Keyfolio keeps cookies to a minimum. The only cookie set without asking is the one that keeps staff and partners signed in and, if Cloudflare has to run a security check, its security cookie (see Third parties). Anything else is set only if you choose it, and we never use advertising cookies or cookies that follow you around other websites. Last updated 12 November 2026.
Essential cookie
Keeping you signed in (kf_session): keeps staff and partners signed in to the workspace. It is removed when you sign out or after a period of inactivity. Visitors who do not sign in never receive it.
Cookies you can choose
Remembering your quote (kf_quote): set only if you press "Remember on this device" on your quote. It holds random access codes (not personal details) so you can find your quotes again from this browser for 60 days. Use "Forget on this device" to remove it.
Crediting a partner (kf_ref): set only if you arrive through a partner's link and agree when we ask. It remembers the partner for 60 days so they are credited if you come back later. The partner may receive a fee from us for introducing you, and your quote says when that applies. You can remove it at any time.
Not counting your visits (kf_nocount): set only if you choose "Don't count my visits" below, or when you sign in on a device to our team's workspace, a law firm's portal or a partner's portal, so that our own visits, the law firms' and our partners' are not counted. It remembers that for a year, and holds nothing else.
Browser storage
While you fill in a quote form, your unfinished property answers (never your contact details) are kept in your browser's session storage, so refreshing the page does not lose your work. They are removed when you close the tab.
Your menu layout (kf-nav-closed): in the workspace for staff and partners, your browser's local storage remembers which sections of the menu you collapsed. It holds nothing else, and stays until you clear your browser's storage.
The opening movement (kf-opened-[number]): in the workspace, your browser's session storage remembers that the opening movement of the overview has been shown in this tab, so it is not shown again. It is removed when you close the tab.
Visit statistics without cookies
To understand how people find us and where our quote forms could be clearer, the website itself counts page views and visits each day, the kind of device each visit came on (a phone, a tablet or a computer), how many people reach each step of a quote form (the step, never what was typed), how many answer each question on its first page and press its Continue button, which question a check on the form stopped someone at and how often each of its questions had to be put right (the question, never the answer), and how many go ahead from their quote. It notes how a visit arrived, from a search engine, an advert, an email, a partner or another website, using what your browser tells every website it visits. Campaign tags travel in the page address while you move around the site, and the website or advert that brought you is recorded with any quote you ask for. Nothing is stored on your device for this, the counts do not identify you and nobody else receives them, other than Cloudflare, which runs the website for us and handles them only on our behalf. Robots, other programs and signed-in staff are not counted: a page asked for by a program rather than a browser is only added to a daily count of such requests. To tell visits by people from visits by programs, the page a visit begins on also tells the website, once, whether anything on it was touched, clicked, scrolled or typed in, or the mouse moved over it (never what or where), and whether your browser says a program is running it, and the website notes whether the visit came from a data centre (the network of a hosting or cloud company) or from outside the UK, from the network and country Cloudflare finds for your internet address. These are counts only: nothing about you is kept with them. If you came by clicking one of our Google adverts, the reference Google adds to that click travels in the page address too, and is kept with any quote you ask for (see our privacy notice).
Saying no to visit statistics
You can object to these statistics at any time, free of charge. Don't count my visits: your visits on this browser are then left out. We then leave your visits, your quote form steps and the questions you answer and put right out of the counts, do not record how you reached us, and do not keep the reference of an advert you clicked. We do the same automatically if your browser sends the Global Privacy Control signal.
Third parties
We do not load scripts, fonts, maps, adverts or analytics from other companies, and nobody uses cookies to track you through our website. Cloudflare, which delivers and protects the website for us, sets one strictly necessary cookie, cf_clearance, only if it asks your browser to pass a security check, to remember that you passed it. While the website is being prepared, Cloudflare Access sets sign in cookies for our own team only.
Managing cookies
You can block or delete cookies in your browser settings. Blocking cookies does not stop you getting a quote: keep the link we give you (or the email we send) to return to it.