What cookies are
Cookies are small text files a website stores in your browser. They let the site remember things like your language, your session, or whether you've accepted analytics. Some cookies are first-party (set by us), others are third-party (set by services we use).
Categories we use
Essential cookies: needed for the site to work. They store your language choice, your consent preference, and keep you signed in. Cannot be disabled, because the site would not function without them.
Analytics cookies (optional): measure how our public pages are used, so we can improve them. They are only set on our public pages, and only after you accept them in the banner. Decline and none are set.
Marketing cookies (optional): reserved for advertising measurement. We do not use any today. If we ever do, they stay in their own opt-in category and are listed here before they go live.
The specific cookies
NEXT_LOCALE (essential, first-party): stores your language choice (EN or ES). Expires when you close the browser or after 1 year.
cookieyes-consent (essential, first-party): remembers the choice you made in the consent banner, so we do not ask again on every page. Expires after 1 year.
sekit:consent:v1 (essential, first-party, browser storage): our own copy of that same choice, which the site reads to decide whether to start analytics. Stays until you clear your browser data.
Google Analytics cookies, _ga and _ga_* (analytics, third-party): distinguish one visitor from another so we can count visits to our public pages. Expire after 2 years. Only set if you accept analytics.
PostHog browser storage (analytics, first-party): if you accept analytics, PostHog keeps an anonymous visitor identifier in your browser so a visit that spans several pages counts as one visit. If you decline, PostHog is never started on our public pages, so nothing is stored at all. If you accept and later change your mind, we clear that identifier when you decline.
The signed-in console sets no cookies
Once you sign in to the Sekit console, we do not load Google Tag Manager or Google Analytics, and we set no analytics or marketing cookies. That is why you see no cookie banner inside the product. If you arrived from a public page where they were already running, we instruct them to stop storing and measuring as the console loads.
We do still measure how the product is used, because we have to know whether it works. That product analytics is deliberately storage-free: it keeps nothing in your browser, so there is no cookie for you to accept or refuse. The events are linked to your account identifier and your firm identifier, never to your name, your email address, or your firm's name.
Because nothing is stored on your device, the legal basis there is our legitimate interest and the performance of our contract with your firm, not consent. You can object to it at any time by writing to privacy@sekit.ai. Our Privacy Policy explains this in full.
The client portal and invitation links are stricter still: they load no analytics whatsoever, because the link itself is a credential and we will not hand it to a third party.
How to manage cookies
On our public pages, use "Manage cookies" in the footer to change your choice at any time. Declining analytics stops the analytics cookies from being set and stops the analytics from running.
You can also block cookies in your browser settings, but blocking essential cookies will break parts of the site.
Third-party services
Google Ireland Limited (Google Tag Manager and Google Analytics): receives page-view and traffic data from our public pages, and only after you accept analytics cookies. It is not loaded inside the signed-in console.
PostHog (European Union): receives product-usage events. Data is processed on PostHog's EU infrastructure and does not leave the EU.
CookieYes: provides the consent banner itself and records your choice.
Transfers outside the EU, where they happen, are covered by the European Commission's Standard Contractual Clauses.
Do Not Track signals
Browsers can send a "Do Not Track" (DNT) signal. There is no industry consensus on how to honor DNT, so we treat any DNT signal as a default to "decline" in the consent banner. You can always change it back.
Changes to this policy
When we add a new cookie category or sub-processor, we update this page and re-prompt the consent banner so you can decide again. The date at the top shows when we last changed something material.