Cookie policy

Last updated: 23 September 2026.

This page explains which cookies and other data we store in your browser when you visit GoCDKeys, who sets them, what they are for and how long they last. Strictly necessary cookies are needed for the site to work; everything else depends on your consent, which you can change at any time.

1. What cookies are
2. Who uses them
3. Legal basis and consent
4. The kinds of cookies we use
5. List of cookies
6. How to accept, reject or change your choice
7. How to delete or block them in your browser
8. International transfers
9. Changes and contact

1. What cookies are

A cookie is a small text file that a website stores in your browser so it can recognise it from one page to the next, or on your next visit. Cookies are used, for example, to keep you signed in, remember the currency you picked or count how many people visit a page.

This policy also covers similar technologies: your browser's local storage (localStorage and sessionStorage) and the third-party pixels and tags that load on our pages and can read or set cookies. To keep things short, we call all of them "cookies" unless the difference matters.

2. Who uses them

The party responsible for our own cookies on gocdkeys.com, gocdkeys.es, gocdkeys.de, gocdkeys.it, gocdkeys.fr and gocdkeys.pt is:

Overthings, S.L.
Company tax ID (CIF): B57925703
Avenida Alejandro Rosello, 1, 07002 Palma de Mallorca, Illes Balears, Spain
Email: hello@gocdkeys.com

Third-party cookies are set and managed by other companies under their own policies; section 5 lists them and who is behind each one. How we handle your personal data more generally is explained in our privacy policy.

3. Legal basis and consent

We use cookies in line with Article 22(2) of Spain's Information Society Services Act (Law 34/2002, LSSI) and the General Data Protection Regulation (GDPR). Strictly necessary cookies — the ones needed to give you the service you ask for, such as keeping you signed in, protecting forms and remembering your cookie choice — do not require consent. Preference, measurement and advertising cookies may only be used with your consent (Art. 6(1)(a) GDPR), which you give or refuse in the cookie notice and can change whenever you like.

Turning down non-essential cookies does not stop you using GoCDKeys: you can search for games, compare prices and go to the shops just the same. The only difference is that we will not remember some of your preferences and your visits will not count in our measurements.

4. The kinds of cookies we use

Strictly necessary: they make the site work and keep it secure. Without them you could not sign in or submit forms. They are always on.
Preferences: they remember choices you make, such as the currency you want prices shown in.
Measurement: they tell us how many people visit each page, where they come from and how they move around the site, so we can fix what is not working.
Advertising and attribution: they measure whether our ads on Google, Microsoft, Reddit or X bring in visitors, and let a shop credit us with the purchase you make after clicking one of our links — which is how we make a living.

Depending on who sets them, cookies are first-party (set by GoCDKeys on its own domain) or third-party (set by another company, on our domain or on theirs). Depending on how long they last, they are session cookies (deleted when you close the browser) or persistent cookies (kept for the stated period or until you delete them).

5. List of cookies

This list comes from reviewing our code and loading our pages in a clean browser. Durations are maximums; some browsers shorten them (Chrome, for instance, caps them at 400 days).

5.1 Our own cookies

Cookie	Purpose	Type	Duration
`gamecostservices_session`	Keeps your session going while you browse and, if you are signed in, your access to your account.	Strictly necessary	2 hours
`PHPSESSID`	Server session used by sign-in and some account features.	Strictly necessary	Session
`XSRF-TOKEN`	Protects forms against cross-site request forgery (CSRF).	Strictly necessary	2 hours
`gc_remember`	Keeps you signed in between visits when you tick "remember me".	Strictly necessary	30 days
`gc_remember_pref`	Remembers whether you ticked "remember me" in the sign-in window.	Strictly necessary	24 hours
`gc-cookie-advice`	Remembers that you have already answered the cookie notice, so it is not shown again.	Strictly necessary	1 year
`gc-cookie-prefs`	Remembers which categories of cookies you have allowed.	Strictly necessary	1 year
`gc-currency`	Remembers the currency you want prices shown in.	Preferences	1 year
`gc_sid`	Random visitor ID. It counts visits in our own statistics and links a page view to the click through to a shop that follows it, which is how a commission gets credited to us.	Advertising and attribution	1 year
`gcdk_ref`, `gcdk_tag`	Identify the partner and campaign that sent you to us, so they can be credited with their commission.	Advertising and attribution	15 days

5.2 Third-party cookies

Most of them load through Google Tag Manager. Some only appear on certain pages: reCAPTCHA's on sign-in forms and YouTube's on pages with an embedded video.

Cookie	Provider	Purpose	Type	Duration
`cf_clearance`	Cloudflare	Set by Cloudflare once you pass its bot check, so you are not asked again on every page.	Strictly necessary	1 year
`_GRECAPTCHA`	Google reCAPTCHA	Tells people apart from automated programs on sign-in forms.	Strictly necessary	6 months
`_ga`	Google Analytics	Distinguishes visitors in Google Analytics statistics.	Measurement	400 days
`_ga_Y2VP79D8NZ`, `_ga_WPNLNC5R0V`	Google Analytics	Keeps track of the visit in Google Analytics 4.	Measurement	400 days
`_gid`	Google Analytics	Distinguishes visitors over the course of a day in Google Analytics.	Measurement	24 hours
`_gat`	Google Analytics	Throttles the number of requests sent to Google Analytics.	Measurement	1 minute
`_clck`, `_clsk`	Microsoft Clarity	Group the clicks and scrolling that Microsoft Clarity records into a single visit, to analyse how pages are used.	Measurement	_clck: 1 year · _clsk: 1 day
`_gcl_au`	Google Ads	Stores clicks on Google ads so that conversions can be measured.	Advertising and attribution	90 days
`_uetsid`, `_uetvid`	Microsoft Advertising	Measure visits and conversions coming from Microsoft Advertising (Bing) ads.	Advertising and attribution	_uetsid: 1 day · _uetvid: 13 months
`_rdt_uuid`	Reddit	Identifies your browser to Reddit so our ads there can be measured.	Advertising and attribution	90 days
`_twpid`, `_twsid`	X (Twitter)	Identify your browser to X so our ads there can be measured.	Advertising and attribution	13 months
`guest_id`, `guest_id_ads`, `guest_id_marketing`, `personalization_id`, `muc_ads`	X (Twitter)	Set by X on its own domains (x.com, twitter.com, t.co) when its pixel loads; X uses them for its advertising and ad personalisation.	Advertising and attribution	400 days
`YSC`, `VISITOR_INFO1_LIVE`	YouTube (Google)	Set by YouTube when an embedded video loads: they measure views and store your player preferences.	Advertising and attribution	YSC: session · VISITOR_INFO1_LIVE: 6 months

5.3 Browser local storage

As well as cookies, some features keep data in your browser's local storage. That data is not sent to our servers automatically with every request: it stays on your device until you delete it or, for session storage, until you close the tab.

Key	Provider	Purpose	Type	Duration
`gc_pv`	GoCDKeys	Stores the day of your last counted visit, so you are not counted twice on the same day in our statistics.	Measurement	Until you delete it
`gcPageViews`	GoCDKeys	Counts the pages you view during this visit, so we do not offer notifications before the second one.	Strictly necessary	Until you close the tab
`gcPushDismissed`, `gcPushInteres`	GoCDKeys	Remember whether you dismissed or accepted the offer to turn on notifications, so we do not keep asking.	Preferences	Until you delete it
`gcStripTab`	GoCDKeys	Remembers the tab you picked in the games strip on the home page.	Preferences	Until you delete it
`gc_fps_setup`	GoCDKeys	Remembers the hardware you entered in the system requirements tool, such as your graphics card.	Preferences	Until you delete it
`gc_appb_closed`	GoCDKeys	Remembers that you closed the banner for our mobile app, so it stays hidden for a while.	Preferences	Until you delete it
`reactions_user_voted_*`	GoCDKeys	Remembers which game pages you have already reacted to, so your vote is not counted twice.	Strictly necessary	Until you delete it
`csrf-token-securize`	GoCDKeys	Stores a security code that protects the sending of reactions.	Strictly necessary	Until you delete it
`_gcl_ls`	Google Ads	Stores clicks on Google ads, like the _gcl_au cookie.	Advertising and attribution	Until you delete it
`_rdt_cfg`	Reddit	Stores the Reddit pixel settings during the visit.	Advertising and attribution	Until you close the tab

Third parties can rename their cookies or change how long they last without telling us. We review this list whenever we change the tools we use; if something does not add up, let us know.

6. How to accept, reject or change your choice

The first time you visit, we show you a cookie notice. From the "Cookie settings" link in the footer of every page, or the button below, you can switch each category on or off separately and change your mind whenever you like. Withdrawing consent is as easy as giving it and does not affect anything done before.

Open cookie settings

When you switch a category off, we delete the cookies in it that we can reach from your browser. Cookies a third party keeps on its own domain can only be deleted from your browser settings or through that third party's own opt-out.

You can stop Google Analytics measuring you on any website with its opt-out browser add-on, and control the ads Google shows you in My Ad Center. These are the other providers' cookie policies:

7. How to delete or block them in your browser

Every browser lets you see, delete and block cookies, including blocking third-party cookies only. Here is how to do it in the most common ones:

If you block all cookies, strictly necessary ones included, parts of the site will stop working — you will not be able to sign in, for example.

8. International transfers

Some third-party providers process data outside the European Economic Area, mainly in the United States. The safeguards that apply in each case are explained in section 7 of our privacy policy.

9. Changes and contact

We will update this policy whenever the cookies we use change. The date at the top shows when it was last reviewed.

If you have any questions, email us at hello@gocdkeys.com. Our mobile app does not use advertising or measurement cookies; what applies to it is set out in the Gamecost terms.