KUKI-KUKI.COM - COOKIE POLICY
Website: https://www.kuki-kuki.com
Effective date: 23 APRIL 2026
Last updated: 23 APRIL 2026
Controller: Smart Health and Science ZZP (KvK 86191748)
Address: Kerkstraat 140, 6267EG Cadier en Keer, The Netherlands
Contact: info@smarthealthandscience.nl
Related documents: Privacy Notice | Cookie Settings [link]
This Cookie Policy (this “Policy”) explains how Smart Health and Science ZZP (the “Controller”, “we”, “us”) uses cookies and similar technologies on https://www.kuki-kuki.com (the “Site”), the categories of such technologies, the purposes for which they are used, and the choices available to you.
1. Scope and Legal Framework
1.1 Scope. This Policy applies to cookies and similar technologies used on the Site, including those used in connection with parent-managed accounts and child profiles.
1.2 EU/EEA and UK approach. In the EU/EEA (including the Netherlands) and the United Kingdom, the storage of, or access to, information on your device for non-essential purposes generally requires your prior consent. Cookies and similar technologies that are strictly necessary to provide a service you request (e.g., secure login, core site functionality) may be used without consent.
1.3 Other jurisdictions. In other jurisdictions (including certain U.S. states), cookie-related processing may trigger additional notices and opt-out rights depending on the nature of the data collected and how it is used (for example, for cross-context behavioural advertising). This Policy describes our baseline approach and is supplemented by any region-specific notices presented to you.
2. Definitions
2.1 Cookies and similar technologies. “Cookies” in this Policy refers to cookies and functionally similar technologies that store or access information on a device, including (without limitation) pixels, tags, SDKs, local storage, and device identifiers.
2.2 Strictly necessary. “Strictly necessary” cookies are those required to operate the Site and provide the functionality you explicitly request (e.g., authentication, security, session continuity), without which the Site cannot function properly.
3. Our Service Context (Children-Focused; No Advertising)
3.1 Children-focused service. Kuki-Kuki is an extracurricular education service designed for children (ages 6-17) operating via parent-managed accounts.
3.2 No advertising. We do not serve advertisements on the Site and do not deploy cookies for the purpose of delivering advertisements to children or parents.
3.3 No profiling for targeted advertising. We do not profile users for targeted advertising and do not use marketing/ad cookies for cross-context behavioural advertising.
3.4 Consent-first deployment. Where consent is required for non-essential cookies, we do not set such cookies unless and until you have made a valid choice through our cookie banner/preferences tools.
4. Categories of Cookies We Use
We classify cookies into the categories below. The specific cookies used depend on the tools enabled on the Site (see Section 7) and your choices.
4.1 Strictly Necessary Cookies (No Consent Required)
These cookies are required for the Site to operate and cannot be disabled via our cookie banner. They may include cookies used for:
- security and fraud prevention
- load balancing and network management
- session management and authentication
- storing cookie preference and consent status
4.2 Preferences / Functional Cookies
These cookies remember your choices and preferences (e.g., language, region, accessibility preferences). Depending on your location and the function served, these cookies may require consent.
4.3 Statistics / Analytics Cookies
These cookies help us understand how the Site is used (e.g., page interactions, aggregated usage patterns, error diagnostics) to improve performance and user experience. In the EU/EEA and UK, analytics cookies typically require prior consent unless they are strictly necessary for a service you explicitly request.
4.4 Embedded Content Cookies (Video/Audio)
If the Site embeds third-party media players or content (e.g., video hosting), those third parties may set cookies or access device information. Where required by law, we will only enable such embedded content that sets non-essential cookies after you provide consent (or we will use privacy-enhanced embedding options where available).
4.5 Marketing Cookies
We do not use marketing cookies to deliver ads. If we ever introduce marketing cookies (e.g., for campaign measurement or similar purposes), we will (a) update this Policy and (b) request consent before placing such cookies where required by law.
5. Cookie Banner; Consent Choices; Preference Management
5.1 Cookie banner. Where required, we present a cookie banner upon your first visit (and thereafter as necessary). The banner enables you to:
- accept non-essential cookies;
- reject non-essential cookies; or
- customise preferences by category (and, where supported, by vendor/tool).
5.2 Equal choice. We aim to provide a genuine and balanced choice, including making refusal as accessible as acceptance, consistent with regulatory expectations in the EU/EEA and UK.
5.3 Granularity and effect. Your selections apply to the Site as configured. Some tools may not load unless you opt in. Strictly necessary cookies remain enabled to ensure Site functionality.
5.4 Consent records. Our consent management tooling may record your cookie preferences (including timestamp and preference state) to apply your choice and demonstrate compliance.
6. Children and Cookies
6.1 Minimisation. We seek to minimise cookies and tracking technologies, particularly given that the Service is designed for children.
6.2 No advertising tracking. We do not use cookies for behavioural advertising or similar tracking of children or parents for advertising purposes.
7. Tools We Use
The Site and the parent/child application use the following tool categories that set or read cookies and similar technologies:
- Consent Management Platform (CMP): none currently deployed; consent flows are managed in-product.
- Analytics: Google Analytics 4 (on the marketing Site at https://www.kuki-kuki.com).
- Video/Embeds: none currently deployed.
- Payments / Fraud prevention: Stripe (on the parent application at https://app.kuki-kuki.com, used to process deposits and protect against fraudulent payments).
- Authentication / Functional storage: first-party browser local storage on the parent application, used to keep the parent signed in and remember UI preferences.
8. Cookie List
The cookies and similar technologies in use depend on the pages you visit, the tools enabled, your location, and your preferences. The inventory below reflects our current deployment and is reviewed and updated as our stack changes.
8.1 Google Analytics — set on .kuki-kuki.com (visible on both https://www.kuki-kuki.com and https://app.kuki-kuki.com)
These cookies are placed by Google Analytics 4 loaded on the marketing Site. Because they are scoped to the parent domain .kuki-kuki.com, they are also sent by the browser on requests to the parent/child application subdomain.
| Category | Cookie / Identifier | Provider | Purpose | First/Third Party | Expiry |
|---|---|---|---|---|---|
| Statistics | _ga | Google (Google Analytics 4) | Distinguishes unique visitors for aggregated site analytics. | First-party (set on .kuki-kuki.com) | 2 years |
| Statistics | _ga_<container-id> (e.g., _ga_P8M28E3FJN) | Google (Google Analytics 4) | Persists session state for the specific GA4 property. | First-party (set on .kuki-kuki.com) | 2 years |
8.2 Parent / Child Application — https://app.kuki-kuki.com
| Category | Cookie / Identifier | Provider | Purpose | First/Third Party | Expiry |
|---|---|---|---|---|---|
| Strictly necessary | __stripe_mid | Stripe Payments Europe, Ltd. | Fraud prevention for payment processing (machine identifier). Set when a parent uses the deposit / add-child flow that loads Stripe.js. | First-party (set on .kuki-kuki.com by Stripe.js) | 1 year |
| Strictly necessary | __stripe_sid | Stripe Payments Europe, Ltd. | Fraud prevention for payment processing (session identifier). | First-party (set on .kuki-kuki.com by Stripe.js) | 30 minutes |
8.3 Similar Technologies — Browser Local Storage (Parent / Child Application)
The application stores the following items in your browser's first-party local storage. These are not HTTP cookies but are functionally similar technologies as described in Section 2.1.
| Category | Identifier | Provider | Purpose | Used by | Expiry |
|---|---|---|---|---|---|
| Strictly necessary | auth.access_token | Smart Health and Science | Holds the authenticated user's session token so they stay signed in across page loads. | Parent and child sessions | Until sign-out or browser data cleared |
| Strictly necessary | auth.user | Smart Health and Science | Caches basic profile details of the signed-in user (e.g., name, role) to render the dashboard. | Parent and child sessions | Until sign-out or browser data cleared |
| Preferences | parent_dashboard_onboarding_dismissed | Smart Health and Science | Remembers that the parent dismissed the dashboard onboarding hint so it is not shown again. | Parent dashboard | Until browser data cleared |
| Preferences | course-sound-enabled | Smart Health and Science | Remembers the child's sound on/off preference for the course player. | Child course player | Until browser data cleared |
9. Changing or Withdrawing Your Choices
9.1 Cookie Settings. You may change your cookie preferences at any time by using Cookie Settings: [link].
9.2 Withdrawal effect. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal. After withdrawal, we will stop setting non-essential cookies going forward (subject to reasonable technical implementation).
10. Browser and Device Controls
Most browsers and devices permit you to manage cookies through settings, including deleting cookies and blocking all or third-party cookies. Please note that blocking strictly necessary cookies may impair Site functionality or prevent certain features (e.g., login) from working properly.
11. Third Parties; Processors; Independent Controllers
11.1 Third-party cookies. Certain cookies may be set by third parties (e.g., embedded media providers). Where required, we will enable such third-party cookies only after you consent.
11.2 Role of third parties. Depending on the service, a third party may act as:
- our processor (acting on our instructions under a contract); or
- an independent controller (operating under its own terms and privacy notice).
Where a third party acts as an independent controller, its terms and notices may apply to its processing.
12. International Transfers
Because the Site is accessible globally and some vendors may operate internationally, cookie-related data may be processed outside your country/region. Where required, we implement appropriate safeguards for international transfers.
Transfer mechanism: the European Commission’s Standard Contractual Clauses (Implementing Decision 2021/914, Module 2 — controller to processor) with each non-EU/EEA processor; the EU-US Data Privacy Framework where the processor is DPF-certified; and the UK International Data Transfer Addendum to the EU SCCs (or the UK International Data Transfer Agreement) for transfers from the United Kingdom.
13. United States: “Do Not Sell or Share” and Global Privacy Control (GPC)
We do not deploy advertising-based tracking on the Site. If, in the future, we engage in activities that qualify as a “sale” or “sharing” of personal information for cross-context behavioural advertising under applicable U.S. state privacy laws, we will provide an opt-out mechanism and honour applicable opt-out preference signals (including GPC) where required.
If applicable, opt-out link: “Do Not Sell or Share My Personal Information” — [link]
14. Updates to This Policy
We may amend this Policy to reflect changes in law, regulatory guidance, or the tools and cookies used on the Site. We will publish the updated Policy on https://www.kuki-kuki.com and revise the “Last updated” date. Where required, we will request your consent again.
15. Contact
Questions regarding this Policy may be directed to: info@smarthealthandscience.nl
Smart Health and Science ZZP, Kerkstraat 140, 6267EG Cadier en Keer, The Netherlands