Cookie Policy

Last updated 24 September 2026

Policy version 2026-09-24.1

This policy explains the cookies and similar technologies ZOTO uses, why we use them, and the choices you have.

1. Categories of cookies

Strictly necessary

Purpose: Sign-in, session security, load balancing

Consent: Not required

Requested preferences

Purpose: Remembering your privacy choice and preferences necessary for a feature you request

Consent: Not required where strictly necessary for that requested feature

Analytics

Purpose: Understanding how features are used so we can improve them

Consent: Required

Session replay

Purpose: Recording on-screen activity

Consent: Disabled

2. Your choices

  1. Optional analytics stays off until you choose Accept analytics. Reject analytics is equally accessible; necessary sign-in and security functions still work.
  2. You can change your choice using Cookie settings or Privacy & data, including while signed out. Choices apply to this browser; repeat the choice on other browsers or devices.
  3. Withdrawal stops future optional analytics and clears the analytics identifiers managed by ZOTO on that browser. Session replay is disabled regardless of your analytics choice.
  4. Blocking strictly necessary cookies may stop parts of ZOTO from working.

3. Cookie list

The zoto_cookie_consent entry in browser local storage remembers your analytics choice, policy version and choice time for up to 180 days. Only after renewed acceptance of return-visit analytics, zoto_analytics_browser_id stores a random identifier and its creation time. It expires 90 days after creation, without extending on visits; expired identifiers are discarded when the app next checks them. Signing out starts a new identifier; withdrawal clears it. This measures repeat visits on one browser, without account identification or cross-device matching. When browser storage is blocked, the identifier lasts only for the current page. PostHog itself keeps identifiers and session state in page memory. Google Analytics, session replay and Lovable hosting visitor analytics are disabled. The app clears legacy PostHog and Google Analytics identifiers and the former hosting analytics session-id cookie. Essential sign-in storage and preferences needed for requested features remain separate. Contact hello@zoto.ie for details about essential storage or provider-held data.