This is a translation for your convenience. If it differs from the Hebrew version, the Hebrew version governs. עברית

Cookies

Last updated: October 11, 2026

This page lists the cookies and information stored in the browser, their purpose and how to control them.

1. On the marketing website

The kupali.co.il pages (home, features, pricing, FAQ, about, contact and the legal pages) do not store cookies until you accept or decline in the cookie notice. They contain no:

The site uses limited measurement on our own server: viewing the price list, clicking action buttons and receiving an inquiry. The measurement does not use cookies, local storage, a visitor ID or browser fingerprinting. Measurement events are kept for up to 90 days; Do Not Track and Global Privacy Control requests stop the browser from sending them. More details in the privacy policy.

In addition, the pages and the signup form send counts to Growth OS, our sales measurement service (hosted on Vercel): page views (including the first page of a visit), clicks and signup steps. The IP address is not stored, only the country. Until you accept cookies, these counts are anonymous: they have no ID, and nothing is stored on your device (if you declined, only your choice is stored). If you accept, the gos_vid and gos_sid cookies in the table below let us count how many different visitors came and how many visits there were. Do Not Track and Global Privacy Control requests also stop these counts, and the cookie notice will not be shown.

2. What is stored on your device

WhatWhereWhyHow long
kupali_leads Local storage (localStorage) Written only if sending the contact form failed, so your inquiry is not lost. The information stays on the device and is sent to us automatically the next time you open the site, and nowhere else. Until successful delivery, a rejection that does not allow another attempt, or clearing the site data in the browser
kupali_leads_flush Local storage (localStorage) A short lock written only while a previously saved inquiry is being sent, so that two tabs of the site open at the same time do not send the same inquiry twice. It holds only a timestamp, no information about you. A few seconds; deleted by itself when sending ends
avon_sess Cookie (httpOnly, first party) Keeps you logged in to the back office after you log in with a username and password, so you stay logged in from screen to screen. Required for operation; written only when you log in to the system. 7 days
avon_pos Cookie (httpOnly, first party) Keeps the employee logged in to the POS on the sales device after entering their code, so the station stays usable throughout the shift. Required for operation; written only on a device approved as a sales station. 14 hours
avon_device Cookie (httpOnly, first party) Remembers that the business owner approved this device as a sales station at a specific branch. It does not identify a person, only a device and a branch. Required for operation; written only when the device is approved. 365 days or until the approval is revoked
avon_hq Cookie (httpOnly, first party) Keeps a KupaLi staff member logged in to our internal control center. Required for operation; written only for our team, not for customers and not for website visitors. 12 hours
gos_consent Cookie (first party) Stores your choice in the cookie notice (accept or decline), so we do not ask you again. 180 days
gos_vid Cookie (first party) Stores a random ID that lets us count how many different visitors come to the site. Stored only if you accepted. 365 days
gos_sid Cookie (first party) Marks the start of the visit. Stored only if you accepted. Until the browser is closed

kupali_leads and kupali_leads_flush are not cookies. They are not sent with every request to the server, and they are not accessible to any other site. The four rows after them are cookies required for operation: they are written only inside the system and not while browsing the marketing website, they are marked httpOnly and so are not accessible to code running in the browser, and they are deleted by themselves at the end of the time in the table or when you log out of the system. Because they are required for operation, no consent is needed for them. The last three rows belong to Growth OS: gos_consent stores your choice, accept or decline, and the measurement cookies gos_vid and gos_sid are stored only if you accepted.

3. In the system itself

Logging in to the KupaLi system (in the /app, /kupa and /backoffice areas) requires storing a login ID on the device, so you stay logged in from screen to screen. This use is required to operate the service; without it you cannot log in. In addition, the working data needed to sell even without an internet connection is stored on the device: the catalog, prices and categories.

4. How to control it

Every browser lets you block or delete cookies and local storage, usually under "Settings → Privacy and security". Blocking storage will not affect browsing the marketing website; blocking it in the system itself will prevent logging in.

5. Changes

We will ask for your consent before we store a measurement cookie. If we add a measurement tool or change how storage is used, we will update this page in advance and ask for consent again where the law requires it.

Questions: support@kupali.co.il. See also the privacy policy.