KICK COOKIE POLICY

Last modified August, 2026

1. Introduction

This Cookie Policy describes the different types of cookies and similar technologies that may be used on our website located at www.gokick.com (“Website”) operated by or for Kick (“Kick” or “we”) when you visit it.

We may change this Cookie Policy at any time. It is our policy to post any changes we make to our Cookie Policy on this page. The date that this Cookie Policy was last revised is identified at the top of this page.

If you have further questions, please contact us at the Contact Information listed in our Privacy Policy.

2. What are Cookies and Similar Technologies Used on Our Website

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. Our use of cookies is governed by our Privacy Policy. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you do not consent to our use of cookies or select this setting you may be unable to access certain parts of our Website. You can find more information about cookies at http://www.allaboutcookies.org and http://youronlinechoices.eu.

Browser Storage. In addition to cookies, we use your browser’s local storage to hold information needed while you are using the Website — for example, the answers you have entered so far in a medical questionnaire, so that your progress is not lost if you navigate away or reload the page. Local storage is not transmitted automatically with every request the way a cookie is, and it is not managed by your browser’s cookie settings. You can clear it through your browser’s settings for site data.

Web Beacons. Pages of our Website and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Kick, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Third Party Cookies. Some content or applications, including advertisements, on our Website are served by third-parties, including advertisers, ad networks and servers, content providers, application providers, and social media sites. With your consent, these third parties may use cookies (alone or in conjunction with web beacons or other tracking technologies) to collect information about you when you access our Website. The information they collect may be associated with your Personal Data or they may collect information, including Personal data, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising and other targeted content. We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about advertisement or other targeted content, you should content the responsible provider directly. For information on how you can consent or withdraw your consent to receive targeted advertising from many providers, please see our Privacy Policy.

3. Cookies and Other Similar Technologies Used On Our Website

Our Website uses 1st party cookies (set by Kick), 3rd party cookies (which are set by third parties), and other similar technologies. Below is a list of the technologies we use, as of the effective date of this Cookie Policy. Cookie lifetimes set by third parties are controlled by those providers and may change without notice; the linked policy for each provider is authoritative.

Where these technologies run

The advertising and social media technologies listed below — Meta, Google Ads, Microsoft Advertising, X, Reddit, TikTok, Taboola, AppLovin, Vibe and AudienceLab — do not load on our patient portal or on the pages where you complete a medical visit. Those surfaces load a reduced set.

Product analytics and session replay, our conversion-measurement provider (Converge), and our customer-messaging and site-optimization providers do run on those surfaces.

Essential Cookies and Similar Technologies: Essential cookies and other similar technologies enable you to navigate the Website and use its services and features. Without these, the Website will not perform smoothly and we may not be able to provide you with certain services or features.

Provider Description of Purpose When do cookies expire 1st party or 3rd party cookie?
Kick session and account cookies Maintain your signed-in session, authenticate your requests, and remember the details of a visit or order you have in progress so you can move between steps without losing your place. Session, or up to 14 months 1st party
Stripe fraud detection (__stripe_mid, __stripe_sid) Set by Stripe, our payment processor, to recognise the browser and session placing an order and to detect payment fraud. Stripe’s fraud-detection script loads on the pages of the visit and checkout flow, not only on the payment step, because it needs to observe the session to score a payment accurately. These identifiers stay with Stripe; we do not read them. https://stripe.com/privacy 12 months (__stripe_mid); 30 minutes (__stripe_sid) 1st party
Device fingerprint (checkout only) On the payment step only, we compute a fingerprint of your browser and device — characteristics such as screen size, time zone, language and how your browser renders graphics — using the open-source FingerprintJS library running on our own Website. It is not used for advertising, analytics or attribution, and it does not run on the pages where you complete a medical visit. If a payment is later disputed with your card issuer, it may be included in the evidence we submit to show that the disputed transaction and earlier undisputed transactions came from the same device. Not stored in your browser; recorded with the order 1st party
Kick device ID (kick_did) A first-party identifier assigned to your browser for fraud prevention. It is not readable by scripts on the Website and is not used for advertising, analytics or attribution. If a payment made from your account is later disputed with the card issuer, this identifier may be included in the evidence we submit to the card network and issuing bank to show that the transaction and earlier undisputed transactions came from the same browser. 24 months 1st party

Product Analytics and Session Replay: These technologies record how the Website is used so we can understand behavior, diagnose errors, and improve the product. Our session replay and heat-mapping tools record your interactions with the Website — including page views, clicks, scroll activity, console logs, network requests, and information you enter into forms other than password fields, which are masked. Because our Website includes health-related questionnaires and account pages, the information these tools capture may include health-related information you choose to enter. Nothing in this section authorizes any use or disclosure of “protected health information” governed by HIPAA, which is handled by Kick Medical in accordance with its Notice of Privacy Practices.

Provider Description of Purpose When do cookies expire 1st party or 3rd party cookie?
PostHog Product analytics, event tracking, session replay, and heat maps. Served through a Kick-operated first-party endpoint (disco.gokick.com).
https://posthog.com/privacy
Up to 12 months 1st party

Site Optimization and Testing Cookies: These technologies let us run experiments comparing different versions of a page so we can improve the Website. They record which variant you were shown and how you interacted with it.

Provider Description of Purpose When do cookies expire 1st party or 3rd party cookie?
VWO A/B testing and website experimentation.
https://vwo.com/privacy-policy/
Varies by provider — see the linked policy 3rd party
Visiopt Page testing and conversion optimization.
https://visiopt.com/privacy-policy/
Varies by provider — see the linked policy 3rd party

Advertising and Attribution Cookies and Similar Technologies: These technologies display promotions or advertisements based on your use of the Website and your interests, measure whether an advertisement led to a visit or purchase, and help us manage our advertising spend. They collect information about your activities on this and other sites. They are not loaded on our patient portal or medical visit pages.

Provider Description of Purpose When do cookies expire 1st party or 3rd party cookie?
Meta (Facebook and Instagram) Advertising, conversion measurement, and retargeting of website visitors.
https://www.facebook.com/about/privacy/cookies
Varies by provider — see the linked policy 3rd party
Google Ads Conversion tracking and remarketing for advertising delivered through Google.
https://policies.google.com/privacy
Varies by provider — see the linked policy 3rd party
Microsoft Advertising (UET) Conversion tracking and remarketing for advertising delivered through Microsoft and Bing.
https://privacy.microsoft.com/privacystatement
Varies by provider — see the linked policy 3rd party
X (Twitter) Advertising conversion tracking and retargeting.
https://x.com/en/privacy
Varies by provider — see the linked policy 3rd party
Reddit Advertising conversion tracking and retargeting.
https://www.reddit.com/policies/privacy-policy
Varies by provider — see the linked policy 3rd party
TikTok Advertising conversion tracking and retargeting.
https://www.tiktok.com/legal/page/row/privacy-policy/en
Varies by provider — see the linked policy 3rd party
Taboola Native advertising delivery and conversion measurement.
https://www.taboola.com/policies/privacy-policy
Varies by provider — see the linked policy 3rd party
AppLovin Advertising delivery and conversion measurement.
https://www.applovin.com/privacy/
Varies by provider — see the linked policy 3rd party
Vibe Connected-television advertising delivery and measurement.
https://www.vibe.co/privacy-policy
Varies by provider — see the linked policy 3rd party
AudienceLab Audience building and advertising measurement.
https://audiencelab.io/privacy-policy/
Varies by provider — see the linked policy 3rd party
Kick visitor ID (gokick_uuid) A first-party identifier assigned to your browser and readable by scripts on the Website. It is used to attribute a visit to the campaign or referral that brought you to the Website, is kept consistent across gokick.com subdomains, is stored with your account and visit records, and is shared with our conversion-measurement provider (Converge) as an identifier for matching your activity across devices and sessions. 12 months 1st party
Converge Advertising conversion measurement and attribution.
https://www.runconverge.com/privacy
Varies by provider — see the linked policy 3rd party
Rewardful (rfaid) Records the affiliate partner who referred you so that partner can be credited for your purchase.
https://www.rewardful.com/privacy-policy
Until you close your browser 3rd party

Payment Cookies: These technologies support checkout and let returning customers pay without re-entering their details.

Provider Description of Purpose When do cookies expire 1st party or 3rd party cookie?
Stripe Link (stripe.link.persistent_token) Stores a token issued by Stripe for Link, its saved payment method service, so that a returning customer can complete checkout without re-entering card details. The cookie is set by our Website and holds a Stripe identifier; it does not contain your card number.
https://stripe.com/privacy
12 months 1st party

Customer Messaging and Support Cookies: These technologies support email and messaging we send you, and the help and chat features on the Website.

Provider Description of Purpose When do cookies expire 1st party or 3rd party cookie?
Customer.io Sends and measures our email and messaging, including open- and click-tracking pixels embedded in email.
https://customer.io/legal/privacy-policy/
Varies by provider — see the linked policy 3rd party
Closeable Provides the help and chat widget on the Website. The widget is delivered by Closeable and is powered by Gorgias, our support desk, so information you enter into a chat is received by both.
https://www.closeable.ai/privacy
Varies by provider — see the linked policy 3rd party
Gorgias Powers the support desk behind the chat widget described above, including the history of any conversation you start with us.
https://www.gorgias.com/privacy
Varies by provider — see the linked policy 3rd party
Klaviyo Email and messaging delivery and measurement.
https://www.klaviyo.com/legal/privacy-notice
Varies by provider — see the linked policy 3rd party
Builder.io Delivers and measures certain marketing page content.
https://www.builder.io/c/privacy-policy
Varies by provider — see the linked policy 3rd party

You can learn more about interest-based advertisements and your opt-out rights and options from members of the Network Advertising Initiative (“NAI”) on its website (www.networkadvertising.org) and from members of the Digital Advertising Alliance on its website (www.aboutads.info). We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can also opt out of receiving targeted ads from members of the NAI on its website.