Cookie Policy

The public CDKeySell website sets no analytics cookies for ordinary visitors unless you turn on the optional Analytics choice.

• Hosting/security (automatic): our hosting platform's protection service (Cloudflare) may set a strictly necessary security cookie (__cf_bm, typically expiring after about 30 minutes) to protect the site against malicious traffic. It is not an analytics cookie and is not used for advertising.

• Analytics (optional): Google Analytics 4 events and _ga* cookies are used only after you turn on Analytics (or choose Accept all) in our consent banner. Both optional choices are off by default. The Google tag script is shared: on our paid campaign pages (/en/business-email, /ar/business-email and /tr/business-email) it may load if you separately accept Advertising measurement, even if you decline Analytics, but it then sends no analytics events.
• Your consent choice: stored in your browser's localStorage so we do not ask again on every page.

We do not use:

• advertising cookies, except optional Google Ads conversion measurement on our business email campaign pages after you accept it (section 6);
• remarketing pixels;
• cross-site behavioral-tracking cookies;
• a visitor account/login session;
• third-party Google Fonts requests at runtime.

Website fonts are self-hosted from our own site infrastructure.

A cookie is a small text file that a website can place on a browser or device to remember information between requests or visits.

Similar technologies may include localStorage, sessionStorage, browser identifiers, pixels or software development tools that store or retrieve information from a user's device.

On the public website we use these technologies only as described in this Policy: optional Google Analytics cookies after your consent, and localStorage to remember your consent choice.

The public website does not set strictly necessary cookies itself. Our hosting platform's protection service (Cloudflare) may set the strictly necessary security cookie __cf_bm (typically expiring after about 30 minutes) to protect the site against malicious traffic; we do not use it for analytics or advertising.

Security and anti-abuse controls for our public forms are handled on the server. They do not require an anti-abuse cookie.

When you submit a public form, our server may temporarily process and hash technical identifiers for rate limiting as described in our Privacy Policy. Those records are server-side records and are not browser cookies.

The current public website does not set functional or preference cookies for ordinary visitors.

Your analytics consent choice (accepted or rejected, with the date) is stored in your browser's localStorage under the key cdk-analytics-consent. It is not sent to us or to Google.

The selected website language is represented in the page URL and is not stored in a language cookie.

If you turn on Analytics (or choose Accept all), we enable Google Analytics 4 (Google tag, measurement ID G-5H2J597K6L). It sets first-party cookies:

• _ga — distinguishes browsers; expires after up to 2 years;
• _ga_5H2J597K6L — keeps session state; expires after up to 2 years.

Google Analytics receives page addresses, page titles, referrer, approximate location derived from IP address, and device/browser information. We do not send names, email addresses, form contents, request links or invoice data. Analytics does not run on admin pages, private request/conversation links or "page not found" pages, and only runs on cdkeysell.com.

Until you turn on Analytics, no Google Analytics events are sent and no analytics cookie is set. The shared Google tag script may still load on the paid campaign pages if you separately accept Advertising measurement (section 6); it then sends no analytics events.

We do not use Google Tag Manager containers, Microsoft Clarity, Meta Pixel, LinkedIn Insight Tag, Hotjar or other visitor-tracking systems.

On our business email campaign pages (/en/business-email, /ar/business-email and /tr/business-email) we offer a separate, optional Advertising measurement (Google Ads) choice. It is off by default, and neither accepting Analytics nor any earlier analytics choice implies it. Submitting a form never requires it.

Only if you turn it on, we configure Google Ads measurement (AW-18568621761) through the shared Google tag. It may set first-party _gcl_* cookies (up to 90 days) so Google Ads can count whether a visit from our ad led to a submitted enquiry. After our server confirms your enquiry was stored, one conversion event is sent. It contains no name, email address, message, request number or form details. Enhanced conversions are off and ad personalisation consent stays denied. We do not use remarketing or cross-site behavioural tracking.

If you decline or later withdraw this choice, the site stops sending future advertising events and deletes the _gcl_* first-party cookies; the updated consent state itself is sent to Google so its tag respects the change. Your choice is stored in localStorage under cdk-ads-consent.

The website contains links to third-party services such as WhatsApp, Telegram, LinkedIn and Microsoft Marketplace.

Those links do not set a third-party cookie through cdkeysell.com merely because they are displayed on our page.

If you choose to open a third-party website or application, that third party may use cookies or similar technologies under its own policies. CDKeySell does not control the cookies set by a third-party service after you leave our website or activate that service.

CDKeySell self-hosts the Manrope and IBM Plex Sans Arabic website fonts.

The public website does not need to contact Google Fonts or fonts.gstatic.com at runtime to render those fonts.

This reduces unnecessary automatic third-party connections when a page loads.

On your first visit to a public page, a banner asks about optional analytics and, on campaign pages, optional advertising measurement. Each has its own switch, off by default; Reject all, Save choices and Accept all are offered with equal prominence.

You can change your choice at any time through Cookie settings in the website footer. If you withdraw a choice, the site stops sending future events for that purpose and deletes the related first-party cookies (_ga* for analytics, _gcl_* for advertising); the updated consent state itself is sent to Google. We do not promise that an already loaded script is unloaded from the open page. Cookies may also be removed through your browser settings.

Our use of cookies or similar technologies may change as the website develops.

If we introduce advertising/remarketing, new functional browser storage, user accounts/authentication, personalization technologies or other non-essential client-side storage, we will review the legal requirements, update this Policy and implement consent or preference controls where required.

For information about personal data submitted through our forms, anti-abuse processing, data sharing, international processing and your rights, please see our Privacy Policy.

CDKeySell Digital Limited Email: support@cdkeysell.com Website: cdkeysell.com