Policies
Cookie Policy
Effective September 22, 2026 · Superstar SEO LLC · Questions to help@legiit.com
What Legiit Keywords stores in your browser and why. The short version: what is needed to keep you signed in and to take a payment, plus first-party analytics cookies from Clicky that tell us whether a visitor has been here before. No advertising or cross-site tracking cookies.
1. What cookies are
A cookie is a small text file a website places in your browser so that it can recognize you on the next request. Session cookies disappear when the browser closes; persistent cookies stay until they expire or you delete them. Similar technologies, such as local storage, work the same way for this policy.
2. The cookies we use
The Supabase and Stripe cookies are strictly necessary: without them you cannot sign in or pay. The Intercom cookies belong to the support chat in the corner of every page and only keep your conversation together; they hold no advertising identifier. The Clicky cookies are for analytics only and are the ones you can accept or decline.
- sb-*-auth-token (Supabase). Keeps you signed in after you open your sign-in link or enter your password. Holds your session token. Lifetime: Until you sign out, refreshed while you use the app.
- sb-*-code-verifier (Supabase). Protects the sign-in link exchange against forgery. Lifetime: Minutes, during sign-in.
- __stripe_mid, __stripe_sid (Stripe). Set by Stripe on its own checkout and billing pages, and by Stripe's fraud prevention, to recognize a browser across a payment. Not set on our pages. Lifetime: Up to one year.
- intercom-id-gx4kalop (Intercom). Identifies your browser to the support chat, so a conversation you started continues when you come back. Lifetime: Nine months.
- intercom-session-gx4kalop (Intercom). Keeps your chat session open while you move between pages. Lifetime: One week.
- intercom-device-id-gx4kalop (Intercom). Tells the chat which device you are on, so it does not repeat a notification. Lifetime: Nine months.
- kw_consent (Legiit Keywords). Remembers whether you allowed or declined the analytics cookies, so we do not ask again. Lifetime: One year.
- _jsuid (Clicky). A random number that tells our analytics whether your browser has visited before, so a returning visitor is counted once rather than as someone new. Lifetime: One year.
- _first_pageview, _eventqueue, _referrer_og, _utm_og (Clicky). Mark where a visit began, hold an event until it is sent, and remember the site or campaign link that first brought you here. Lifetime: From minutes to a few months, depending on the cookie.
- no_tracky_101512189 (Clicky). Set only if you opt out of Clicky. While it exists, Clicky records nothing about you here. Lifetime: One year.
3. Analytics
We measure how the site is used with two tools. Vercel Web Analytics runs without cookies: it records page views, the button you clicked to start, your country and the type of browser, with no identifier that lasts beyond the visit. Clicky does use cookies, the first-party ones listed above, so that it can tell a returning visitor from a new one and show us a visit as a sequence: the pages you viewed, in what order, how long you stayed, the site or search that sent you, your country and city as estimated from your IP address, and your browser, device and screen size. Clicky keeps your IP address as part of that visitor record. Both tools run on the public pages and inside the app. Neither follows you to other websites or shares what it sees with advertisers. Inside the app we also count what happens in our own database (sites added, runs started) under your account, as described in the Privacy Policy.
4. What we do not use
- No advertising or retargeting pixels.
- No social media plug-ins that report your visit to a social network.
- No analytics that follow you to other websites or combine your visit here with your activity elsewhere.
5. Your choice
If you visit from the EU, the EEA, the United Kingdom or Switzerland, a banner asks before any analytics cookie is set, and Clicky stays off until you accept. Elsewhere the analytics cookies are set when you arrive and you can decline them here at any time. Your answer is kept in the kw_consent cookie for a year; declining also removes nothing you need to use the app.
Your current choice: not recorded yet. Outside the EU, UK and Switzerland the analytics cookies are set unless you decline here.
6. Managing cookies
Every browser lets you view, block and delete cookies through its settings, usually under Privacy or Site data. If you block the Supabase cookies you will not be able to stay signed in. Signing out from the account menu removes the session cookie. Stripe's cookies live on Stripe's domains and are governed by Stripe's own cookie policy.
Beyond the choice above, you can also stop Clicky by turning on Do Not Track in your browser, which Clicky honors; by blocking cookies for this site; or by opting out at clicky.com/optout, which sets the no_tracky cookie above. Nothing in the app depends on the analytics cookies, so blocking them changes nothing else.
7. Changes and contact
We update this page whenever the cookies we use change. Questions go to help@legiit.com. This policy is issued by Superstar SEO LLC.