Cookie Policy

Last Updated: August 6, 2026

Cookie Summary

CommentKeyword uses essential cookies for authentication, security, OAuth, and product functionality. Optional analytics, advertising, and support tools are controlled by cookie preferences where required and should not run unless the relevant preference allows them.

1. What Cookies and Similar Technologies Are

Cookies are small files stored on your device. Similar technologies include local storage, session storage, pixels, tags, SDKs, and scripts that store or access information on your device or browser.

2. How We Manage Consent

In regions that require prior opt-in consent for non-essential cookies, we show a cookie banner before optional analytics, marketing, or support cookies should be used. In regions where prior opt-in is not required, optional cookies may be enabled by default, but you can opt out at any time.

You can reopen cookie preferences from the footer link labeled "Privacy Choices." We also honor Global Privacy Control signals as an opt-out of marketing cookies used for sale or sharing where applicable.

3. Cookie Categories

3.1 Strictly Necessary Cookies

These are required for the website or Service to work and cannot be disabled through our cookie tool.

Technology	Purpose	Typical Duration
session	Email/password authentication session	Up to 30 days or until sign-out
authjs / next-auth cookies	Google/Facebook OAuth login session and CSRF protection	Session to 30 days
oauth_state	Protect Instagram OAuth connection flow from request forgery	Short-lived
signup-timezone	Capture timezone during signup for scheduling and account defaults	Short-lived

3.2 Functional Storage

These improve product behavior but are not used for cross-site advertising.

Technology	Purpose	Typical Duration
ck-cookie-consent-v1	Stores your cookie preferences	Until cleared or updated
ck-analytics-consent	Makes your saved analytics choice available during authentication redirects	Up to 1 year
ck-signup-promo / ck-signup-promo-history	Preserves recent signup and partner codes so the last redeemable code can be applied during signup	Up to 30 days, or removed after signup
ck-billing-lock-modal-last-shown-at	Prevents repeated billing lock prompts in a short period	Until cleared or overwritten

3.3 Analytics Cookies

Analytics technologies help us understand site and product usage. When configured, Google Analytics measures page views, sessions, device and approximate-location information, and related usage events. Microsoft Clarity provides usage diagnostics, heatmaps, and session replay. These tools load only when the analytics preference permits them, and their advertising-storage features are disabled by our integration.

Provider / Technology	Purpose	Typical Duration
Google Analytics (_ga, _ga_*)	Distinguishes visits and measures website and product usage	Up to 2 years, subject to our configuration and your choices
Microsoft Clarity (_clck, _clsk, and Microsoft-domain cookies)	Usage diagnostics, heatmaps, and session replay	Session to 1 year, depending on the cookie
ck-signup-method / ck-pending-sign-up-event	Carries a consented signup event safely across email or social-authentication redirects	Up to 10 minutes

3.4 Marketing Cookies

Marketing cookies may be used to measure ads, attribute conversions, and build remarketing audiences. If tools such as Google Ads, Meta Pixel, or LinkedIn Insight Tag are enabled in production, they should be gated behind the marketing preference and disabled when a Global Privacy Control signal or opt-out applies.

Technology	Purpose	Typical Duration
ck-first-touch-attribution-v1	Temporarily preserves the first consented UTM and advertising click-ID attribution until it can be attached to an authenticated workspace	Up to 90 days, or removed sooner after attribution is stored
ck-last-touch-attribution-v1	Preserves the most recent consented non-direct campaign touch used for signup attribution	Up to 30 days, or removed sooner after attribution is stored

3.5 Support Cookies

Support cookies may be used for customer support chat or helpdesk widgets. The codebase does not currently load a third-party support chat widget. If a support widget is added later, it should be gated behind the support preference where required.

3.6 Third-Party Essential Services

Stripe: checkout, billing portal, payment security, fraud prevention, and subscription management
Meta and Google: OAuth login or Instagram/Facebook connection flows when you choose to use those features

4. Current and Planned Optional Tools

Tool	Status	Category
Google Analytics	Enabled when configured and analytics consent permits	Analytics
Microsoft Clarity	Enabled when configured and analytics consent permits	Analytics
Google Ads	Planned or deployment-dependent	Marketing
Meta Pixel	Planned or deployment-dependent	Marketing
LinkedIn Insight Tag	Planned or deployment-dependent	Marketing

5. Managing Your Preferences

Use the "Privacy Choices" link in the footer to accept, reject, or customize optional cookies
Use browser settings to delete or block cookies generally
Enable Global Privacy Control if you want a browser-level opt-out from marketing sale/share signals where applicable
Use provider-level controls such as Google ad settings, Meta ad preferences, or LinkedIn ad settings where those tools are active

6. Regional Notes

6.1 European Economic Area, United Kingdom, Switzerland, and Similar Regions

Non-essential analytics, marketing, and support cookies require consent before use. Essential cookies needed to provide a service you request, such as authentication and security cookies, do not require prior consent.

6.2 California and Similar US State Laws

Some advertising cookies may be considered a sale, sharing, targeted advertising, or cross-context behavioral advertising under state privacy laws. We do not currently sell personal information for money. If marketing tags are enabled, you can opt out through "Privacy Choices" and Global Privacy Control.

7. Changes to This Policy

We may update this Cookie Policy when our tools, providers, consent behavior, or legal obligations change. If we add new optional tracking tools, we should update this page and ensure those tools respect the relevant consent category.