Cookie Policy
Last updated: October 12, 2026
This Cookie Policy explains how Slickup LLC, doing business as Kapiway (“Kapiway”, “we”), uses cookies and similar technologies on kapiway.com and in the Kapiway app.
What are cookies?
Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences and understand how you interact with it. Some cookies are essential for the site to work, while others help us improve your experience.
How we use cookies
We use cookies for the following purposes:
- Necessary cookies: Required for the website to function. These enable core features like authentication and storing your cookie preferences, and a preference cookie with your country (
kw_country) so we show the right banner and prices. - Analytics: Google Analytics, to count visits and see how people use our website and app. Its script and measurements pass through our own domain (the /gtag/js and /ga paths on kapiway.com forward to Google).
- Session recordings: Microsoft Clarity replays and heatmaps. Signed-in pages are fully masked, and every form field is masked on public pages.
- Advertising: the Meta Pixel, the LinkedIn Insight Tag and the Paved pixel (which Google Tag Manager loads) and Google Ads conversion cookies (
_gcl_au,_gcl_aw) to measure and show our ads, and RB2B, Snitcher and Apollo’s website tracker (which Google Tag Manager also loads) to identify business visitors we may follow up with.
These tools run on our public website and in the signed-in app. What you see and what runs depends on where you are:
- EEA, Switzerland and Canada, and wherever we cannot tell where you are: a box with three equal buttons, Accept all, Reject all and Customize. Nothing beyond necessary cookies runs until you accept it, and nothing is pre-ticked. Analytics covers Google Analytics and Microsoft Clarity. Before you choose, Google may receive pings without cookies (Google’s Consent Mode), and no cookies are set. The box says we use Snitcher and Apollo to find out which company a visitor works for, so we can follow up; both run only if you accept Advertising. RB2B never loads here. We keep your choice for 6 months.
- United Kingdom: the same three buttons. Site statistics (Google Analytics only, with no advertising use) run unless you switch them off in Customize or choose Reject all. Session recordings, advertising, Snitcher and Apollo stay off until you accept them. RB2B never loads here. We keep your choice for 1 year after Accept all, and for 6 months after any other choice.
- Everywhere else, for example the United States: a slim notice bar with OK and Your Privacy Choices. Before you click OK, only necessary cookies and Google Analytics statistics run. The ad and identification tags (the Meta Pixel, the LinkedIn Insight Tag, the Paved pixel and Apollo’s website tracker through Google Tag Manager, Snitcher and RB2B) and Microsoft Clarity start only after you click OK. We keep your choice for 1 year.
When we add a new tool or use one for a new purpose, we ask again. Each time you make a choice we keep a record of it (the choice, the time, your IP address and browser) as evidence, for 3 years. After you choose Reject all (in the EEA, the UK, Switzerland and Canada), or turn Analytics off (elsewhere), Google Analytics no longer loads at all on the pages you open next. The video in setup shows only its YouTube poster image until you click play; then the youtube-nocookie player loads from YouTube.
Your Privacy Choices. The link of that name at the bottom of every page, including sign up, sign in, shared reports and invitations, and in Settings in the app, opens your cookie choices at any time. Outside the EEA, the UK, Switzerland and Canada it has three switches: Sharing for ads, Session recording and Analytics. Turning off Sharing for ads (Advertising in the EEA, the UK, Switzerland and Canada), or choosing Reject all, opts you out of the sale or sharing of your personal information and of targeted advertising. When you turn a category off, we clear its cookies and the page reloads so the tools you turned off stop at once (a tool may send one last signal while the page reloads), and when you are signed in we also stop sending your conversions to ad platforms from our servers. We treat a Global Privacy Control signal from your browser the same way as turning off Sharing for ads, and your choices then show “Opt-out preference signal honored”.
Cookies we use
| Tool and purpose | Provider | Category | Cookies | Expiry |
|---|---|---|---|---|
| AuthenticationKeeps you signed in: a short-lived sign-in token, a refresh token that renews it, and a marker that a session exists. Page scripts cannot read them. | KapiwayFirst party | Necessary | access_token, refresh_token, kw_session | 30 minutes (access_token); 7 days (refresh_token, kw_session) |
| Cookie ConsentStores your cookie choice. | KapiwayFirst party | Necessary | cc_cookie | 6 months, or 1 year after Accept all in the UK and after OK outside the EEA, UK and Switzerland |
| CountryA preference cookie: remembers the country you picked (or the one we worked out from your location) so prices and pages show for the right place. | KapiwayFirst party | Necessary | kw_country | 1 year |
| Google reCAPTCHAProtects our public forms (the website read on /start, the AI readiness report, the waitlist and the form to hear about new services that handle your data) from spam and abuse. It loads only when you start using one of these forms. Google processes this data for us as our processor, only to check that a person, not a bot, is using the form. | Google LLCThird party | Necessary | _GRECAPTCHA | 6 months |
| Google AnalyticsMeasures how people use our website and app (pages viewed, how they arrived, sign ups). In the EEA, Switzerland and Canada it runs without cookies until you choose, and after a no it does not load at all. In the UK it runs as site statistics unless you switch it off, with no advertising use. | Google LLCFirst party | Analytics | _ga, _ga_* | Up to 2 years |
| Google Tag ManagerLoads our advertising tags (the Meta Pixel, the LinkedIn Insight Tag and the Paved pixel) and Apollo's website tracker. It loads only when advertising is allowed (in the US, after you click OK or save choices with it on). Tag Manager itself sets no cookies. | Google LLCThird party | Advertising | None | Not applicable |
| Microsoft ClarityRecords session replays and heatmaps of how pages on our website and in the app are used, so we can spot problems (rage clicks, dead clicks, broken flows) we wouldn't see in aggregate analytics. Signed-in pages are fully masked, and every form field is masked on public pages. | MicrosoftFirst and third party | Session recordings | _clck, _clsk, CLID, MR, MUID, ANONCHK, SM | Up to 1 year (CLID on clarity.ms: 1 year) |
| Google AdsLinks a visit to the Google ad that brought it, so we can measure our Google ads. Set only when you allow advertising. | Google LLCFirst party | Advertising | _gcl_au, _gcl_aw | 90 days |
| Meta PixelMeasures which of our Meta (Facebook and Instagram) ads lead to visits and sign ups, and lets us show our ads to people who visited. Its cookies also feed the server-side conversions described in our Privacy Policy. | Meta PlatformsFirst party | Advertising | _fbp, _fbc | 90 days |
| LinkedIn Insight TagMeasures which of our LinkedIn ads lead to visits and sign ups, and lets us show our ads to people who visited. li_fat_id also feeds the server-side conversions described in our Privacy Policy. li_adsId is kept in your browser's storage. | LinkedInFirst and third party | Advertising | li_fat_id, bcookie, lidc, li_sugr, UserMatchHistory, li_adsId (browser storage) | Up to 1 year |
| PavedMeasures which of our ads in newsletters on the Paved network lead to visits and sign ups. | PavedThird party | Advertising | __cf_bm (on pvdpix.com) | 30 minutes |
| ApolloApollo's website tracker, loaded by Google Tag Manager. It tells us which company a visitor works for, so we can follow up, and for visitors in the US it may match the visit to a person in Apollo's business contact database. For that match it may load a script from Apollo's partner LiveIntent, which can set its own cookies. | ApolloFirst and third party | Advertising | apolloAnonId (browser storage), page views waiting to be sent and a tracking note, named after our Apollo account id (browser storage), liveIntentData (browser storage) | Visitor id until cleared; tracking note and liveIntentData 1 day |
| RB2BIdentifies business visitors from the US on our website and in the app (name, company, work email, LinkedIn profile) so we can follow up with the right person when they don't sign up directly. It starts only after you click OK or save choices with it on, and never loads in the EEA, Canada, the UK or Switzerland. | RB2BFirst party | Advertising | _reb2b_v3 | 1 year |
| SnitcherIdentifies the company (not the person) a visitor to our website or app works for, worldwide, from the visitor's IP address. Used to follow up with businesses that didn't sign up directly. It starts only when advertising is allowed (in the US, after you click OK). | SnitcherFirst party | Advertising | snitcher_device_id (cookie); in browser storage: snitcher_device_id, snitcher_device_id_expires, snitcher_session, snitcher_session_expires, and radar_sn_* (this tab only) | 1 year (cookie); browser storage until cleared, radar_sn_* until the tab closes |
First-party cookies are set on kapiway.com, even when another company’s script sets them; third-party cookies are set on the provider’s own domain. Some marketing and analytics cookies (e.g. Meta’s _fbp / _fbc) also feed our server-side conversion measurement, which is gated on the same consent choices. See “Advertising and conversion measurement” in our Privacy Policy.
What we clear when you turn a category off
When you turn a category off, we delete these cookies from kapiway.com and reload the page:
- Analytics (site statistics in the UK):
_gaand_ga_*(Google Analytics; it does not set_gid); in the EEA, Switzerland and Canada also Clarity’s_clckand_clsk. - Session recordings:
_clckand_clsk(Microsoft Clarity). - Advertising (Sharing for ads):
_fbpand_fbc(Meta);_gcl_auand_gcl_aw(Google Ads);li_fat_id,li_adsId,li_sugr,li_gc,bcookie,lidc,UserMatchHistoryandAnalyticsSyncHistory(LinkedIn);_reb2b*(RB2B); andsnitcher_device_idandSNID(Snitcher, which also keeps a visitor id in local and session storage). We also clear Apollo’s items in local storage (see Other browser storage) and the cookies LiveIntent’s script may set on our domain for Apollo.
We can only clear cookies set on our own domain. Cookies a provider keeps on its own domain stay with that provider, for example LinkedIn’s cookies on linkedin.com, Clarity’s CLID on clarity.ms, and __cf_bm, a bot check cookie that Cloudflare sets on Paved’s domain when the Paved pixel loads. You can delete them from your browser settings or the provider’s own privacy controls.
Other browser storage
We also keep a few small items in your browser’s local storage or session storage. Except Snitcher’s and Apollo’s, they stay on your device, are not sent to advertisers, and are needed for the site and app to work as you expect:
- your site language (
kw-lang) and which consent rules apply where you are (kw_consent_regime); - the campaign details of the link you arrived from, until you sign up (
kapiway:attribution:v1); - the website read you started on /start, so you can pick up where you left off (
kw_front_door_scan); - the work email you gave for an AI readiness report, so sign up can open with it filled in, kept for 1 day (
kw_lead_email); - exchange rates for showing estimated local prices (
kapiway_fx_rates); - where you were in sign up, checkout and setup (for example
pending_plan,pending_site_url,checkout_return_to,kapiway-signup-terms,onb-step-*,onb-trial-started-*,loc-*); - your last project, the location view you picked and small display choices on your daily list (for example
kapiway:last_project_id,lens:*,kapiway.radar.*,kapiway:small-numbers-seen:*); - your best score in the memory game shown while your project is set up (
seo_memory_best); - a security value used while you connect LinkedIn (
linkedin_oauth_state); - if you turn on browser notifications, a small service worker from our site that receives and shows them, until you turn notifications off;
- Snitcher’s visitor id in local and session storage, only when Snitcher is allowed to run (see above); and
- Apollo’s items in local storage, only when advertising is allowed (see above): a random visitor id (
apolloAnonId), the page views still waiting to be sent to Apollo and a one-day note of whether Apollo may track the visit (names starting with our Apollo account id), and, when Apollo’s partner LiveIntent finds one, a scrambled (hashed) email address linked to your browser, kept for a day (liveIntentData).
You can clear them at any time from your browser settings.
How to manage cookies
You can change your cookie preferences at any time by clicking the button below. You can also delete cookies from your browser settings.
Browser cookie controls
Most browsers allow you to control cookies through their settings. You can block or delete cookies, but this may affect your experience on our site. Visit your browser's help page for instructions on how to manage cookies.
Contact us
If you have questions about our use of cookies, please contact us at support@kapiway.com.