sayCookie Policy
Last updated: 31 July 2026 · Questions: privacy@saykiwi.com
The whole list, with nothing left out. One cookie is genuinely necessary. Everything else waits for your permission and does not exist on your device until you give it.
What a cookie is here
A small file a site leaves in your browser. We also use local storage, which does the same job with a different name — your cookie choice itself is kept there, so that we can remember you said no without setting anything you said no to. This policy covers both, and any similar technology such as pixels and tags.
Necessary — always on
Without these the service cannot function, so they do not need consent and cannot be switched off. There are two.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
__Host-session | saykiwi (first party) | Keeps you signed in. Contains a random token and nothing about you. Deleting it signs you out. | 30 days, sliding |
__Host-oauth_state / __Host-connect_state | saykiwi (first party) | Set for a few minutes during sign-in with Google, so that the reply coming back is the one we asked for. A security measure against request forgery. | 10 minutes |
saykiwi.consent.v1(local storage, not a cookie) | saykiwi (first party) | Remembers the choice you made in the banner, so we do not ask again on every page. | Until you clear it |
Analytics — only if you allow it
Tells us which pages are read and where people give up, so the site gets less annoying over time. Aggregated, never sold.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
_ga, _ga_* | Google Analytics (Google Ireland Ltd) | Distinguishes one browser from another so a visit can be counted once rather than five times. | Up to 2 years |
Not currently active. It is listed here because the consent banner already gates it, and the day it is switched on nothing about your choice changes.
Marketing — only if you allow it
We advertise on Meta and Google. These let us see that an ad led to a sign-up, and stop us paying to show ads to people who already have an account.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
_fbp | Meta Platforms Ireland Ltd | Identifies a browser so Meta can report that an ad led somewhere. | 3 months |
_gcl_* | Google Ireland Ltd | Records that a click on a Google ad led to a sign-up. | Up to 90 days |
These load only after you allow marketing cookies. Until then the scripts are not fetched at all — not blocked after loading, simply never requested. Google Consent Mode signals are set to denied before any tag can run.
Inside the app
Once you are signed in at saykiwi.com/app there is no advertising and no analytics whatsoever — only the session cookie. What you write to your customers is not measured by anyone.
How to change your mind
- Here: the Cookie settings link at the bottom of every page. Rejecting is one tap and sits next to accepting, at the same size.
- In your browser: every browser can block or delete cookies for a site. Blocking the necessary ones will stop you being able to sign in.
- Global Privacy Control: if your browser sends a GPC signal we treat it as an opt-out of sharing for advertising, without you having to ask.
Changes
If we add a cookie, it appears in the table above before it is switched on, the date at the top changes, and — if the change needs your consent — the banner asks again.