Cookies

Last updated:

This page explains exactly which cookies and similar browser storage zovrā uses, what they do, and how to change your preferences. We have deliberately kept the list short - we don’t use advertising cookies and we don’t share any of these with third-party ad networks.

Strictly necessary (always on)

These are required for the site to work. They cannot be switched off through the banner because without them you couldn’t sign in, the captcha couldn’t protect sign-ups from bots, and your theme preference wouldn’t survive a page reload. No GDPR consent is required for strictly-necessary cookies (Article 5(3) ePrivacy Directive, recital 25).

  • Authentication session (sb-*) - set by our backend when you sign in. Lets you stay signed in across page reloads. Expires when the session expires (typically 1 hour, refreshed automatically while you’re active).
  • Bot-protection captcha (cf_*) - set when a captcha challenge is shown on the sign-up page. Confirms you are human, not a bot. Expires after the verification.
  • Theme preference (zovra.theme in localStorage) - remembers whether you chose light or dark mode. Same-origin only; never sent to any server.
  • Consent state (zovra.cookie-consent.v1in localStorage) - remembers your choice on the cookie banner so we don’t re-ask on every page. Same-origin only.

Optional analytics (off by default)

Used only if you click “Accept all” on the cookie banner. If you reject or haven’t decided yet, the analytics SDK never loads and these cookies are never set.

  • Product analytics (ph_*) - anonymous product analytics. Tracks which pages are visited and which features are used, in aggregate. We have explicitly disabled: autocapture, session recording, and IP-address collection. Our analytics provider is hosted in the EU. Data is never sold and never used for advertising. Retention is 1 year.

What we don’t use

  • No Google Analytics, no Facebook Pixel, no LinkedIn Insights, no TikTok pixel, no other ad-network tags.
  • No third-party advertising cookies.
  • No cross-site tracking. We don’t share any identifier with sites outside zovra.me.
  • No fingerprinting techniques (canvas, font, device) either by us or by any processor we use.

Changing your preferences

Article 7(3) of GDPR requires that withdrawing consent be as easy as giving it. You can change your analytics choice at any time using the cookie banner (it reappears whenever no decision is recorded), and you can manage or clear all cookies through your browser settings.

Browser controls

Every modern browser lets you clear site data for an individual origin, or block third-party cookies globally. Steps differ by browser; the easiest is usually Settings → Privacy & security → Site settings.

Note: blocking the strictly-necessary cookies will break sign-in. That’s why we don’t offer a “reject strictly necessary” option - the feature genuinely wouldn’t work without them.

Questions

Email privacy@zovra.me or see our full Privacy Policy for the bigger picture on personal data.