Cookie Policy
Last updated / effective date: 14 July 2026 (version 20260714v2)
By accessing the website kalibios.com (including its mirrors and subdomains), the Kalibios mobile applications via Google Play Store and App Store, and by using the products and services provided by Kalibios through the Application itself, Kalibios AG, with registered office in Basel, Swiss Innovation Park Basel, Lichtstrasse 35 (hereinafter “Kalibios”), may set cookies and similar technologies (including SDKs, mobile advertising identifiers and local storage) on your browser or device. This is only possible if your browser preferences allow it.
Kalibios offers the applications and the website in Switzerland, EU and several other markets. Section 2(C) below explains which data protection law applies to you and how to contact the relevant supervisory authority.
1. What Are Cookies
Cookies are small pieces of data stored to improve your browsing experience. For example, they temporarily save your navigation preferences, monitor sessions, or collect statistical information to allow anonymous surveys on how users navigate the site. The Kalibios mobile apps do not use browser cookies; instead they rely on similar technologies such as software development kits (SDKs), mobile advertising identifiers (Apple’s IDFA and Google’s GAID) and local on-device storage, which serve the same purposes described in this Cookie Policy and are referred to collectively as “cookies and similar technologies.”
2. Which Cookies Does Kalibios Use
A) Technical Cookies
These cookies are essential for normal navigation and use of the applications, and for utilizing certain features. They do not record any personal information about you.
Kalibios uses the following technical cookies:
- Navigation cookies: essential for navigation and use of the applications. These are temporary files stored only for the browsing session and deleted when the browser closes.
- Functional cookies: allow navigation based on a set of criteria you select (e.g., language), to improve your application experience, by personalizing web content according to browser type, until expiration or manual deletion (e.g., login recognition).
The following technical cookies are used by Kalibios:
| Cookie | Type | Supplier | Mandatory | Classification | Coding | Duration | Purpose |
|---|---|---|---|---|---|---|---|
| __cf_bm | Third parties | Hubspot | Yes | Technical | 30 minutes | Bot-protection cookie (Cloudflare, via Hubspot’s CDN) that distinguishes human visitors from automated traffic. | |
| hs_login_email | Third parties | Hubspot | Yes | Technical | Session | Remembers the logged-in operator’s email for the Hubspot-powered support/chat widget. | |
| hs_c2l | Third parties | Hubspot | Yes | Technical | 1 year | Supports click-to-load tracking for Hubspot forms/chat embedded in the Application. | |
| csrf.app | Third parties | Hubspot | Yes | Technical | Session | Cross-site request forgery (CSRF) protection token for the Application. | |
| hubspotapi-csrf | Third parties | Hubspot | Yes | Technical | Session | CSRF protection token for calls the Application makes to the Hubspot API. | |
| stripe.csrf | Third parties | Stripe | Yes | Technical | Session | CSRF protection token for Stripe-hosted payment forms. | |
| site-auth | Third parties | Stripe | Yes | Technical | Session | Authenticates the user’s session on Stripe-hosted account/payment pages. | |
| cookie-perms | Third parties | Stripe | Yes | Technical | 1 year | Stores the user’s cookie-consent preferences on Stripe-hosted pages. | |
| _gcl_au | Own | Kalibios | Yes | Technical | UTF-8 | 90 days | Google conversion-linking cookie used to measure ad conversions (Google Ads/Firebase). |
| private_machine_identifier | Third parties | Stripe | Yes | Technical | 1 year | Device/machine identifier used by Stripe Radar to build a fraud-risk profile. | |
| hubspotapi | Third parties | Hubspot | Yes | Technical | Session | Maintains the user’s authenticated session with the Hubspot API. | |
| messagesUtk | Own | Kalibios | Yes | Technical | UTF-8 | 13 months | Recognises returning visitors to Hubspot-powered live chat so conversation history can be resumed. |
| __stripe_sid | Own | Kalibios | Yes | Technical | UTF-8 | 30 minutes | Tracks the checkout/browsing session for Stripe’s fraud-prevention system (Stripe Radar). |
| __stripe_mid | Own | Stripe | Yes | Technical | 1 year | Assigns a unique device identifier used by Stripe Radar to build a fraud-risk profile. | |
| __stripe_mid | Third parties | Stripe | Yes | Technical | 1 year | Assigns a unique device identifier used by Stripe Radar to build a fraud-risk profile. | |
| machine_identifier | Third parties | Stripe | Yes | Technical | 1 year | Device identifier used by Stripe for fraud prevention (see also private_machine_identifier). | |
| hubspotapi-prefs | Third parties | Hubspot | Yes | Technical | 6 months | Stores the user’s Hubspot chat/help-widget preferences. | |
| FIRESTORE_COUNTER_SHARD_ID | Own | Kalibios | Yes | Technical | UTF-8 | Session | Internal Google Firestore/Firebase load-balancing identifier used by the Application’s backend. |
| AUTO | Own | Kalibios | Yes | Technical | UTF-8 | Session | Internal technical cookie used for load balancing/session routing. |
| CookieConsent | Own | Kalibios | Yes | Technical | 1 year | Stores the user’s cookie-banner consent choices so the banner is not shown again until refreshed. | |
| Firebase Crashlytics | Third Parties | Yes | Technical | Persistent (installation-scoped) | Installation identifier used to collect and correlate app crash/diagnostic reports. |
Disabling technical cookies may cause some services to malfunction.
Under applicable law, your prior consent is not required for the installation of these cookies. However, you may disable technical cookies at any time as described in Section 4 “How to Manage and Delete Cookies” of this Cookie Policy.
B) Analytical Cookies
These cookies are used by the website operators to collect aggregated information about the number of users and how they visit the site, for general statistics on service and usage.
Kalibios uses the following analytical cookies:
- Stripe (Cookie Policy)
- Hubspot (Cookie Policy)
- Google / Firebase (Privacy & Terms)
| Cookie name | Type | Supplier | Mandatory | Coding | Duration | Purpose |
|---|---|---|---|---|---|---|
| __stripe_orig_props | Third parties | Stripe | No | Analytical | Session | Stores original page/referrer properties used by Stripe’s fraud-detection analytics. |
These are third-party analytical cookies. The data collected is used to gain information on most visited pages, visitor numbers, aggregate visit data by operating system or browser, domain names and browser types of devices connecting to the Application, URI addresses of requested resources, request time, and parameters related to your operating system and IT environment.
Under applicable law, your prior consent is required for the installation of third-party analytical cookies. We will track your consent through a specific technical cookie. You may disable third-party analytical cookies at any time by following the instructions in Section 4 “How to Manage and Delete Cookies.”
The use of cookies and similar technologies by Kalibios complies with the Swiss Federal Act on Data Protection (FADP) and related ordinance, and, to the extent applicable to you under Section 2(C) below, with the EU General Data Protection Regulation (GDPR), Italy’s Codice Privacy, Malaysia’s Personal Data Protection Act 2010 as amended, and Singapore’s Personal Data Protection Act 2012 as amended. Some third-party cookie providers (e.g., payment or analytics/marketing service providers) may process personal data outside Switzerland and/or the European Economic Area. In such cases, Kalibios ensures adequate data protection pursuant to Articles 16 and 17 of the FADP, detailed in our Privacy Notice, to which you are referred for further information on relevant countries and safeguards.
C) Applicable Law and Your Rights by Jurisdiction
Which law applies to your use of the Application and website depends on where you are located:
- Switzerland: the Federal Act on Data Protection (FADP) applies. Complaints may be lodged with the Federal Data Protection and Information Commissioner (FDPIC).
- EU: because the Application is offered to users in EU and specifically Italy, the GDPR applies extraterritorially (Art. 3(2) GDPR), together with Italy’s Codice Privacy (Legislative Decree 196/2003, as amended) and the Garante’s Cookie Guidelines. Complaints may be lodged with the Garante per la protezione dei dati personali.
- Malaysia: the Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024, applies. Complaints may be lodged with the Commissioner of the Jabatan Perlindungan Data Peribadi (JPDP Department).
- Singapore: the Personal Data Protection Act 2012, as amended, applies. Complaints may be lodged with the Personal Data Protection Commission (PDPC).
This is a plain-language summary; it does not limit any rights you may have under mandatory local law. See Section 5 below for how to exercise your data protection rights.
3. How to Give Consent
When you access the Application, a first-layer banner informs you about the use of cookies and similar technologies by Kalibios and third parties. The banner displays an “Accept All” button and a “Reject All” button with equal visual prominence (same size, colour and weight), together with a “Manage Preferences” option. Clicking “Accept All” gives your consent to all cookie categories described in this Cookie Policy. Clicking “Reject All” means navigation continues without cookies or tracking tools other than strictly necessary technical cookies. Clicking “Manage Preferences” opens a second layer where you can give or withhold consent separately for each category (e.g., analytics, marketing, named third parties) before confirming your choices.
Your consent is tracked via a technical cookie which prevents the banner from appearing again for as long as your consent remains valid.
We refresh your consent approximately every six (6) months, or sooner if the cookies or third-party providers listed in Section 2 change materially, by showing the banner again so you can confirm or update your choices.
The brief notice also links to Kalibios’ Privacy Notice, where you will find more information on how we handle your data.
4. How to Manage or Delete Cookies
a) Browser Settings
Most internet browsers accept cookies automatically. You can change your browser settings to accept or reject all cookies, be warned when a cookie is set, or browse anonymously without technical cookies.
Various ways exist to manage cookies. Please consult your browser’s user manual or help screen. For more information on how to adjust, modify, or disable these settings or browse anonymously, visit the privacy policies of:
- Mozilla Firefox
- Internet Explorer
- Google Chrome
- Opera
- Apple Safari
b) Operating System Settings
Many operating systems allow limiting ad tracking linked to your device ID. You can modify settings directly on your device. Please consult your operating system manual or contact its support center for how to adjust these settings.
c) Mobile App Settings (iOS App Tracking Transparency and Android Advertising ID)
On iOS and Android, Kalibios does not perform cross-app tracking.
5. Your Data Protection Rights and Contact Details
Subject to the conditions and exceptions set out in the applicable law identified in Section 2(C), you have the right to:
- access the personal data we hold about you and obtain a copy of it;
- rectify inaccurate or incomplete personal data;
- erase your personal data, where applicable;
- restrict or object to the processing of your personal data, including processing based on cookies and similar technologies;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal, using the “Manage Preferences” option described in Section 3;
- lodge a complaint with the supervisory authority in your market: the FDPIC (Switzerland), the Garante per la protezione dei dati personali (Italy), the JPDP Department (Malaysia), or the PDPC (Singapore).
To exercise these rights, or for any question about this Cookie Policy or Kalibios’ Privacy Notice, contact our privacy team at privacy@kalibios.com.
Kalibios AG, Swiss Innovation Park Basel, Lichtstrasse 35, Basel, Switzerland, acts as data controller.
For questions or further information on Kalibios’ data protection and cookie policy, contact us at privacy@kalibios.com.