Our position
We use the smallest set of cookies that lets the service function, plus a single analytics cookie if — and only if — you accept it. No advertising cookies. No tracking pixels. No third-party fingerprinting.
What we set
The cookies and similar storage we set are listed below.
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| zaag_session | Keeps you signed in | 30 days | Strictly necessary |
| zaag_csrf | Protects against cross-site request forgery | Session | Strictly necessary |
| zaag_prefs | Remembers display preferences (units, theme) | 1 year | Functional |
| zaag-consent | Remembers whether you accepted or declined analytics | Persistent (local storage) | Strictly necessary |
| _ga, _ga_* | Google Analytics — anonymous visit measurement. Set only if you accept. | Up to 2 years | Analytics |
We also use the browser's local storage to cache the PWA shell so it opens quickly. Local storage is not transmitted to our servers.
Third parties
We use Google Analytics 4 to understand how visitors find and use the site (page views, referrer, approximate location, device type). IP addresses are anonymised, advertising features are off, and nothing fires until you accept. If you decline, no analytics cookies are set and no events are sent. We do not use advertising tags, chat widgets, social pixels, or session-replay tools.
Managing cookies
You can change your analytics choice at any time: reopen the cookie banner.
You can also clear or block cookies in your browser at any time. Doing so for the strictly necessary cookies will sign you out and disable protected actions; the service will not work. Functional preferences will reset to defaults.
Questions: privacy@zaag.co.