What does 'kavachOS' mean?

kavachOS is a portmanteau of 'kavach' (Sanskrit for 'armor') and 'OS' (operating system). The name describes the library's role: an operating layer that shields every identity, call, token, and delegation in an application.

How is 'kavach' pronounced?

Ka-vach. In Sanskrit (कवच), it means 'armor': the layered, protective armor warriors wore into battle.

A TypeScript library for authentication and authorization, covering both AI agents and human users. It provides identity, permissions, delegation chains, audit trails, and MCP OAuth 2.1 in a single package. MIT licensed, edge-native.

Legal

Cookie policy

Last updated: April 19, 2026

What are cookies

Cookies are small text files stored in your browser when you visit a website. We use a small number of cookies to operate kavachOS Cloud and understand how visitors use the marketing site. We do not use cookies for advertising or cross-site tracking.

Cookies we set

Session cookies (essential)

When you sign in to the kavachOS Cloud dashboard, we set a secure, HttpOnly session cookie. This cookie is strictly necessary to keep you authenticated. It expires when you sign out or after a period of inactivity. You cannot opt out of this cookie without losing access to the dashboard.

kv_session — authenticated session token, HttpOnly, Secure, SameSite=Strict

Analytics cookies (PostHog)

The kavachOS marketing site uses PostHog to understand how visitors navigate the site. PostHog collects page views, button clicks, and general usage patterns. It does not build advertising profiles or share data with third-party ad networks.

PostHog data is ingested directly to our own PostHog instance. No data passes through posthog.com servers for marketing site visitors; we use a first-party reverse-proxy endpoint at /ingest on this domain.

ph_* — PostHog session and distinct-ID cookies, persistent up to 1 year

Vercel Analytics (no cookies)

We also use Vercel Web Analytics for page-level performance monitoring. Vercel Analytics operates without cookies and without storing personally identifiable information.

Cookies we do not set

We do not set advertising cookies, retargeting pixels, or any third-party tracking cookies. We do not use Google Analytics, Facebook Pixel, or similar ad-network trackers.

How to opt out

You can opt out of PostHog analytics at any time. To do so, open your browser developer tools and delete cookies matching the ph_ prefix from this domain. Alternatively, you can use a browser extension that blocks JavaScript-based analytics (such as uBlock Origin) and PostHog will not initialize.

You can also use your browser settings to block or delete all cookies. Note that blocking essential session cookies will prevent you from signing in to the dashboard.

Changes to this policy

If we add new cookies or change how we use existing ones, we will update this page and revise the date above. Material changes will be communicated via the dashboard notice banner.

Contact

Questions about this policy? Email us at hello@kavachos.com.