that allows you to configure your choices dynamically.

As a user of our website, you have full control over the cookies and tracking technologies used on our site. In accordance with your consent form, the Company only uses the cookies of your choice to achieve the specified cookie purposes.

Additionally, you have the option to adjust your browser settings to accept or reject some or all cookies. To find guidance on how to manage cookies in your browser, click on the following links for the respective platforms:

4. What Are Tracking Technologies and How Are They Used?

In addition to cookies, we may use other tracking technologies, such as pixel tags, web beacons, and scripts, to improve your experience on our website:

  • Pixel tags (web beacons): These are small invisible images or snippets of code embedded in web pages. They help track user interactions, such as page views, clicks, and email open rates, for analytical and marketing purposes.
  • Scripts: These are small snippets of code executed on your device to track real-time interactions with our website, such as clicks, form submissions, and the activation of dynamic content.

5. What Third-Party Tracking Technologies Are Used?

We use third-party services that place their own cookies or tracking systems (Google Analytics, Facebook pixel, Hotjar, TikTok). When we integrate these third-party tools, we share responsibility with the third party for ensuring that the initial collection and transmission of personal data take place lawfully and transparently.

However, once personal data has been transmitted to the third party, the provider may process that data for its own purposes in accordance with its own privacy policy. Below are the access policies for these tools:

6. Are Cookie-Related Data Transferred Outside the EEA?

In brief

Yes. Data pipelines via global tracking nodes may route to infrastructures outside the EEA (e.g., the United States).

Where international data transfers occur, we safeguard your metrics using explicit Framework clauses:

  • EU-U.S. Data Privacy Framework (DPF) architectures;
  • Standard Contractual Clauses (SCCs) approved by the European Commission;
  • The UK International Data Transfer Agreement (IDTA) parameters where relevant.

7. Are Cookies Used for Profiling and Targeted Advertising?

Certain third-party marketing and advertising cookies allow us and our partners to analyze your browsing behavior across websites and services to display advertisements and content that are more relevant to you. These activities are carried out only where you have provided your explicit consent inside our configuration dashboard.

8. Which Cookies and Other Tracking Systems Are Used?

Please note that the names of cookies, pixels, and other tracking technologies may change over time. We conduct periodic audits to update this manifest section accordingly.

Essential Cookies and Tracking Technologies
Name Cookie Description Expiration
orbio_session_idA unique session identifier used to maintain a reference to the user's session, ensuring session integrity and user interactions.12 month(s)
GCLBA Google cloud load balancing cookie used to manage session affinity and optimize website performance, ensuring a stable and efficient user experience.12 month(s)
__cf_bmA Cloudflare cookie used to identify and mitigate automated bot traffic, improving security by ensuring only legitimate traffic can interact with the website.30 minutes
apple_pay_supportedThis cookie indicates whether the user's browser or device supports Apple Pay, which is essential for enabling payment processing options on the site.1 month
XSRF-TOKENA security cookie used to prevent Cross-Site Request Forgery (CSRF) attacks on forms, ensuring secure interactions on the website.1 month
enence_sessionA website-specific session cookie that maintains the user's state during navigation and ensures consistent functionality throughout the session.1 month
tracktor_sessionSession cookie used for the order tracking feature, necessary to ensure its correct functioning during the user session.1 month
srpp _(ID)This cookie is used to identify the user's session, ensuring the correct functioning of the website.3 month(s)
l7_azA PayPal cookie used for security, load balancing, and session management during transactions, ensuring secure processing of user transactions.1 day
tsA PayPal cookie used for security, anti-fraud measures, and session timestamping, ensuring that transactions and user data remain secure.12 month(s)
ts_cA PayPal cookie used for security, anti-fraud measures, and session timestamping, helping to secure and streamline user transactions.12 month(s)
sc_fA PayPal cookie used for session management and security features during a PayPal transaction, ensuring secure and efficient user interactions.12 month(s)
_session_serverA session cookie set by the Ixopay payment gateway necessary for secure transaction processing, ensuring the integrity and security of payment transactions.Session
AECA Google security cookie that ensures requests made during a browsing session are authentic, preventing Cross-Site Request Forgery (CSRF) attacks.6 month(s)
cartStores information about items added to the cart to remember user selections between visits.1 month
cookie-consentA cookie that stores the user's consent preferences regarding cookie usage, ensuring your privacy choices are remembered and respected throughout your browsing experience on the website.12 month(s)
passport_csrf_tokenA security cookie that protects against Cross-Site Request Forgery (CSRF) attacks during user actions, ensuring that user interactions with the website remain secure and legitimate.14 days
passport_csrf_token_defaultA security token cookie that serves as a default protection mechanism against Cross-Site Request Forgery (CSRF) attacks, safeguarding user data and ensuring all form submissions come from legitimate sources.14 days
sessionidA session cookie that keeps a user's session active while navigating the platform, ensuring continuous authentication and a seamless user experience without the need for repeated logins.4 month(s)
sessionid_ssA secure session cookie that serves as an encrypted version of the session identifier, maintaining login state and providing enhanced security for user sessions and interactions.4 month(s)
sid_guardA security cookie that helps protect the user's session from unauthorized access, safeguarding personal information and ensuring only legitimate users can access account features.10 month(s)
store-country-codeRemembers the user's country or region configuration to deliver properly localized content and features from the platform.4 month(s)
store-country-code-srcStores information about the source or method used to determine your geographic location to improve service delivery.4 month(s)
store-country-signHelps verify regional settings and data integrity to ensure you receive the correct version of content based on your location.4 month(s)
SOCSGoogle cookie used to store user choices regarding consent and cookie preferences.4 month(s)
tt_chain_tokenAn essential part of the platform's security framework that helps authenticate and validate user sessions.6 month(s)
octocom_sessionStores a session identifier so the chatbot can function and maintain conversation context during your visit.Session
octo_idStores a persistent identifier so the chatbot can recognize your browser and maintain conversation context across visits.12 month(s)
ef_witnessCookie used for affiliate tracking and ad campaigns.3 month(s)
ef_affidCookie that stores affiliate IDs for tracking referrals and attributing sales to marketing campaigns.3 month(s)
ef_tid_c_o_64Cookie that stores tracking IDs for performance analysis of affiliate and marketing campaigns.3 month(s)
ef_tid_c_a_47Cookie that stores tracking IDs for performance analysis of affiliate and marketing campaigns.3 month(s)
Analytical Cookies and Metrics
Name Cookie Description Expiration
_gaDistinguishes users and tracks interaction on the website for statistical analysis.12 month(s)
_clckStores the user ID to analyze interactions on the website through session recordings.12 month(s)
rppTracks referral sources and personalization parameters for analytics.1 month
_ga_(ID)Distinguishes users and tracks sessions for statistical analysis.12 month(s)
_axwrtProvides specific application analytics for each website.12 month(s)
_vwo_uuid_v2Identifies unique visitors for A/B testing and analytics.12 month(s)
_vis_opt_sTracks user engagement in website experiments and split tests.3 month(s)
_vis_opt_test_cookieVerifies if the browser can set cookies to enable testing features.Session
_vwo_uuidIdentifies unique visitors across different sessions for testing.12 month(s)
_vwo_dsStores session data for A/B testing and personalized tracking.3 month(s)
_vwo_snTracks user sessions related to A/B testing.1 month
_clskCombines session data for analysis and interaction heatmaps of the website.1 day
_hjSessionUser_(ID)Persists the user ID across sessions to analyze user behavior.12 month(s)
_hjSession_(ID)Stores current session data for analysis, including heatmaps and recordings.30 minutes
CLIDStores the unique user ID and settings for analytical tracking between sessions.12 month(s)
MRIdentifies user sessions for analytics.6 days
SMSynchronizes the user ID across all Microsoft domains for analytics.Session
Marketing Cookies and Targeted Advertising
Name Cookie Description Expiration
_gcl_auGoogle AdSense/Tag Manager cookie that tracks ad conversions.3 month(s)
_fbpFacebook pixel cookie that tracks website visits, ad conversions and enables retargeting.3 month(s)
transaction_idCookie that stores unique transaction identifiers for affiliate and sales tracking.3 month(s)
_tt_enable_cookieTikTok cookie that enables tracking features and pixel functionality.3 month(s)
_ttpTikTok pixel cookie that measures ad campaign performance and tracks user actions for retargeting.3 month(s)
_uetsidMicrosoft Advertising cookie (Bing UET) that stores session identifiers for user engagement tracking.1 day
_uetvidMicrosoft Advertising cookie (Bing UET) that assigns unique visitor IDs for cross-visit tracking.12 month(s)
IDEGoogle DoubleClick cookie used to serve targeted ads based on user profiles.8 month(s)
MSPTCMicrosoft Bing Ads cookie used for ad performance tracking and user targeting.6 month(s)
MUIDMicrosoft cookie that identifies unique browsers visiting Microsoft sites for advertising and analytics.12 month(s)
NIDGoogle cookie that stores user preferences to personalize ads based on recent activity.6 month(s)
SAPISIDGoogle cookie used for security, preferences, and targeted advertising for registered Google users.12 month(s)
SRM_BMicrosoft Bing cookie used for ad tracking and user identification.12 month(s)
__Secure-1PAPISIDGoogle cookie used to build profiles to deliver relevant Google advertising (secure version).12 month(s)
__Secure-3PAPISIDGoogle cookie that stores targeting preferences of users registered in Google services (secure version).12 month(s)
__Secure-ENIDGoogle cookie that stores advertising preferences and personalization information (secure version).6 month(s)
uniqueClickTracking cookie used to measure unique ad clicks and performance.Session
DVGoogle cookie used for ad delivery and retargeting based on user activity and searches.1 day
odin_ttTikTok cookie used for advertising features and ad measurement.12 month(s)
_nb_idStores a visitor identifier used for marketing attribution across sessions to measure which channels lead to conversions.12 month(s)
_nb_sessionStores session-level attribution information used for marketing measurement during a visit.30 minutes
northbeam_pixel_idStores an identifier used to ensure correct operation of the attribution pixel for marketing measurement.12 month(s)
ad-idStores an identifier used by Amazon Advertising for ad delivery, conversion measurement, and attribution.12 month(s)
ad-privacyStores Amazon Advertising privacy/consent settings to apply advertising controls.12 month(s)
amzn_associated_idStores an affiliate/attribution identifier used to link actions to an Amazon campaign or partner.1 month
APISIDA Google cookie used for session management and ad personalization (for example, via YouTube integrations), ensuring the user's session remains stable and customized.12 month(s)
HSIDA Google security cookie used to protect user data and keep session information secure, used by advertising services to create a visitor profile for targeted advertising.12 month(s)
SIDA Google security cookie used to protect user data and maintain session integrity, ensuring that user information remains secure throughout the browsing session.12 month(s)
SIDCCA Google security cookie used to protect against forged requests and maintain session integrity, ensuring the security of user sessions and interactions.12 month(s)
SSIDA Google cookie that stores information about the user's session, preferences, and security settings to ensure the website runs smoothly and securely.12 month(s)
__Secure-1PSIDA Google security cookie used to authenticate users and store their preferences, contributing to the management and security of the user's session.12 month(s)
__Secure-1PSIDCCA Google security cookie used for session integrity and protection, ensuring the smooth functioning of the session and user interactions.12 month(s)
__Secure-3PSIDA Google security cookie used to authenticate registered users and store their preferences, ensuring secure and personalized experiences.12 month(s)
__Secure-3PSIDCCA Google security cookie used to maintain session integrity for logged-in users, ensuring their sessions remain secure throughout their visit.12 month(s)
uid_ttCreates a unique identifier for your browser session to ensure consistent platform functionality during your visit.6 month(s)
uid_tt_ssEnhanced secure version of the identification cookie that provides additional protection for user data when accessing sensitive features.4 month(s)
tta_attr_id_mirrorTracks user attributes and identifiers for analytical purposes.10 month(s)
ttwidTracks user interactions for analysis and measurement.12 month(s)
cStores an identifier used by PayPal for measurement and analytics relating to PayPal services usage and transaction performance.12 month(s)
sid_ttA session cookie that remembers the user's login state during a browsing session, ensuring consistent authentication and access to account features throughout the user's visit to the website.4 month(s)
tt_csrf_tokenA security cookie that protects against Cross-Site Request Forgery (CSRF) attacks on the platform, ensuring malicious websites cannot trick users into performing unwanted actions while logged into the service.Session
msTokenUsed for platform security and integrity, ensuring secure navigation and protection against unauthorized access.10 days
sid_ucp_v1Stores information related to the user's session identity and security features to maintain a secure connection to the platform.44 days
ssid_ucp_v1Secure session identifier that helps offer user-specific features and access to personal dashboards within the website.44 days