Cookie Notice
Last updated September 22, 2026
This page lists every cookie the Visibility Kit tracking script sets. If you run a site that uses Visibility Kit, you can copy this list straight into your own cookie policy or consent platform.
Nothing is set until a site owner connects. An unconnected install of the WordPress plugin loads no script and sets no cookies.
What kind of cookies these are
All of them are first-party: they are set on the domain of the site you are visiting, not on ours, and they are not readable by any other site. They are analytics cookies, not strictly necessary ones, so in the UK and the EEA they require consent before they are set.
Each cookie is set with path=/ and SameSite=Lax, scoped to the nearest registrable domain so it works across subdomains. The same values are also written to the browser’s localStorage under the same names, as a fallback for when cookies are unavailable. Clearing site data removes both.
Identity
| Cookie | Lifetime | What it holds |
|---|---|---|
_vk_vid | 365 days | A random identifier that ties repeat visits together. Generated in your browser. Not derived from anything about you or your device. |
_vk_session_id | 180 days | A random identifier for a single visit. |
Attribution
These record where a visit came from, so the site owner can tell an AI referral apart from a search or a social click.
| Cookie | Lifetime | What it holds |
|---|---|---|
_vk_referrer | 180 days | The referring URL of the first visit. |
_vk_landing | 180 days | The first page visited. |
_vk_attr_first | 180 days | First-touch attribution: source, medium, campaign, term, content. |
_vk_attr_last | 180 days | Last-touch attribution, updated when a new visit arrives from outside the site. |
Advertising click identifiers
Set only when the corresponding parameter is present in the URL you arrived on. If you never arrive from an ad, these are never set.
| Cookie | Lifetime | What it holds |
|---|---|---|
_vk_gclid | 90 days | Google Ads click identifier. |
_vk_msclkid | 90 days | Microsoft Advertising click identifier. |
_vk_fbclid | 90 days | Meta click identifier. |
_vk_ttclid | 90 days | TikTok click identifier. |
_vk_gbraid | 90 days | Google Ads app-to-web click identifier. |
_vk_wbraid | 90 days | Google Ads web-to-app click identifier. |
Technical
| Cookie | Lifetime | What it holds |
|---|---|---|
_vk_tld_test | Deleted immediately | Written and erased within the same page load to work out which domain the other cookies can be scoped to. It holds no data. |
What these are used for
Only to work out which visits came from an AI tool, and to avoid counting one person twice. We do not use them for advertising, we do not sell the data, and we do not match identifiers across different sites that use Visibility Kit. What reaches our database, and what does not, is set out in the privacy policy.
Turning them off
- As a visitor: refuse analytics cookies in the site’s consent banner, block cookies in your browser, or clear site data. Clearing them severs the link between you and anything we hold, and the records are deleted within 30 days in any case.
- As a site owner: click Disconnect in the plugin settings. The script is removed from your site and no further cookies are set.