Cookie Policy

Last updated: 2026-10-17

Version 1.0.0 · effective 2026-10-17 (current)· European UnionRomână

DRAFT — pending legal review. The structure and the inventory below reflect what the software does today. The wording has not been written or approved by counsel.

1. What this policy covers

This policy explains which cookies and similar technologies (local storage, session storage) ZETT uses in the EU region and on the global site, why, and how you control them.

2. Your choices

When you first visit, a banner asks for your choice. "Accept all" and "Reject all" are equally available, and "Customize" lets you choose per category. The site, sign-up and sign-in work if you reject everything.

You can change or withdraw your choice at any time from "Cookie settings" in the footer or at the end of this page. If your browser sends a Global Privacy Control signal, we treat it as "Reject all".

We store your choice for 6 months and ask again after that, or when this policy changes materially.

3. Categories

Strictly necessary: needed for the service you asked for (sign-in, workspace, region, your cookie choice). Always on.
Functional: preferences you set yourself, such as theme or layout. Disclosed here; no consent is asked because they only store a choice you made. [Counsel: confirm the exemption, see open question 5.]
Analytics: PostHog product analytics. Off until you allow it.
Diagnostics: browser performance or session tools. None are used today.
Marketing: none used.

Portal and token pages (client portal, quote, invoice, contract links) use strictly necessary storage only. Embedded forms on customers' websites set no cookies at all.

4. Inventory

4.1 Strictly necessary

Name	Type	Lifetime	Purpose
`sb-<host>-auth-token`	cookie	session / refresh token lifetime	Sign-in session (Supabase Auth); may be split into chunks
`zet-active-workspace`	cookie	1 year	The workspace you last opened
`zet_consent`	cookie	6 months	Your cookie choices (version, categories, time)
`zet-pending-team-invite-token`	local storage	until the invite is used	Keeps a team invite across e-mail confirmation
`zet_upload_resume_v1:*`	local storage	until the upload completes	Resumes uploads you started
`zet_selected_plan`	session storage	browser tab	Carries the plan you picked into onboarding

4.2 Functional

Name	Type	Lifetime	Purpose
`zet-theme`	local storage	until cleared	Light or dark theme
`zet-nav-collapsed`	local storage	until cleared	Side navigation collapsed or open
`zett-mobile-nav:*`	local storage	until cleared	Pinned mobile navigation items
`zett:calendar-mode:*`	local storage	until cleared	Calendar filter and view
`zett.projects.viewMode`	local storage	until cleared	Projects list or board view
`zet.media.viewMode`	local storage	until cleared

4.3 Analytics

Name	Type	Lifetime	Purpose
`ph_<project>_posthog`	cookie and local storage	1 year	PostHog product analytics, only after consent

4.4 Diagnostics

Name	Type	Lifetime	Purpose
`browser error beacon`	none	nothing stored	Error reports without identifiers; nothing is stored on your device

4.5 Planned

These are part of the design but are not set yet. They will be strictly necessary (zet_region, __Host-zet-portal).

Name	Type	Lifetime	Purpose
`zet_region`	cookie	1 year	Sends you to the region you chose
`__Host-zet-portal`	cookie	12 hours / 30 days	Client portal access after the access code

5. Third parties

Cloudflare Stream player: video playback you request is served in an embedded player from Cloudflare, which may use its own storage for playback.
Stripe Checkout: payment pages are hosted by Stripe and governed by Stripe's own policies.

6. Server-side diagnostics

Our servers keep logs and traces to run and secure the service. They do not use cookies and are described in the Privacy Policy.

7. Changes

We version this policy. A major version change asks for your choice again.

Change your cookie choices:

Back to home · Support ·

ZETT.