Legal

Cookie policy

Which cookies and similar technologies Keys2 uses, why, and how to change your choice. We only use analytics and marketing cookies if you say yes.

Last updated 22 October 2026

What cookies are

Cookies are small files a website stores in your browser so it can remember something about your visit, such as keeping you signed in. Similar technologies, such as your browser’s local storage, do the same job; this policy calls them all “cookies”. Some are set by us (first-party) and some by the services we use (third-party).

Your choice

Strictly necessary cookies are needed for the site and the Keys2 app to work, so they don’t need your consent. Analytics and marketing cookies are optional: when you first visit our website we ask whether you accept them, you can accept or reject each kind separately, and they are only set if you agree. Rejecting them doesn’t affect how the site works.

You can change your mind at any time:

Strictly necessary

NameProviderPurposeDuration
sb-…-auth-tokenKeys2 (via Supabase)Keeps you securely signed in to Keys2. Only set when you sign in.Until you sign out, or your session expires
keysto-agencyKeys2Remembers which agency workspace you are using, if you belong to more than one.1 year
keys2-cookie-consentKeys2 (local storage)Remembers which kinds of optional cookies you accepted or rejected, so we don't ask again.Until you clear it
keysto-themeKeys2 (local storage)Remembers your light or dark display choice, if you set one.Until you clear it
Cloudflare TurnstileCloudflareChecks that forms such as sign-in, sign-up and Book a demo are used by a person, not a bot.Session
__stripe_midStripeFraud prevention when you pay for or manage a subscription.1 year
__stripe_sidStripeFraud prevention during a payment session.30 minutes

How you found us

If you accept analytics cookies, we keep a note in your browser of how you arrived: the campaign tags in the web address (such as “utm_source”), the site that linked to you and the first page you saw. If you accept marketing cookies, we also keep any ad click identifier. It is deleted when you close the tab.

If you send us the Book a demo form, these details go with your request: they are saved with it and included in the email that notifies our team, so we know which of our campaigns work. A short summary of the source (for example, the campaign name or the referring site) is also passed to Google Tag Manager to record the request as a conversion. Google Tag Manager only runs if you have accepted analytics or marketing cookies.

NameProviderPurposeDuration
k2_attributionKeys2 (session storage)How you arrived at our website, sent with a demo request. Only with analytics or marketing consent.Until you close the tab
k2_demo_thanksKeys2 (session storage)Your first name and agency, to personalise the thank-you page after you book a demo.Until you close the tab

Analytics

Set only if you accept analytics cookies, and only on our public website, never inside the Keys2 app. Google’s tags are loaded through Google Tag Manager, which sets no cookies of its own and only loads once you have accepted analytics or marketing cookies.

NameProviderPurposeDuration
Metricool trackerMetricoolMeasures visits to our website, which pages are viewed and how visitors arrived (for example, from social media), so we can improve the site and our marketing.Set by Metricool
_gaGoogle AnalyticsDistinguishes visitors, so we can count visits and see how the site is used.2 years
_ga_…Google AnalyticsKeeps track of the current visit.2 years

Metricool and Google process this information for us. See our privacy policy for how we handle personal information.

Marketing

Set only if you accept marketing cookies, and only on our public website. They tell us which of our adverts bring visitors and demo requests, so we spend less on the ones that don’t. If you accept them and book a demo, your email address is shared with these platforms in a scrambled (hashed) form so they can match your request to an advert you clicked.

NameProviderPurposeDuration
_gcl_auGoogle AdsLinks a visit or demo request to a Google advert you clicked.3 months
_fbpMeta (Facebook, Instagram)Recognises your browser so Meta can report which of our adverts led to a visit.3 months
_fbcMeta (Facebook, Instagram)Records the Meta advert you clicked to reach us.3 months
li_fat_idLinkedInRecords the LinkedIn advert you clicked to reach us.30 days
li_sugrLinkedInHelps LinkedIn recognise your browser to measure our adverts.3 months
bcookie, lidcLinkedInIdentify your browser to LinkedIn and route its data (set on LinkedIn's own domain).1 year · 1 day
UserMatchHistoryLinkedInSyncs LinkedIn's advert measurement with our website.30 days
_ttpTikTokRecognises your browser so TikTok can report which of our adverts led to a visit.13 months
_tt_enable_cookieTikTokChecks that your browser accepts TikTok's measurement cookies.13 months
ttcsid, ttcsid_…TikTokKeeps track of the current visit for TikTok's advert measurement.Up to 13 months

Google, Meta, LinkedIn and TikTok use this information under their own privacy policies as well as on our behalf.

Managing cookies in your browser

Most browsers let you see, block and delete cookies in their settings. Blocking strictly necessary cookies will stop parts of Keys2 working, including signing in. For guidance, see:

Contact us

Questions about cookies? Email hello@keys2.io.