Last updated: October 28, 2026
This Cookie Policy explains how Enrichment.kids, Inc. ("Enrichment.kids," "we," "us," or "our") uses cookies and similar technologies, such as your browser's local storage and session storage, on enrichment.kids and related applications (the "Service"), and the choices you have about them. This Policy supplements our Privacy Policy and should be read alongside it.
Cookies are small text files that a website stores on your browser or device. They let a site recognize your browser across page loads and visits, remember information about your session, and measure how the site is used.
We use cookies in three categories, described in detail in the table below:
| Category | Cookie / Vendor | Purpose |
|---|---|---|
| Strictly Necessary (always active) | enrichment_kids_session / laravel_session | Keeps you logged in during your visit (Laravel/Sanctum session) |
| Strictly Necessary (always active) | XSRF-TOKEN | Security token that protects your account and forms against cross-site request forgery (CSRF) |
| Strictly Necessary (always active) | ek_cookie_consent | Remembers your cookie preferences so we don't ask again; lasts 12 months |
| Strictly Necessary (always active) | __stripe_mid & __stripe_sid | Set by Stripe during checkout to help detect and prevent payment fraud |
| Strictly Necessary (always active) | __cf_bm | Set by Cloudflare to distinguish humans from bots and protect the Service from automated abuse |
| Strictly Necessary (always active) | ek_pass & ek_ticket | Set by our own edge service on api.enrichment.kids to hold your place when the Service is very busy, such as at a popular registration opening: the pass lets your browser in, and the ticket keeps your place in line. The ticket lasts 30 minutes. The pass lasts while you stay active and, once you start checkout, for as long as your spots are held. |
| Strictly Necessary (always active) | ek_kiosk | Set by our API on api.enrichment.kids only on a device a Provider sets up as a kiosk for check-in and check-out. It keeps that device signed in to the Provider's kiosk screen, is sent only with the kiosk's own requests, and cannot be read by scripts on the page. It lasts 365 days and is renewed each time the device is used. It is not set on any other browser. |
| Analytics & Performance (on by default — can be turned off) | PostHog | Product analytics — measures interactions like clicks and page views so we can identify and fix usability issues. Uses PostHog's own cookie and browser storage. When you are signed in, analytics are linked to your account. Session replay is part of this category and follows the same setting; form inputs are automatically masked and never captured. |
| Analytics & Performance (on by default — can be turned off) | Algolia Insights | Anonymous analytics on search clicks and views, used to improve search result relevance. Runs cookie-free if you turn analytics off. |
| Advertising — measurement only (on by default — can be turned off) | Google Ads (_gcl_aw and related) | Set when you arrive from one of our Google ads; lets us and Google measure which ads lead to sign-ups and purchases. Ad personalization is disabled — these cookies are not used to show you ads elsewhere. |
| Advertising — measurement only (on by default — can be turned off) | ek_gclid | Our own first-party cookie holding the Google ad-click identifier (gclid, gbraid, or wbraid) for up to 90 days, so a later sign-up or purchase can be credited to the ad that brought you here. Deleted automatically if you turn advertising cookies off. |
Strictly Necessary cookies are exempt from consent because the Service cannot function without them. Analytics & Performance and Advertising cookies are active by default and can be turned off at any time. Advertising cookies are used only to measure our own ad campaigns — never to build a profile of you or to personalize ads on this or any other site.
We also keep some information in your browser's local storage (kept until you clear it) and session storage (cleared when you close the tab). It stays on your device; the Service reads it to work as described below.
checkout-cart, checkout-session, local storage) and the reservation you are checking out (checkout-order, session storage).user, local storage). A child's date of birth is never stored in your browser.ek.edge.visitor, local storage) and copies of your pass and ticket (ek.edge.pass, ek.edge.ticket, session storage), for browsers that block the cookies above.bugsnag-anonymous-id, local storage).ek_mcp_attribution, session storage, for up to 30 minutes). It is sent to analytics only if Analytics & Performance is on, and discarded otherwise.search-user-location), a map search session token and map telemetry setting (mapbox-session-token, mapbox.telemetryOptOut), and dashboard display preferences such as table layouts, views, and date ranges (local storage).Browser storage is not affected by the Your Privacy Choices panel. You can clear it through your browser settings; doing so empties your cart and resets your preferences.
We use Cloudflare Web Analytics to measure how quickly pages load. It does not use cookies or browser storage and is not affected by the Your Privacy Choices panel. [TO CONFIRM: that Cloudflare Web Analytics is enabled for enrichment.kids, and whether it should follow the Analytics & Performance setting.]
When you use an Enrichment.kids order form embedded on a Provider's website, Analytics & Performance and Advertising are always off and no cookie notice is shown. The strictly necessary cookies the form uses are partitioned, meaning your browser keeps them separately for that website. The Provider's own website may use its own cookies, which its own policies cover.
A Provider may set up a tablet, phone or computer as a kiosk where adults check children in and out. On the kiosk screen, Analytics & Performance and Advertising are always off and no cookie notice is shown. The device uses only the strictly necessary cookies and browser storage described above, including the ek_kiosk cookie.
Cookie banner. On your first visit, we show a cookie notice bar that reads "Cookies help us improve your experience." with a Manage link, a Cookie policy link, a Got it button, and a close button. Manage opens the Your Privacy Choices panel, where you can turn Analytics & Performance and Advertising on or off and choose Reject all, Accept all, or Save. Analytics & Performance (including session replay) and Advertising cookies are on unless you turn them off; selecting Got it or closing the notice bar keeps these defaults. Reject all turns off everything optional. Your choice is saved (see ek_cookie_consent above) so we don't ask again for 12 months, and you can change it at any time via the Your Privacy Choices link in the site footer, which opens the preferences panel directly.
Browser controls. Most browsers let you block or delete cookies through their settings. Blocking Strictly Necessary cookies will prevent core features — like staying logged in or completing checkout — from working correctly.
Global Privacy Control (GPC). We honor the Global Privacy Control signal as an opt-out request. If your browser sends a GPC signal, Analytics & Performance and Advertising cookies are turned off automatically, the same as if you had selected Reject All.
Email us. If you have trouble managing your preferences through the banner or your browser, email us at [email protected] and we'll help directly.
Turning off Analytics & Performance or Advertising cookies does not affect your ability to browse, register for, or purchase activities on the Service.
We may update this Policy from time to time to reflect changes in the cookies we use or in applicable law. The "Last updated" date at the top of this page reflects the most recent revision. If we make a material change to the cookies we use or how we use them, we will update this page and, where the nature of the change requires it, ask for your preferences again.
Questions about this Cookie Policy can be sent to: [email protected]