Legal
Cookies Policy
Effective 1 July 2026
This Cookies Policy explains how WhatKeywords uses cookies and similar tracking technologies on whatkeywords.com. It supplements our Privacy Policy.
1. What cookies are
Cookies are small text files that a website stores on your device (computer, phone, tablet) when you visit. They let the site remember information about you — like whether you're signed in, your preferences and how you use the site — and can also be used for analytics and marketing.
"Similar technologies" includes localStorage, sessionStorage, and pixel tags. We treat those the same way as cookies below.
2. Categories of cookies we use
We group cookies into two categories:
| Category | Purpose | Opt-out? |
|---|---|---|
| Strictly necessary | Sign-in / session, security, brute-force protection, load balancing. | No — the app can't work without them. |
| Analytics | Understand how the product is used so we can improve it (PostHog). Aggregated, no identity-level ad targeting. | Yes — via your browser's Do Not Track / GPC signal or an in-app toggle in Settings. |
We do not use advertising cookies, cross-site tracking or third-party ad networks.
3. Specific cookies you may see
| Cookie | Set by | Lifetime | Purpose |
|---|---|---|---|
| access_token | WhatKeywords | 15 minutes | Signed-in session (httpOnly, Secure, SameSite=None). |
| refresh_token | WhatKeywords | 7 days | Renew the access token without re-login (httpOnly). |
| ph_* | PostHog | 1 year | Anonymous product-analytics tracking. IP masked. |
| __cf_bm | Cloudflare | 30 minutes | Bot management & DDoS mitigation. Strictly necessary. |
Cookie names may change over time. This list is representative, not exhaustive.
4. How you can control cookies
You have multiple ways to control cookies:
- Browser settings — every modern browser lets you block or delete cookies. Blocking essential cookies will stop the app from working.
- Global Privacy Control (GPC) — we honour the GPC header. If your browser sends it, we automatically disable non-essential analytics.
- In-app toggle — signed-in users can disable analytics from Settings → Account.
- Third-party opt-outs — PostHog opt-out link: us.i.posthog.com/opt-out.
5. Changes to this policy
We may update this Cookies Policy occasionally to reflect changes in the cookies we use. Please check back every so often. Material changes will be announced via email or an in-app notice.
6. Contact us
Questions about cookies? Email privacy@whatkeywords.com.
Questions?
Contact us at support@whatkeywords.com and we'll get back to you within 2 business days.