What epik actually is
epik is added to the landing page URL when someone clicks a Pinterest ad and lands on your site. The Pinterest tag on that page reads it to help match the visit back to the campaign that produced it, the same broad job every click ID on this list does, and Pinterest also sets a matching _epik first-party cookie on your domain so the match can survive beyond the single page load.
Why epik behaves differently from the other ad click IDs
Most click IDs covered on this site, gclid, fbclid, ttclid, msclkid, are opaque lookup keys: the value itself means nothing outside the ad platform, and the platform's own servers hold the actual record the key points to. epik looks different: the value is base64-encoded text, so anyone can decode its outer layer into a few short fields such as v=2 and u=. The field values themselves are opaque strings, not readable campaign names. Practically that changes little about what you should do with it.
Pinterest also has a fallback, _derived_epik, generated when a match is made without any cookie present at all, through enhanced matching signals instead. If you spot that name in a cookie inspector rather than in a URL, it's the same family, produced a different way.
Is it safe to remove?
There's no visible change for a visitor either way. For the advertiser, stripping epik before the Pinterest tag fires breaks the attribution chain back to the ad, the same as any other click ID. Because decoding the value only reveals opaque identifiers, there's no meaningful privacy upside to trying to read it yourself; removing it before sharing a link is the only useful action available.