This Cookie Policy explains how Ken Technology LLC ("Ken," "we," "us," or "our") uses cookies and similar technologies on our marketing websites. It should be read with our Privacy Notice.
This page is for website visitors. Product usage of the Ken platform may involve additional technologies described in the Privacy Notice and Data Processing Addendum.
1. What are cookies and similar technologies?
Cookies are small text files stored on your device when you visit a website. We also use similar technologies that store or access information on your device, including:
- local storage and session storage
- pixels and tracking scripts
- session recording libraries
- security and bot-protection scripts
Under EU and UK rules, "storage and access" technologies are treated similarly to cookies when they store or read information on your device.
2. How we use these technologies
We use cookies and similar technologies to:
- run and secure the website (strictly necessary)
- remember your cookie preferences
- measure site usage and diagnose issues (analytics; in the EEA, the UK and Switzerland only with your consent)
- attribute affiliate referrals so we can pay partners who sent you here
- support demo booking, bot protection, and media playback when you use those features
We do not use third-party advertising or retargeting pixels. We do load PromoteKit to attribute affiliate referrals (not ads).
3. Your choices
If you visit from the EEA, the UK or Switzerland, we show a cookie banner on your first visit with:
- Reject all - only necessary technologies
- Manage - choose categories
- Accept all - necessary and analytics
Elsewhere we show no banner and Analytics is on by default. We tell the two apart by the country of your IP address, which our CDN (Cloudflare) reports with each request, and we store only the result in the ken_ cookie.
Wherever you are, you can change your choice anytime in (in the EEA, the UK and Switzerland, also from the website footer). You can also use browser controls to block or delete cookies. Blocking necessary cookies may break parts of the site.
Categories
| Category | Default | What it does |
|---|---|---|
| Necessary | Always on | Security, load balancing, bot protection, consent memory, affiliate referral attribution, and essential site function |
| Analytics | Off until you opt in (EEA, UK, Switzerland); on elsewhere until you turn it off | PostHog product analytics, page views, and session replay (form inputs masked) |
Session replay is included under Analytics. Recordings mask form inputs by default and do not record cross-origin booking iframes (for example Cal.com).
Global Privacy Control (GPC)
Where required by applicable U.S. state privacy laws, we treat a recognized opt-out preference signal such as Global Privacy Control as a request to opt out of sale, sharing, or targeted advertising for that browser. We do not run advertising or retargeting pixels. Affiliate referral tracking (PromoteKit) is not an ad pixel; it attributes a signup so we can pay the partner who sent you. You can still manage Analytics in .
4. Cookie and technology inventory
Durations are approximate and may change when providers update their products. First-party cookies are set on the host you visit (ken.so or getken.ai separately).
Necessary
| Name / technology | Provider | Purpose | Typical duration |
|---|---|---|---|
ken_ (localStorage) | Ken | Stores your cookie category choices and version | Up to 12 months (then we re-prompt) |
ken_ (HTTP cookie) | Ken | Remembers whether your country needs the cookie banner (eu or other, nothing else) | 30 days |
ken_ (HTTP cookie, httpOnly) | Ken | Internal sales demo bypass for the personalization tool | 30 days |
ken_ (sessionStorage) | Ken | Client marker for the same demo bypass | Session |
__cf_, cf_, related Cloudflare cookies | Cloudflare | Bot management and security challenges | Minutes to session |
| Cloudflare Turnstile tokens | Cloudflare | Bot protection on Ken Daily signup and the personalization demo | Short-lived |
| Cloudflare Stream player storage (when video is used) | Cloudflare | Deliver homepage video | As set by Stream |
promotekit_ (HTTP cookie) | PromoteKit / Ken | Stores the affiliate referral id after you arrive with ?ref= (or aff / via / promocode) so a later purchase can be attributed | About 60 days |
https://cdn. | PromoteKit | Reads the referral query, sets the cookie, and exposes window. | N/A (script) |
Network requests to https://www. and /refer | PromoteKit | Resolve and attach the referral id | N/A (request, not a cookie) |
Analytics (consent required in the EEA, the UK and Switzerland)
| Name / technology | Provider | Purpose | Typical duration |
|---|---|---|---|
PostHog first-party cookies and local storage (often ph_ and related keys) | PostHog | Distinct visitor ID, session, feature flags, analytics | Often up to ~1 year for persistence keys; session for short-lived values |
| PostHog session recording | PostHog | Reconstruct page interactions to debug UX (inputs masked) | Per session; retained in PostHog per project settings |
Network requests to /ingest (first-party proxy to PostHog US Cloud) | Ken / PostHog | Send analytics and replay payloads | N/A (request, not a cookie) |
For visitors in the EEA, the UK and Switzerland, PostHog starts opted out: capture and session recording begin only after you accept Analytics (or Accept all). Elsewhere, PostHog captures from your first page view until you turn Analytics off in .
Functional third parties loaded when you use a feature
| Technology | Provider | When it loads | Notes |
|---|---|---|---|
| Cal.com embed / booking links | Cal.com | Contact page embed and demo booking links | May set Cal.com cookies inside their domain or iframe. Used when you choose to book a demo. |
| Google fonts pipeline | Next.js font optimization | Build / first paint | Fonts are self-hosted by Next.js at runtime where possible. |
Ken app (app.ken.so, signed-in customers only)
When you are signed in to app.ken.so as a customer, the app loads Customer.io (see the Privacy Notice, section 8.3). Everything below is set only on app.ken.so after you sign in. It is never set on this marketing website, for Ken staff, or on white-label hosts.
| Name / technology | Provider | Purpose | Typical duration |
|---|---|---|---|
ajs_ (HTTP cookie and localStorage) | Customer.io | Random ID for this browser, so the app's events stay linked to each other | Cookie 1 year; localStorage until you clear site data |
ajs_ (HTTP cookie and localStorage) | Customer.io | Your Ken user ID, so events and in-app messages reach your Customer.io profile | Cookie 1 year; localStorage until you clear site data |
ajs_ (localStorage) | Customer.io | The details the app sends about you: your browser time zone and when you last signed in | Until you clear site data |
persisted-queue:v1:event-queue:* and persisted-queue:v1:dest-Customer. (localStorage) | Customer.io | Keep events that were not sent yet when you leave a page, so they go out on your next page load | Until the next page load, then removed |
s:context. (HTTP cookie) | Customer.io | Set only if an app.ken.so address carries a btid or urid ad ID, which Ken's links do not use; remembers that ID for later events. The SDK scopes this one cookie to all of ken.so | Browser session |
gist. (localStorage) | Customer.io | Your Ken user ID, so in-app messages for your account can load | 30 days |
gist. (localStorage) | Customer.io | A copy of the browser's random ID, for in-app message targeting | 30 days |
gist. (localStorage) | Customer.io | In-app messaging session | 30 minutes, renewed while you use the app |
gist., gist., gist. (localStorage) | Customer.io | Which in-app messages you have seen, dismissed or snoozed, and a short cache of messages waiting for you | Message cache up to 1 hour; seen, dismissed and snoozed state up to 1 year |
Other gist. keys (localStorage), such as gist., gist. and gist. | Customer.io | Cache message templates and display settings, and pace checks for new messages | Up to 1 hour |
gist. (sessionStorage) | Customer.io | Tells the in-app messaging library to keep its keys in localStorage | Session |
ken:customerio:last-login:<user id> (sessionStorage) | Ken | Marks that this browser session already reported your sign-in, so last login is sent once per session | Session |
Network requests to cdp. and *.gist. | Customer.io | Send the app's events and load in-app messages | N/A (request, not a cookie) |
5. Legal bases (EU / UK)
Where the EU ePrivacy rules, UK PECR, GDPR, or UK GDPR apply:
- Necessary technologies rely on the strictly necessary exception (and related security exceptions).
- Analytics (and any non-essential storage or access) relies on your consent, which you can withdraw at any time via Cookie settings.
U.S. state privacy laws generally use an opt-out model for sale, sharing, and targeted advertising. Outside the EEA, the UK and Switzerland, Analytics is on by default and you can turn it off at any time in .
6. Do not sell or share
We do not sell personal information for money. We do not currently run advertising or cross-context marketing pixels on this marketing website.
Use to manage Analytics, or email [email protected] with the subject line "Do Not Sell or Share."
7. International transfers
Analytics providers may process data in the United States and other countries. See our Privacy Notice for transfer safeguards (including standard contractual clauses where required). PostHog for this website is currently configured on PostHog US Cloud, reached through a first-party /ingest proxy on our domain.
8. How long we keep preference records
We store your category choices in local storage on your device for up to 12 months, or until you clear site data. If we change consent categories or purposes in a material way, we bump an internal consent version and ask again.
9. Updates
We may update this Cookie Policy when our technologies or legal requirements change. The "Last updated" date at the top will change when we do. Material changes to categories will re-prompt the banner via a new consent version.
10. Contact
Questions about cookies or privacy: [email protected]
Related documents: