Cookie Policy
How RoofKit uses cookies and similar technologies on the marketing site and platform.
Overview
Cookies are small text files stored in your browser. RoofKit uses cookies and similar storage to operate the platform, maintain sessions, measure advertising, and understand product usage.
The Meta measurement tag on the RoofKit marketing website loads unless you opt out of sharing or your browser sends Global Privacy Control.
For broader privacy context, see our Privacy Policy at /privacy. Terms of Use are available at /terms.
Cookie categories
| Category | What it does | Consent |
|---|---|---|
| Strictly necessary | Authentication, session continuity, security, load balancing, and recording your cookie choice | Set without consent, because the site cannot work without them |
| Analytics | On roofer-hosted landing and quiz pages, stores a persistent visitor ID for first-party visit and quiz measurement. On RoofKit's marketing site and app, PostHog measures product usage. | Roofer-page measurement uses implicit mode unless a supported choice or required mode applies. A supported refusal stops analytics events and attribution. PostHog loads only after you accept analytics on RoofKit's marketing site or app. |
| Advertising and measurement | On the RoofKit marketing website, loads the Meta measurement tag unless you opt out of sharing. It does not send lead names, email addresses, or telephone numbers to advertising platforms. | Stops when you opt out, including through Global Privacy Control. Treated as sharing under state privacy law. |
The reject and accept actions have equal prominence on the first banner layer. On roofer-branded public pages, first-party visit and quiz measurement and the persistent cv_visitor cookie start on the first visit. An explicit analytics refusal stops analytics events and expires cv_visitor.
After an analytics refusal, an intentional form with a valid email or phone can still create or update a roofer lead and an internal conversion record. RoofKit retains the operational quiz session ID and landing snapshot needed to provide quiz, lead capture, and result services. The form creates no analytics event and does not link a persistent analytics visitor ID, campaign attribution, or referrer to the lead. RoofKit sends no lead conversion to Google Analytics 4.
On RoofKit-hosted roofer pages, Global Privacy Control and Do Not Sell control sale and sharing. They do not stop first-party measurement or lead capture, and they do not delete cv_visitor. The external Onsite Pixel blocks sends after these opt-outs. Advertising measurement on the marketing website remains on until you opt out.
First-party cookies we use
| Name | Category | Purpose | Lifetime |
|---|---|---|---|
| Authentication and session cookies | Strictly necessary | Keep you signed in to your workspace and protect account access | Session, or the sign-in period you chose |
| cv_session_{rooferId} | Strictly necessary | Stores a public quiz session identifier for roofer-branded visualization flows | 30 days |
| rk_cookie_consent | Strictly necessary | Records your separate analytics and advertising choices and the consent policy version | About one year |
| rk_optout_sharing | Strictly necessary | Records an opt-out of sale and sharing, including one signaled by Global Privacy Control | 12 months |
| cv_visitor | Analytics | Stores a pseudonymous visitor identifier and first-visit timestamp for roofer-page visit and quiz attribution. It starts on the first visit and remains until an explicit analytics refusal. | Up to one year after its latest refresh. An explicit analytics refusal deletes it. GPC and a sharing-only opt-out do not. |
Embedded public quizzes also store the roofer-scoped session identifier and signed tracking-access token in same-origin local storage under cv_embed_session_{rooferId} and cv_tracking_access_{rooferId}. These local storage entries have no fixed expiry; you can remove them by clearing site data.
Third-party cookies and scripts
RoofKit loads the Meta measurement tag on its marketing website unless you opt out of sharing. Meta sets its own cookies and applies its own privacy policy. This tag does not authorize sharing roofer lead data.
Other integrated providers may set cookies or local storage when their features load, such as payment checkout, maps, or embedded media. Payment and map providers load only where their feature is used.
The Meta Pixel stops after you opt out of sharing or when your browser sends Global Privacy Control.
On a roofer website, the RoofKit Onsite Pixel reports page views and phone clicks as analytics events. Implicit mode measures without a saved analytics choice. Required mode waits for an explicit analytics grant. Global Privacy Control and sharing opt-outs block all pixel sending, including form forwarding, even after an analytics grant.
After an analytics refusal, an intentional form with a valid email or phone can still create or update a roofer lead and an internal conversion record. RoofKit retains the operational quiz session ID and landing snapshot needed to provide quiz, lead capture, and result services. The form creates no analytics event and does not link a persistent analytics visitor ID, campaign attribution, or referrer to the lead. RoofKit sends no lead conversion to Google Analytics 4.
The Pixel rotates a visitor identifier after 396 days and a session identifier after 30 minutes without activity. Expired values can remain in local storage until a later Pixel run replaces them or you clear site data. An explicit analytics refusal, Global Privacy Control, or a sharing opt-out deletes stored pixel tracking IDs when the pixel next checks consent.
Campaign parameters remain in session storage for the browser tab. The Pixel follows supported analytics choices. An explicit analytics refusal stops analytics events and persistent attribution.
Your choices
- Use the cookie preferences link in the site footer to change your choice at any time.
- Signed-in users can also change the analytics choice at /settings/account.
- Use the opt-out page at /do-not-sell to opt out of the sale and sharing of your personal information, without creating an account.
- Enable Global Privacy Control in your browser or extension. RoofKit reads that signal and applies the opt-out automatically, without asking you to confirm it.
- Block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent sign-in and public quiz continuity from working.
Privacy questions can be sent to privacy@roofkit.ai.
Your sharing opt-out is shared across roofkit.ai and its subdomains in this browser. Roofer sites on roofkit.site or custom domains store a separate choice.
Changes to this policy
We may update this Cookie Policy when our technology or legal requirements change. Material updates will be reflected in the last updated date shown on this page.