Cookie Policy

1. Introduction and Scope of this Cookie Policy

This Cookie Policy (the "Policy") explains how KML Consulting, also doing business as Kairon Merhav ("we", "us", "our", or the "Company"), along with our affiliates, partners, and third-party service providers, uses cookies, web beacons, tracking pixels, local storage, clear GIFs, and other similar tracking technologies (collectively referred to herein as "Cookies") to recognize you when you visit our website, our learning management system, our student dashboards, and any other platforms or applications owned, operated, or controlled by KML Consulting (collectively, the "Platform" or the "Services"). It comprehensively details what these technologies are, the specific technological mechanisms by which they operate, the express purposes for which we utilize them to collect and process your data, and your rights and available mechanisms to control, restrict, or entirely prevent our use of them.

By continuing to browse, access, or otherwise interact with the Platform, you are expressly agreeing to our use of Cookies in accordance with this rigorous and detailed Policy. It is imperative that you read this document in its entirety to ensure a complete understanding of our data tracking practices. If you do not accept the use of these Cookies, please follow the instructions detailed in Section 5 below to systematically disable them, or refrain from using our Platform entirely, as modifying your Cookie preferences may result in a fundamentally degraded or entirely inoperable user experience.

2. Detailed Explanation of Cookies and Tracking Technologies

Cookies are essentially small data files—typically consisting of a string of alphanumeric characters—that are downloaded onto and stored within the web browser or hard drive of your internet-enabled device (e.g., computer, smartphone, tablet) when you access a website or application. They are widely utilized by website operators worldwide to make their websites operate, to work more securely and efficiently, to facilitate user navigation, to provide analytical reporting information, and to assist with targeted marketing efforts.

Cookies inherently set by the proprietor of the website or application (in this specific instance, KML Consulting) are formally designated as "first-party cookies." These first-party cookies are fundamentally required for the Platform to function properly. Conversely, cookies established by entities, organizations, or service providers other than the website owner are classified as "third-party cookies." Third-party cookies enable the provision of third-party features, functionalities, or services on or through the website (for example, interactive advertising, advanced analytical tracking, and seamless social media integration functionalities). The third parties that set these cookies possess the capability to recognize your device both when it visits our Platform and, frequently, when it visits certain other, unaffiliated websites across the broader internet.

Furthermore, Cookies can be categorized by their operational lifespan. "Session cookies" are temporary and exist solely during the time your browser is actively open; they are automatically and irrevocably deleted from your device the moment you close your web browser. "Persistent cookies," on the other hand, transcend the closure of your browser and remain resident on your device for a predetermined period of time or until you manually execute a deletion process within your browser's settings menu.

3. Specific Inventory of Essential and Strictly Necessary Cookies We Utilize

We employ specific, strictly necessary first-party cookies that are absolutely indispensable for the foundational operation, security, and integrity of our educational platform. These cookies do not typically collect information that identifies you for the purposes of marketing or behavioral tracking. Because they are strictly necessary for the delivery of the Services you explicitly request (such as secure login authentication and session management), they cannot be disabled within our systems without catastrophically breaking the Platform's functionality.

The exact nomenclature and operational parameters of these strictly necessary cookies are outlined extensively below:

• next-auth.session-token (and __Secure-next-auth.session-token in production environments): This is a critical encrypted JSON Web Token (JWT) session cookie fundamentally required by our secure authentication architecture (NextAuth.js). It maintains your secure session state across subsequent HTTP requests. Without this cookie, the server cannot cryptographically verify your identity, effectively rendering you unable to log in, access your purchased courses, view sensitive dashboard data, or participate in the educational ecosystem. Duration: 30 days (rolling expiry upon interaction).
• next-auth.csrf-token: This represents a vital Cross-Site Request Forgery (CSRF) protection cookie. It securely generates and validates a cryptographic nonce for every state-changing request (such as modifying your profile, submitting assignments, or finalizing payment transactions). This cookie mathematically guarantees that malicious third-party actors cannot covertly execute unauthorized actions disguised as your authenticated session. Duration: Session.
• next-auth.callback-url: An essential functional tracking cookie utilized strictly during the multi-step OAuth or credential-based login flow. It transiently stores the specific URL path you were attempting to access prior to encountering the authentication gateway, ensuring that upon successful login, the system programmatically redirects you back to your intended destination rather than defaulting to the system origin. Duration: Session.
• theme (via HTML5 LocalStorage): While technically not an HTTP cookie, it functions identically for the purposes of this policy. It persistently stores your explicitly selected graphical user interface preference (specifically, 'dark' or 'light' mode) by interfacing with the `next-themes` provider logic. This prevents the deleterious 'hydration mismatch' flash of unstyled content upon initial page load and guarantees a consistent visual experience across all page navigations and subsequent platform visits. Duration: Persistent until manually cleared.

4. Analytics, Performance, and Third-Party Marketing Integrations

In addition to the strictly necessary operational cookies specified in Section 3, we reserve the right to deploy, utilize, and integrate various performance, analytical, and targeted advertising cookies. These tracking technologies meticulously gather anonymized, pseudonymous, or aggregated statistical data pertaining to how visitors interact with our Platform. The granular data harvested may include, but is strictly not limited to: your Internet Protocol (IP) address, browser type and version, device operating system, precise geographic location data derived from network routing, the specific sequence of pages visited, timestamp datums for each discrete page load, the duration of time spent on individual pages, interaction heatmaps, clickstream trajectories, scroll-depth analytics, and referential bounce rates.

This voluminous dataset is systematically analyzed by our internal algorithms and third-party data processing partners to iteratively optimize the structural layout, pedagogical flow, user interface responsiveness, and overarching content strategy of our educational catalogs. Furthermore, we may occasionally partner with third-party advertising networks, remarketing platforms, and data brokers who may utilize persistent cookies to serve contextual or behaviorally targeted advertisements regarding our certification programs to you when you navigate to other platforms across the World Wide Web.

5. Exhaustive Guide to Cookie Management, Deletion, and Opt-Out Procedures

You possess the absolute, unequivocal right and technical capability to granularly direct, configure, restrict, or entirely block the deployment of cookies on your device. Consequently, you can proactively exercise your cookie preferences by modifying the fundamental settings within your chosen web browser interface. However, we must reiterate with extreme prejudice that if you universally block all cookies (including the strictly necessary `next-auth` session tokens detailed in Section 3), you will be categorically barred from logging into your account, accessing your premium course materials, and utilizing the core functional services for which you have paid.

The precise procedural methodology for refusing, deleting, or managing cookies wildly varies depending on the specific web browser software you employ. We hereby provide you with structural guidance on how to access these settings across the most ubiquitous browsing applications:

• Google Chrome: Navigate to Settings %gt; Privacy and security %gt; Cookies and other site data. From this interface, you may block third-party cookies or stipulate that all cookies be deleted upon closing all windows.
• Mozilla Firefox: Navigate to Options %gt; Privacy & Security %gt; Enhanced Tracking Protection. You may select the 'Strict' preset or configure 'Custom' rules to interdict specific classes of tracking tokens.
• Apple Safari: Navigate to Preferences %gt; Privacy. Check the box explicitly labeled 'Block all cookies'. Understand that this will obliterate all persistent state mechanics on our platform.
• Microsoft Edge: Navigate to Settings %gt; Site permissions %gt; Cookies and site data. Toggle the appropriate switches to align with your desired security posture.

For individuals seeking to exhaustively opt out of third-party targeted advertising derived from persistent behavioral cookies, we strongly advise visiting the centralized opt-out portals provided by the Network Advertising Initiative (NAI) at http://www.networkadvertising.org/choices/ or the Digital Advertising Alliance (DAA) at http://www.aboutads.info/choices/. We do not maintain or control these third-party registries.