Every cookie we set, and the switches for the ones you can turn off.
Nothing here is for advertising, and nothing here is sold or shared. Apart from Stripe's, on the payment page, every cookie here is our own.
Your choices
Analytics is on unless you turn it off. Turn it off and we stop Google Analytics and PostHog, delete their cookies, and honor that on every visit after. Sales, shipments, refunds, and giveaway entries are still counted, with nothing that identifies you. Error reporting is separate and always on; with analytics off it carries no device id.
Essential
These keep the site working and are on for everyone.
| Cookie | What it does | Lasts |
|---|---|---|
sessionid | Keeps you signed in, and keeps a build you started before signing up. | 90 days |
csrftoken | Protects forms from forgery. | 1 year |
ky_consent | Remembers the choice you make on this page. | 400 days |
ky_ref, ky_ref_src | Credits the friend whose link brought you here. | 90 days |
ky_stage | On the preview site only: the door key. | 30 days |
Set by Stripe when you pay
Our payment page is Stripe's, and Stripe sets these to stop card fraud. They're part of paying, so they're on for everyone who reaches checkout. Creator partners see them on their payout pages too.
| Cookie | What it does | Lasts |
|---|---|---|
__stripe_mid | Stripe: fraud prevention while you pay. | 1 year |
__stripe_sid | Stripe: fraud prevention for this visit. | 30 minutes |
Analytics
These are set only while analytics is on.
| Cookie | What it does | Lasts |
|---|---|---|
ky_did | A random id so two visits from one device count as one. | 400 days |
_ga, _ga_* | Google Analytics: which pages you visit and what you buy. | 2 years |
ph_* | PostHog: how you move through the builder (also kept in your browser's storage). | 1 year |
Marketing
We set no marketing cookies today. The switch above is there so that if we ever add one, it starts off and stays off until you say otherwise.
The privacy policy says what we do with what these collect.