What cookies are
Cookies are small text files a website stores in your browser. They let the site remember things like your language, your session, or whether you've accepted analytics. Some cookies are first-party (set by us), others are third-party (set by services we use).
Categories we use
Essential cookies: needed for the site to work. They store your language choice, your consent preference, and keep you signed in. Cannot be disabled, because the site would not function without them.
Analytics cookies (optional): measure how our public pages are used, so we can improve them. They are only set on our public pages, and only after you accept them in the banner. Decline and none are set.
Marketing cookies (optional): measure whether our advertising on Google and LinkedIn leads to sign-ups and trials. They are only set on our public pages, and only after you accept marketing cookies in the banner. Decline and the advertising tags are never loaded.
The specific cookies
NEXT_LOCALE (essential, first-party): stores your language choice (EN or ES). Expires when you close the browser or after 1 year.
cookieyes-consent (essential, first-party): remembers the choice you made in the consent banner, so we do not ask again on every page. Expires after 1 year.
sekit:consent:v1 (essential, first-party, browser storage): our own copy of that same choice, which the site reads to decide whether to start analytics. Stays until you clear your browser data.
Google Analytics cookies, _ga and _ga_* (analytics, third-party): distinguish one visitor from another so we can count visits to our public pages. Expire after 2 years. Only set if you accept analytics.
PostHog browser storage (analytics, first-party): if you accept analytics, PostHog keeps an anonymous visitor identifier in your browser so a visit that spans several pages counts as one visit. If you decline, PostHog is never started on our public pages, so nothing is stored at all. If you accept and later change your mind, we clear that identifier when you decline.
Google Ads cookies, _gcl_* (marketing, third-party via our domain): record that you arrived from one of our Google ads, so a later sign-up or trial can be counted for that ad. Expire after 90 days. Only set if you accept marketing cookies.
LinkedIn Insight Tag cookies, li_fat_id, lidc, bcookie, AnalyticsSyncHistory and UserMatchHistory (marketing, first- and third-party): count sign-ups and trials that came from our LinkedIn ads. Expire after 1 day to 1 year depending on the cookie. Only set if you accept marketing cookies.
sekit:attribution:v1 (marketing, first-party, browser storage): the ad campaign and click identifier you arrived with, kept for 90 days so we know which campaign a trial came from; it is passed to our payment provider with your subscription. Only stored if you accept marketing cookies, and deleted when you decline.
sekit:conversions:v1 (marketing or analytics, first-party, browser storage): remembers which sign-up or trial we already counted, so a page reload does not count it twice. It holds our internal account number and the payment session reference for that event, never your name or email address, and it never leaves your browser.
The signed-in console sets no cookies
Once you sign in to the Sekit console, we do not load Google Tag Manager or Google Analytics, and we set no analytics or marketing cookies. That is why you see no cookie banner inside the product. If you arrived from a public page where they were already running, we instruct them to stop storing and measuring as the console loads.
We do still measure how the product is used, because we have to know whether it works. That product analytics is deliberately storage-free: it keeps nothing in your browser, so there is no cookie for you to accept or refuse. The events are linked to your account identifier and your firm identifier, never to your name, your email address, or your firm's name.
Because nothing is stored on your device, the legal basis there is our legitimate interest and the performance of our contract with your firm, not consent. You can object to it at any time by writing to privacy@sekit.ai. Our Privacy Policy explains this in full.
The client portal and invitation links are stricter still: they load no analytics whatsoever, because the link itself is a credential and we will not hand it to a third party.
How to manage cookies
On our public pages, use "Manage cookies" in the footer to change your choice at any time. Declining analytics stops the analytics cookies from being set and stops the analytics from running. Declining marketing stops us sending any conversion and tells Google to stop storing; a tag already loaded on the page you are viewing is gone the next time a page loads.
You can also block cookies in your browser settings, but blocking essential cookies will break parts of the site.
Third-party services
Google Ireland Limited (Google Tag Manager and Google Analytics): receives page-view and traffic data from our public pages, and only after you accept analytics cookies. It is not loaded inside the signed-in console.
PostHog (European Union): receives product-usage events. Data is processed on PostHog's EU infrastructure and does not leave the EU.
Google Ireland Limited (Google Ads): receives sign-up and trial conversions from our public pages, with the trial's plan value, and only after you accept marketing cookies. It is not loaded inside the signed-in console.
LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag): receives page views and sign-up and trial conversions from our public pages, and only after you accept marketing cookies. It is not loaded inside the signed-in console.
CookieYes: provides the consent banner itself and records your choice.
Transfers outside the EU, where they happen, are covered by the European Commission's Standard Contractual Clauses.
Do Not Track signals
Browsers can send a "Do Not Track" (DNT) signal. There is no industry consensus on how to honor DNT, so we treat any DNT signal as a default to "decline" in the consent banner. You can always change it back.
Changes to this policy
When we add a new cookie category or sub-processor, we update this page and re-prompt the consent banner so you can decide again. The date at the top shows when we last changed something material.