Cookie policy

Last updated: 17 October 2026.

This policy applies to sourcekeel.com, operated by Scydex Ltd. Contact [email protected]. Our address is 320 City Road, London, England, EC1V 2NZ. The privacy policy explains how we process personal data.

Cookies and your choice

Cookies are small values that a browser stores and sends to a website. Essential cookies keep you signed in, protect your account and forms, and remember the browser choices you request. Optional categories are off until you enable them. Browsing or continuing to use the site does not count as optional consent.

Use "Manage cookies" in the footer to review or change your choice. The banner offers "Essential only", "Accept optional", and settings. You can withdraw optional consent through the same controls. Your choice applies to this browser. Clearing cookies or using another browser requires a new choice.

First-party inventory

Every cookie below is set by SourceKeel itself, holds no advertising or analytics data, and is needed for the purpose given.

• sourcekeel_session: an essential sign-in cookie, set when you sign in in a browser with an email code or Google. It holds a random session token; we store only a hash of it. The cookie lasts up to 30 days, but the session ends sooner if you don't use it for 7 days. A browser sign-in through AgentID lasts 1 hour. Signing out clears it. It is not needed to browse public pages.
• sourcekeel_device: an essential security cookie, set when you sign in in a browser with an email code or Google. It holds a random device identifier, not an account identifier, so we can email you when your account is signed in to from a device it hasn't used in 90 days. It lasts 400 days.
• sourcekeel_csrf (__Host-sourcekeel_csrf over HTTPS): an essential security cookie, set when a page with a form opens and you are not signed in, such as the sign-in and sign-up pages. It holds a random value that the page's form token is tied to, so another website cannot send a form to SourceKeel as you or sign you in to an account it controls. It lasts 2 hours, is not read by scripts, holds nothing about you, and is removed when you sign in.
• sourcekeel_google: an essential sign-in cookie, set only while you sign in with Google or link Google to your account. It holds signed sign-in state so we can check Google's answer. It lasts 10 minutes and is removed when Google sends you back.
• sourcekeel_agentid: an essential sign-in cookie, set only while you sign in with AgentID in a browser. It holds a random value; we store only a hash of it. It lasts until that sign-in expires, 10 minutes by default, and is removed when AgentID sends you back.
• sourcekeel_cookie_choice: an essential preference cookie, set when you save a choice. It records the settings version and whether external resources are enabled. It lasts 180 days. It does not contain an account identifier.

SourceKeel staff also get a sourcekeel_staff sign-in cookie on the staff pages. Customers and visitors never receive it.

The console stores two display preferences in your browser's local storage: your light or dark theme (skc.theme) and whether you last used the page or API view (skc.view). They hold no account information, and your browser does not send them to us. The site does not use session storage, and it does not use local storage for your cookie choice. It does not set analytics or advertising cookies.

Optional external resources

With your permission, the site loads fonts from Google Fonts and the interactive API reference from unpkg. Those providers receive the IP address, browser request information, and the requested resource when your browser connects. The site uses a no-referrer policy for these resource requests. This category covers external resource loading even when a provider does not set a cookie. Rejecting it keeps system fonts and the local documentation, including the raw OpenAPI download.

The site does not load these external resources before consent. If you withdraw permission after they load, the site reloads to stop further loading in that page. Withdrawal cannot undo information already sent to a provider. Analytics and advertising categories are unavailable because the site does not currently use them.

Payment and integration sites

If you open Stripe Checkout or another external service, that service controls its own cookies and privacy notices. Our cookie settings do not control a different website, your agent's inbox, an MCP client, or Zapier. Header-authenticated API clients do not need the website's optional resources.

Browser controls

You can also delete or block cookies through your browser settings. Blocking essential sign-in cookies can stop account pages from working. If the browser blocks our preference cookie, we apply essential-only settings and cannot remember your choice between pages. We update this policy when the inventory or purpose changes.