Cookie Policy
Last Updated: September 24, 2026
This Cookie Policy explains how KEDbluestone, Inc. (“KEDbluestone,” “we,” “us,” or “our”) uses cookies and similar technologies on https://www.kedbluestone.com (the “Site”). It should be read with our Privacy Policy and Website Service Policy.
Important: A cookie consent banner is live on the Site (first-party plugin ked-cookie-consent v1.0.3). Non-essential marketing scripts (GA4, LeadPipe, Simpli.fi) are gated until you choose Accept. Choosing Reject (or sending a Global Privacy Control signal) keeps those marketing scripts from loading. reCAPTCHA is delayed until Accept or form focus.
1. What cookies and similar technologies are
Cookies are small text files stored on your device when you visit a website. Similar technologies include pixels, tags, scripts, local storage, and iframes. They can remember preferences, keep a session working, measure how the Site is used, identify business visitors, or support advertising.
Cookies may be:
- First-party: set by kedbluestone.com / www.kedbluestone.com
- Third-party: set by another domain (for example, Google, Simpli.fi, or a CDN)
2. How we use them
We use these technologies to:
- Make the Site work (security, forms, remembering your Accept / Reject cookie choice)
- Measure traffic and performance (Google Analytics 4, measurement ID
G-6ZTHFV3YJS) - Understand which companies visit the Site (LeadPipe / HFCM “JHL Lead Tracking”)
- Support advertising / retargeting (Simpli.fi, cookies
suid/suid_legacy) - Protect forms (Google reCAPTCHA v3 with Elementor Pro)
- Display functional embeds (Trustindex reviews, Google Maps, Knight Lab Timeline) and load static assets (cdnjs)
We do not treat analytics, lead identification, or advertising identifiers as “anonymous” when they use IP addresses, cookie identifiers, or company matching.
Not currently used: Meta Pixel / fbq, Google Tag Manager, LinkedIn Insight Tag, HubSpot, Hotjar, Microsoft Clarity. Facebook domain verification meta only (not a pixel).
3. Categories
| Category | Role | Runs without your opt-in? |
|---|---|---|
| Necessary | Required for core Site functions, security, forms, and (once live) storing cookie preferences | Yes |
| Preferences / Functional | Reviews widgets, maps, fonts/CDN, content embeds | Often treated as functional; may still involve third-party logging |
| Statistics | GA4 analytics; LeadPipe B2B visitor identification | Run only after Accept. Blocked on Reject and when GPC signals Reject. |
| Marketing | Simpli.fi advertising cookies | Run only after Accept. Blocked on Reject and when GPC signals Reject. |
Analytics, LeadPipe, and Simpli.fi are not strictly necessary.
4. Cookies and trackers we use
Durations and exact names are from the live Site configuration and observation where available. Exact names may still vary by browser and vendor version.
Necessary (about 3–5)
| Name | Provider | Purpose | Maximum Storage Duration | Type |
|---|---|---|---|---|
WordPress / Elementor session cookies (e.g. wordpress_test_cookie, wordpress_logged_in_*, wp-settings-* if set) |
KEDbluestone / WordPress / Elementor | Site operation; admin login if applicable (most visitors will not receive login cookies) | Session / up to ~1 year | HTTP Cookie (first-party) |
| Elementor Pro form / CSRF / session tokens (exact names may vary) | KEDbluestone / Elementor | Contact / RFQ form submission security | Session / short-lived | HTTP Cookie / local (first-party) |
reCAPTCHA-related cookies on Google domains (e.g. _GRECAPTCHA or similar) |
Google LLC | Bot/spam protection for Elementor Pro contact forms (reCAPTCHA v3); script load delayed until Accept or form focus | typically up to 6 months on google.com | HTTP Cookie (third-party) |
ked_cookie_consent (first-party consent preference) |
KEDbluestone | Stores Accept / Reject choice for non-essential (marketing) cookies and scripts | about 180 days | HTTP Cookie (first-party) |
Note: The live consent banner sets ked_cookie_consent when you Accept or Reject. Matching values may also be kept in browser localStorage for the same purpose.
Preferences / Functional (about 3–5)
| Name | Provider | Purpose | Maximum Storage Duration | Type |
|---|---|---|---|---|
| Trustindex / Google Reviews widget cookies (if any are set by the Trustindex CDN) | Trustindex / Google | Display of Google Reviews widget | duration depends on the vendor; possible CDN cookies | HTTP Cookie / similar (third-party) |
| Google Maps JS API / Maps embed cookies (if maps load) | Google LLC | Functional map embeds | vendor-dependent | HTTP Cookie / similar (third-party) |
| Google Fonts | Google LLC / KEDbluestone | Font delivery; fonts are mostly self-hosted on the live site. Remote fetches (if any) may log IP at Google | Usually none / request logs | CDN / similar |
| Cloudflare cdnjs (Magnific Popup etc.) | Cloudflare | Static JS CDN delivery — not a tracker | CDN may log IP | CDN |
| Knight Lab Timeline iframe | Northwestern Knight Lab | Homepage timeline embed | Possible third-party storage in iframe | Embed / iframe |
Count note: Exact cookie names for preference / functional third parties can vary by visit and vendor version.
Statistics (GA4 + LeadPipe)
| Name | Provider | Purpose | Maximum Storage Duration | Type |
|---|---|---|---|---|
_ga, _ga_* (and related GA cookies such as _gid if set) |
Google LLC — Google Analytics 4 measurement ID G-6ZTHFV3YJS |
Site usage analytics (page URLs, client IDs, device/browser, engagement). Loaded sitewide via Header Footer Code Manager (HFCM) gtag snippet; gated until Accept by the live cookie consent banner (also blocked when GPC signals Reject) | Typically up to ~13 months / shorter for some GA cookies | HTTP Cookie (first-party, processed by Google) |
| LeadPipe / HFCM “JHL Lead Tracking” script identifiers | LeadPipe (leadpipe.aws53.cloud script path observed on live site) |
B2B lead / visitor identification (likely IP, UA, page context for company matching). Loaded sitewide via HFCM; gated until Accept by the live cookie consent banner (also blocked when GPC signals Reject) | Vendor-side identifiers (not observed on first-party HTML Set-Cookie); duration as determined by the vendor | Script / third-party identifiers |
Note: Google Analytics 4 (G-6ZTHFV3YJS) and LeadPipe (HFCM label “JHL Lead Tracking”) are live on every page crawled. MonsterInsights is installed but inactive; GA is via HFCM gtag, not MonsterInsights.
Marketing (Simpli.fi)
| Name | Provider | Purpose | Maximum Storage Duration | Type |
|---|---|---|---|---|
suid, suid_legacy |
Simpli.fi (tag.simpli.fi / .simpli.fi) |
Advertising / retargeting identifiers and page context. Loaded sitewide via HFCM; gated until Accept by the live cookie consent banner (also blocked when GPC signals Reject) | ~1 year; Secure; suid SameSite=None (as observed) |
HTTP Cookie (third-party) |
Not currently used on the live site: Meta Pixel / fbq, Google Tag Manager, LinkedIn Insight Tag, HubSpot tracking, Hotjar, Microsoft Clarity. A Facebook domain-verification meta tag only is present (not a pixel). Organic social profile links are not ad pixels.
5. Cookie consent banner
Status: Live. The banner lets you Accept all or Reject non-essential marketing cookies and scripts (GA4, LeadPipe, Simpli.fi). Strictly necessary cookies may run so the Site and banner can function. The current banner does not offer separate category toggles beyond Accept / Reject.
Your choice is stored in ked_cookie_consent (about 180 days) and matching browser storage. To see the banner again and make a new choice, clear cookies and site data for kedbluestone.com in your browser, or contact us at info@KEDbluestone.com.
6. Global Privacy Control and California opt-out
We honor Global Privacy Control (GPC) (Sec-GPC / navigator.globalPrivacyControl) and similar user-enabled opt-out preference signals as a request to opt out of the “sale” or “sharing” of personal information for that browser or device, as required by applicable law. On the live Site, a GPC signal is treated like Reject for marketing cookies and scripts and overrides a prior Accept for marketing.
Details on California and other state rights are in the Privacy Policy.
7. Browser controls
Most browsers let you block or delete cookies through their settings. Blocking all cookies may break parts of the Site (for example, forms). Browser controls are in addition to our live consent banner and GPC — not a substitute we rely on alone.
Industry opt-out tools (e.g., NAI / DAA) may be relevant for advertising cookies such as Simpli.fi;
8. Google Analytics 4
We use Google Analytics 4 (G-6ZTHFV3YJS) to learn how visitors use the Site. Google may process data in the United States. Google’s privacy policy: https://policies.google.com/privacy
Google opt-out add-on (where offered): https://tools.google.com/dlpage/gaoptout
Our live consent banner and GPC handling are the primary Site-level controls for non-essential marketing cookies and scripts.
9. LeadPipe (visitor / lead identification)
We use LeadPipe (HFCM “JHL Lead Tracking”) to associate Site visits with business organizations, typically from IP address and related signals, for business development. This is not strictly necessary to view the Site. We do not describe this data as anonymous. Whether disclosing identifiers to LeadPipe is a “sale” or “share” under CCPA is a legal classification.
10. Simpli.fi (advertising)
We use a Simpli.fi tag that sets suid / suid_legacy cookies for advertising / retargeting purposes. This is a marketing technology and is not strictly necessary.
11. Children
The Site is not directed at children under 18 (see Privacy Policy), and we do not knowingly use cookies to profile children.
12. Changes
We will post updates to this Cookie Policy on this page and change the “Last updated” date. If we add new categories of non-essential cookies, we will update the table and, where required, request consent again.
13. Contact
Contact details as in the Privacy Policy:
- Email: info@KEDbluestone.com
- Phone: (515) 727-0700
- Mail: KEDbluestone, Inc., Attn: Privacy Officer, 5548 NW 88th St., Johnston, Iowa 50131
Cross-links: Privacy Policy · Website Service Policy