Cookie policy

Cookies we always use

These are needed for the site to work, so they don't need consent:

• Sign-in cookies (Supabase), only if you sign in to the DIY Kit or admin area.
• lp_consent remembers your cookie choice for 180 days.
• lp_ft keeps the campaign tags from the link you first arrived on (such as utm_source and ad click ids) for 30 days, so we can tell which channels help people. It stays on our site and is only sent to our own server.
• Spam protection (Cloudflare Turnstile) on forms.

Cookies that need your consent

These only load after you choose "Accept":

• Analytics (PostHog): page views and events such as "quiz completed". Quiz answers are never included.
• Ad measurement (Google Ads, Meta Pixel, TikTok Pixel): tells us when someone completed the quiz or bought the kit after clicking an ad. Only the event name and, for purchases, the value and order id are sent.

Google tags use Consent Mode with everything set to "denied" until you accept.

If you accept, ad networks learn about your visit through their own cookies. Some US state laws call that "selling" or "sharing" for targeted advertising. "Reject" keeps them off.

Global Privacy Control

If your browser sends a Global Privacy Control signal, we treat it as "Reject": no analytics or ad cookies load, even if you accepted before. You don't need to do anything else.

Changing your choice

Use "Cookie settings" in the footer of any page to change your choice at any time. See "Your privacy choices" in our privacy policy for your other rights.

RepayKit is meant for people in the United States. The cookie list will be updated when we add or remove a tool.