Cookie Policy
The operator details (name, registration number, address, contact) will be added to this document once approved. The terms apply as set out in this version.
Version of 3 October 2026.
1. Cookies used
1.1. The website https://verkyc.com, the console https://console.verkyc.com, the verification page https://verify.verkyc.com and the sign-in page https://id.verkyc.com use only cookies without which the service cannot work: sign-in, protection of the session against request forgery and continuation of a started verification. There are no analytics, advertising or cross-site tracking cookies; third-party scripts that set such cookies are not loaded.
1.2. All cookies of the service are sent over HTTPS only, are not readable by page scripts (HttpOnly) and are bound to their host (the __Host- prefix), except the cookies of the sign-in page, which are set by the authentication server.
| Name | Where | Purpose | Lifetime |
|---|---|---|---|
| __Host-verify_bootstrap | verification page | secure hand-over of the verification link into the session without keeping the link in browser history | up to 5 minutes |
| __Host-verify_session | verification page | applicant session: continuation of a started verification | until the verification link expires |
| __Host-appeal_session | verification page | session for submitting an appeal | until the appeal link expires |
| __Host-console_login | console | sign-in state until return from the sign-in page | until sign-in completes |
| __Host-console_session | console | session of a customer employee | until sign-out or session end, no longer than 8 hours |
| __Host-platform_pending | console | intermediate sign-in step of the platform owner with a second factor | 5 minutes |
| __Host-platform_session | console | session of the platform owner | until sign-out or session end |
| AUTH_SESSION_ID, KC_RESTART, KEYCLOAK_IDENTITY, KEYCLOAK_SESSION | sign-in page | employee sign-in and second factor | until sign-in completes or the session ends |
2. Consent
2.1. The cookies in the table are strictly necessary for the service the user requested, so no consent is required for them (Article 5(3) of Directive 2002/58/EC, section 25(2) no. 2 of the German Telecommunications and Digital Services Data Protection Act, TDDDG). If the service starts using other cookies, it will do so only after the user's consent and this policy will be updated.
3. How to manage cookies
3.1. Cookies can be deleted in the browser settings. After deletion you will need to sign in again, and a started verification can be continued only with a valid link.
4. Contacts
Questions: privacy@verkyc.com. Operator: [to be confirmed], [to be confirmed].