The whole list
kg_lead. Set only when you submit your email address on a free report. It contains that address and a signature that stops it being edited. The buying questions on a free report open, you are not asked for the address again, and the sites you scan later from the same browser are recorded against it.
It lasts a year, it cannot be read by scripts in the page, and it is never sent anywhere but back to this site.
keigeo_admin. Set only on our own staff login at /admin, scoped to that page. It holds a signed session and no personal information, and a visitor never receives it.
kg_optout. Set only when you turn off sharing with Meta on the Your Privacy Choices page. It contains the number 1, and while it is there nothing from this browser is sent to Meta. It lasts a year and cannot be read by scripts in the page.
What this site does not set
No analytics cookie, because there is no analytics. No advertising cookie, because there is no advertising tag on any page here. The only third-party script is Cloudflare Turnstile, which loads when you submit a scan or an email address and checks that a person sent the request.
Your theme choice, light or dark, is kept in your browser's local storage rather than a cookie. It never leaves the machine.
Advertising, and how it works here without a tracker
We run ads on Meta. To know whether an ad led anywhere, we report three events from our own server: that somebody asked for a report by email, that somebody started a checkout, and that somebody bought one. The identifier sent is a SHA-256 hash of the email address you gave us, which Meta matches against its own accounts. A report request and a started checkout also send your IP address, your browser's user agent, and, when you arrived from a Meta ad, the click ID Meta added to the link. A completed purchase is reported by our server after Stripe tells it the payment succeeded, so it carries the hashed address and that click ID but not your IP address or user agent, which our server no longer has at that point. To stop all of this for your browser, use the Your Privacy Choices page; a Global Privacy Control or Do Not Track signal stops it too.
This is the Conversions API rather than the usual browser pixel, and the difference matters to you: nothing is placed in your browser. It costs us some advertising precision. It is worth it on a site whose product is honest measurement.
Paying
Checkout happens on Stripe's own pages, not ours. Stripe sets its own cookies there for fraud prevention, under its own policy, and we never see your card details.
Turning it off
Refuse or delete cookies in your browser and this site keeps working. The only difference is that the scan form and a free report ask for your email address again.
To stop the notes, use the unsubscribe link on any note we send. To have an email address removed entirely, write to hello@keigeo.com.
Last updated 2026-09-23.