Cookie Policy
Version 2.4Last update:
This Cookie Policy explains how Zenovay ("Zenovay", "we", "us", or "our") uses cookies and similar tracking technologies when you visit our website at zenovay.com (the "Site") and use our analytics platform (the "Services").
This policy describes what cookies are, how we use them, the types we use, and how you can control them. It is written with reference to the EU ePrivacy Directive (Directive 2002/58/EC), the General Data Protection Regulation (GDPR), Article 45c of the Swiss Federal Act on Telecommunications (FMG) and the guidance published by the Swiss Federal Data Protection and Information Commissioner. Whether a particular website that embeds our analytics needs to ask its visitors for consent depends on that website's jurisdiction, configuration and the other technologies it loads, and is a decision for that website's operator.
Note on zenovay.com itself
Our own site (zenovay.com) and its subdomains (docs, help, tools and the sign-in page on auth) start every visit in Cookieless Mode. Until you make a choice, the tracker uses in-memory identifiers scoped to the browser tab, which disappear when the tab closes: no analytics cookies, no localStorage entries and no fingerprinting. A small banner asks whether we may set our own analytics cookie. Only if you allow it does the tracker switch to the first-party cookies zenovay_visitor_id (90 days) and zenovay_session_id (30 minutes after the last activity), so that we can recognise returning visits; if you decline, nothing changes and your visit stays cookieless. Your answer is remembered in one strictly necessary cookie, zv_consent, on .zenovay.com for up to 365 days, so that we stop asking and the same choice applies on our subdomains; it is written whether you accept or decline. You can change or withdraw your choice at any time through the Cookie settings link in the footer; withdrawing removes the analytics cookies. We run no advertising or marketing pixels on this site. Beyond page views, this site also collects JavaScript errors and frustration signals such as rage clicks. The table below lists every cookie our code can set; on zenovay.com, the analytics cookies are only ever set after you allowed them.
What Are Cookies
Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They are widely used to make websites work more efficiently and provide information to website owners.
Cookies help us understand how you use our Site and Services, remember your preferences, and improve your experience. Some cookies are essential for the Site to function, while others help us analyze usage patterns and optimize performance.
How We Use Cookies
We use cookies for the following purposes:
- Essential Cookies: These cookies are necessary for the Site and Services to function properly. They enable core functionality such as security, network management, authentication, and accessibility. You cannot opt out of these cookies.
- Analytics Cookies: These cookies help us understand how visitors interact with our Site and Services. They measure site performance, identify issues, and help us improve your experience. Analytics cookies are activated only after you provide consent.
Types of Cookies We Use
We use both first-party and third-party cookies on our Site:
- First-Party Cookies: Set by Zenovay directly on our Site. We use these to provide essential functionality and analyze how you use our Services.
- Third-Party Cookies: Set by our service providers, including analytics providers and content delivery networks.
The table below lists every cookie our own code can set. auth_session, __cf_bm, cf_clearance and zv_consent apply to zenovay.com and to the Zenovay dashboard. zenovay_visitor_id and zenovay_session_id are set by our analytics tracker on a website that has embedded it, only when that site runs with Cookieless Mode switched off, and on zenovay.com only after you allowed analytics cookies in our banner. In Cookieless Mode the tracker sets no cookies at all. Cookieless Mode is the option pre-selected when a website is added to Zenovay, so a site created today starts cookieless unless its operator actively chose the first-party cookie mode instead; websites created before that became the default keep whichever mode they were on, and the operator can change the setting at any time.
| Cookie Name | Purpose | Type | Duration | Consent |
|---|---|---|---|---|
auth_session | Maintains your session state and authentication. This cookie is encrypted using AES-256 and contains your access token, user ID, and session expiration. | Essential | 90 days | Always active |
__cf_bm | Cloudflare bot management and security protection | Essential | 30 minutes | Always active |
cf_clearance | Cloudflare security challenge verification | Essential | 30 minutes | Always active |
zenovay_visitor_id | Analytics visitor identification on a website that embeds our tracker with Cookieless Mode switched off, and on zenovay.com and its subdomains once you have allowed analytics cookies. Holds a randomly generated identifier so returning visitors can be told apart from new ones. The same cookie name is also written, for 30 days, by our cross-domain module when a site owner has linked several of their own domains together. Nothing is written under this name in Cookieless Mode. | Analytics | 30 days by default. The site owner can change this in their Zenovay settings. On zenovay.com: 90 days. | Requires consent |
zenovay_session_id | Groups page views into a single browsing session on a website that embeds our tracker with Cookieless Mode switched off, and on zenovay.com and its subdomains once you have allowed analytics cookies. It is refreshed each time an event is sent, so it expires 30 minutes after the last activity. Nothing is written under this name in Cookieless Mode. | Analytics | 30 minutes after the last activity, by default. The site owner can change the session timeout. | Requires consent |
zv_consent | Remembers your answer to the analytics cookie banner on zenovay.com (allow or decline) so that we do not ask again, and applies the same choice on our subdomains. It holds only that answer. | Essential | 365 days | Always active |
Local Storage, Session Storage and Other Device Storage
Cookies are not the only way information can be kept on your device. Our analytics tracker also uses browser local storage and session storage, and on sites that turn on offline event queuing it uses IndexedDB. The table below names every entry our own code writes. Analytics keys begin with the prefix the site has configured, which is zenovay by default, so a site owner who changes the prefix will see the same names carrying their own prefix. Keys shown with a placeholder in angle brackets have that part filled in at runtime, for example with a date or a page path. In Cookieless Mode our tracker writes none of these entries: it keeps the equivalent state in page memory, which the browser discards when the tab is closed. The one entry written regardless of that setting is the exit intent marker in the third row, and only on sites that have switched exit intent messages on.
| Storage Key | Purpose | Type | Duration |
|---|---|---|---|
zenovay_session_start, zenovay_accumulated_session_time, zenovay_last_activity, zenovay_session_number, zenovay_session_id_backup | Local storage. Session measurement on a site that embeds our tracker: when the current session started, how many seconds the page was actually visible, when you last interacted so we can tell that a session has timed out, how many sessions this browser has started, and a copy of the current session identifier used to match that timing back to the right session. Written only when Cookieless Mode is switched off. | Analytics | No expiry is set. Kept until you clear site data. |
zenovay_visitor_history, zenovay_user_profile, zenovay_daily_pv_<date> | Local storage. Returning visitor detection, holding the first and last visit times, visit and session counts and the number of pages seen in the current session; the profile a site owner has passed to us if that site uses our identify feature; and a per-day page view counter. Written only when Cookieless Mode is switched off. | Analytics | No expiry is set. Kept until you clear site data. |
zenovay_settings_cache, zenovay_utm, zenovay_pageview_state, zenovay_screenshot_v6_<page>_<date>, http_error_<status>_<url>_<session>, network_error_<url>_<session>, __zv_widget_shown_session | Session storage. A short lived copy of the site's tracker settings, the campaign parameters the visit arrived with so they still count on later pages, the last page view recorded so a reload is not counted twice, and markers that stop one screenshot request or one repeated page error from being reported more than once. The last key records that an exit intent message has already been shown in this tab. Everything here except that last key is skipped when Cookieless Mode is switched on. | Analytics | Until you close the browser tab. |
zenovay_disable_tracking, zenovay_queue, zenovay-sidebar, cache:* | Your controls and dashboard preferences. zenovay_disable_tracking is the opt out flag set on sites that offer an opt out control, and while it is present our tracker sends nothing. zenovay_queue is an IndexedDB database holding events that could not be sent yet, used only on sites that turn on offline event queuing and never in Cookieless Mode. zenovay-sidebar and cache:* are written in the Zenovay dashboard after you sign in, for your sidebar preference and a short lived copy of dashboard data. zv-replay-consent-v1 held the choice made on the banner on zenovay.com until October 2026; it is removed on your next visit, because that choice now lives in the zv_consent cookie. If you take part in a Zenovay AI interview, that interview page keeps a copy of your own transcript in local storage under zv_interview_transcript, so that you can review it. | User control and preference | The opt out flag and the sidebar preference have no expiry and stay until cleared. Queued events are removed once delivered. Cached dashboard data carries its own timeout and is replaced when stale. |
You can clear all of this at any time through your browser settings, and clearing site data for a website removes every entry listed above. Note that this also removes zenovay_disable_tracking, which would turn tracking back on for that site, so leave that entry in place if you have opted out. Whether a site that embeds Zenovay has to ask you before writing any of these entries depends on the law that applies to you and to that site, and that decision rests with the site owner rather than with Zenovay.
Third-Party Cookies
We work with trusted third-party service providers who may set cookies on your device when you visit our Site or use our Services. These providers help us deliver and improve our platform.
Third-party services we use include:
- Cloudflare: Edge computing, content delivery, and security services
- Stripe: Payment processing for subscriptions and billing
- Mapbox: Map rendering in the Zenovay dashboard
- Resend: Transactional email delivery (does not set cookies on the website)
- Sentry: Error monitoring and application performance tracking
- OpenAI (via Cloudflare AI Gateway): AI-powered analytics insights processing (optional feature)
These third parties have their own privacy policies and cookie policies. We recommend reviewing their policies to understand how they use cookies and collect data. In particular, we use Cloudflare Turnstile to protect our authentication pages from bots and abuse; Cloudflare's processing of the limited technical data involved is governed by the Cloudflare Turnstile Privacy Addendum (https://www.cloudflare.com/turnstile-privacy-policy/).
Your Cookie Choices
You have the right to accept or reject cookies. You can set or amend your cookie preferences at any time through the following methods:
- Cookie banner on zenovay.com: On this site we ask before setting our own analytics cookie. Nothing is stored for analytics until you press Allow; if you decline, your visit stays cookieless. You can change or withdraw your choice at any time through the Cookie settings link in the footer. We load no advertising or marketing pixels.
- Browser Settings: Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling essential cookies may prevent you from using certain features of our Site and Services.
To manage cookies in your browser:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies
Do Not Track and Global Privacy Control
Some browsers include a "Do Not Track" (DNT) feature. There is no agreed standard for how a site should respond to it, and most browsers have dropped it. Our tracking script does honour it by default: a browser sending DNT is not tracked. There is one exception, and we would rather state it than bury it. A website operator can switch DNT off for their own site, and our first-party proxy setup does so automatically; zenovay.com uses that setup, so this site does not act on DNT. Global Privacy Control is treated differently and cannot be switched off, as described next.
Global Privacy Control (GPC): we honour it, and no website operator can override it. When our script sees that your browser is sending GPC, it stops before it collects anything: no page view is sent, no identifier is generated, and no session replay, heatmap or enrichment runs. We treat it as a valid opt-out under the CCPA/CPRA. You can turn GPC on in supported browsers or with a browser extension to send this signal automatically to every site you visit.
On zenovay.com the only non-essential cookies are our own analytics cookies, and they are set only after you allow them in the banner. You can change that choice at any time from the Cookie settings link in the footer, and your browser settings remain available to you regardless.
Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last update" date at the top of this page and may notify you through our Services or by email.
We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies.
Contact Us
If you have questions about our use of cookies or this Cookie Policy, please contact us:
Email: [email protected]
Support: [email protected]
Address: Zenovay, Wanderstrasse 19, 4054 Basel, Switzerland