Cookie Policy
Version 2.1Last update:
This Cookie Policy explains how Zenovay ("Zenovay", "we", "us", or "our") uses cookies and similar tracking technologies when you visit our website at zenovay.com (the "Site") and use our analytics platform (the "Services").
This policy describes what cookies are, how we use them, the types of cookies we use, and how you can control your cookie preferences. This policy complies with the EU ePrivacy Directive (Directive 2002/58/EC), the General Data Protection Regulation (GDPR), the Swiss Federal Act on Telecommunications (FMG) Art. 45c, and applicable EDOEB guidelines on cookies and tracking technologies.
Note on zenovay.com itself
Our landing site (zenovay.com) operates in Cookieless Mode. In this mode, our first-party analytics tracker uses temporary in-browser-memory identifiers that vanish when you close the tab - no tracking cookies, no localStorage entries, and no fingerprinting techniques are used by our first-party analytics on zenovay.com. We run no advertising or marketing pixels on this site, which is why you are not asked for cookie consent: nothing is stored on or read from your device that would require it. You can verify this in your browser's developer tools (Application → Cookies). The cookie table below describes cookies that may be set on customer websites that embed our analytics with Cookieless Mode disabled; on zenovay.com itself, only essential cookies are set (Cloudflare bot protection, and authentication if you sign in to the dashboard).
What Are Cookies
Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They are widely used to make websites work more efficiently and provide information to website owners.
Cookies help us understand how you use our Site and Services, remember your preferences, and improve your experience. Some cookies are essential for the Site to function, while others help us analyze usage patterns and optimize performance.
How We Use Cookies
We use cookies for the following purposes:
- Essential Cookies: These cookies are necessary for the Site and Services to function properly. They enable core functionality such as security, network management, authentication, and accessibility. You cannot opt out of these cookies.
- Analytics Cookies: These cookies help us understand how visitors interact with our Site and Services. They measure site performance, identify issues, and help us improve your experience. Analytics cookies are activated only after you provide consent.
Types of Cookies We Use
We use both first-party and third-party cookies on our Site:
- First-Party Cookies: Set by Zenovay directly on our Site. We use these to provide essential functionality and analyze how you use our Services.
- Third-Party Cookies: Set by our service providers, including analytics providers and content delivery networks.
The table below lists every cookie our own code can set. The first three apply to zenovay.com and to the Zenovay dashboard. The last two are set by our analytics tracker on a website that has embedded it, and only when that site runs with Cookieless Mode switched off. In Cookieless Mode the tracker sets no cookies at all.
| Cookie Name | Purpose | Type | Duration | Consent |
|---|---|---|---|---|
auth_session | Maintains your session state and authentication. This cookie is encrypted using AES-256 and contains your access token, user ID, and session expiration. | Essential | 90 days | Always active |
__cf_bm | Cloudflare bot management and security protection | Essential | 30 minutes | Always active |
cf_clearance | Cloudflare security challenge verification | Essential | 30 minutes | Always active |
zenovay_visitor_id | Analytics visitor identification on a website that embeds our tracker with Cookieless Mode switched off. Holds a randomly generated identifier so returning visitors can be told apart from new ones. The same cookie name is also written, for 30 days, by our cross-domain module when a site owner has linked several of their own domains together. Nothing is written under this name in Cookieless Mode. | Analytics | 30 days by default. The site owner can change this in their Zenovay settings. | Requires consent |
zenovay_session_id | Groups page views into a single browsing session on a website that embeds our tracker with Cookieless Mode switched off. It is refreshed each time an event is sent, so it expires 30 minutes after the last activity. Nothing is written under this name in Cookieless Mode. | Analytics | 30 minutes after the last activity, by default. The site owner can change the session timeout. | Requires consent |
Local Storage, Session Storage and Other Device Storage
Cookies are not the only way information can be kept on your device. Our analytics tracker also uses browser local storage and session storage, and on sites that turn on offline event queuing it uses IndexedDB. The table below names every entry our own code writes. Analytics keys begin with the prefix the site has configured, which is zenovay by default, so a site owner who changes the prefix will see the same names carrying their own prefix. Keys shown with a placeholder in angle brackets have that part filled in at runtime, for example with a date or a page path. In Cookieless Mode our tracker writes none of these entries: it keeps the equivalent state in page memory, which the browser discards when the tab is closed. The one entry written regardless of that setting is the exit intent marker in the third row, and only on sites that have switched exit intent messages on.
| Storage Key | Purpose | Type | Duration |
|---|---|---|---|
zenovay_session_start, zenovay_accumulated_session_time, zenovay_last_activity, zenovay_session_number, zenovay_session_id_backup | Local storage. Session measurement on a site that embeds our tracker: when the current session started, how many seconds the page was actually visible, when you last interacted so we can tell that a session has timed out, how many sessions this browser has started, and a copy of the current session identifier used to match that timing back to the right session. Written only when Cookieless Mode is switched off. | Analytics | No expiry is set. Kept until you clear site data. |
zenovay_visitor_history, zenovay_user_profile, zenovay_daily_pv_<date> | Local storage. Returning visitor detection, holding the first and last visit times, visit and session counts and the number of pages seen in the current session; the profile a site owner has passed to us if that site uses our identify feature; and a per day page view counter used to decide how much traffic to sample. Written only when Cookieless Mode is switched off. | Analytics | No expiry is set. Kept until you clear site data. |
zenovay_settings_cache, zenovay_utm, zenovay_pageview_state, zenovay_screenshot_v6_<page>_<date>, http_error_<status>_<url>_<session>, network_error_<url>_<session>, __zv_widget_shown_session | Session storage. A short lived copy of the site's tracker settings, the campaign parameters the visit arrived with so they still count on later pages, the last page view recorded so a reload is not counted twice, and markers that stop one screenshot request or one repeated page error from being reported more than once. The last key records that an exit intent message has already been shown in this tab. Everything here except that last key is skipped when Cookieless Mode is switched on. | Analytics | Until you close the browser tab. |
zenovay_disable_tracking, zenovay_queue, zenovay-sidebar, cache:* | Your controls and dashboard preferences. zenovay_disable_tracking is the opt out flag set on sites that offer an opt out control, and while it is present our tracker sends nothing. zenovay_queue is an IndexedDB database holding events that could not be sent yet, used only on sites that turn on offline event queuing and never in Cookieless Mode. zenovay-sidebar and cache:* are written in the Zenovay dashboard after you sign in, for your sidebar preference and a short lived copy of dashboard data. | User control and preference | The opt out flag and the sidebar preference have no expiry and stay until cleared. Queued events are removed once delivered. Cached dashboard data carries its own timeout and is replaced when stale. |
You can clear all of this at any time through your browser settings, and clearing site data for a website removes every entry listed above. Note that this also removes zenovay_disable_tracking, which would turn tracking back on for that site, so leave that entry in place if you have opted out. Whether a site that embeds Zenovay has to ask you before writing any of these entries depends on the law that applies to you and to that site, and that decision rests with the site owner rather than with Zenovay.
Third-Party Cookies
We work with trusted third-party service providers who may set cookies on your device when you visit our Site or use our Services. These providers help us deliver and improve our platform.
Third-party services we use include:
- Cloudflare: Edge computing, content delivery, and security services
- Stripe: Payment processing for subscriptions and billing
- Supabase: Database and authentication services
- Mapbox: Map visualization and geolocation services
These third parties have their own privacy policies and cookie policies. We recommend reviewing their policies to understand how they use cookies and collect data. In particular, we use Cloudflare Turnstile to protect our authentication pages from bots and abuse; Cloudflare's processing of the limited technical data involved is governed by the Cloudflare Turnstile Privacy Addendum (https://www.cloudflare.com/turnstile-privacy-policy/).
Your Cookie Choices
You have the right to accept or reject cookies. You can set or amend your cookie preferences at any time through the following methods:
- No Cookie Banner: We do not ask you to accept cookies on zenovay.com, because there is nothing to accept. Our analytics runs in Cookieless Mode and we use no advertising or marketing pixels, so no non-essential information is stored on or read from your device.
- Browser Settings: Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling essential cookies may prevent you from using certain features of our Site and Services.
To manage cookies in your browser:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies
Do Not Track and Global Privacy Control
Some browsers include a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want your online activity tracked. Currently, there is no universally accepted standard for how to respond to DNT signals, and our Site does not currently respond to DNT signals.
Global Privacy Control (GPC): We honor Global Privacy Control signals. When we detect a GPC signal from your browser, we treat it as a valid opt-out request under CCPA/CPRA and will not load analytics tracking cookies. You can enable GPC in supported browsers or browser extensions to automatically signal your privacy preferences.
On zenovay.com there are no non-essential cookies to manage, so no consent banner is shown. You can still use your browser settings described above at any time.
Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last update" date at the top of this page and may notify you through our Services or by email.
We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies.
Contact Us
If you have questions about our use of cookies or this Cookie Policy, please contact us:
Email: [email protected]
Support: [email protected]
Address: Zenovay, Wanderstrasse 19, 4054 Basel, Switzerland