Legal
Cookie Policy
Exactly what Zestli stores on your device, why, and how to change it. We use no advertising or cross-site tracking cookies.
1. What cookies are
“Cookies” here means cookies and similar technologies — local storage, session storage, and like mechanisms — that store or read information on your device. We use them sparingly. This policy works alongside our Privacy Policy, which explains how we handle personal data more generally.
2. Categories
We group storage into three categories. Non-essential categories load only after you opt in.
- Strictly necessary — always on. Required to run the site, keep your session secure, and remember your consent choice. These cannot be switched off, and the law does not require consent for them.
- Functional — off by default. Remember display and navigation preferences. Loaded only with your consent.
- Analytics — off by default. Privacy-respecting, first-party, aggregate measurement of how the site is used. No advertising or cross-site tracking. Loaded only with your consent.
3. What we store
| Item | Purpose | Category | Duration | Provider |
|---|---|---|---|---|
zestli_consent_v1 | Stores your cookie-consent choices so we don’t ask again | Strictly necessary | 12 months (local storage) | Zestli (first-party) |
| Session token | Keeps you signed in / maintains your guest session | Strictly necessary | Session | Zestli (first-party) |
| Security / fraud-prevention | Protects payment and sign-in against fraud and abuse | Strictly necessary | Session / short-lived | Zestli & Stripe (payment processor) |
| Preference store | Remembers display and navigation preferences | Functional | 6 months | Zestli (first-party) |
| Analytics measurement | Aggregate, non-identifying usage measurement | Analytics | Per provider; loaded only on consent | Privacy-respecting analytics (first-party) |
The full per-item inventory is verified as part of our launch checklist; analytics is enabled only once a consent-mode provider is wired. Stripe may set strictly-necessary cookies during checkout to prevent fraud; these are listed above and described in the Stripe Privacy Policy.
4. How consent works
In regions that require opt-in (including the EU, EEA, and UK), no non-essential cookie or script loads before you give consent. On your first visit we show a banner that lets you Accept all, Reject all (with equal prominence), or Manage preferences by category. Non-essential categories are off by default. Your choice is recorded, applies until you change it, and we ask again periodically (and at most every 12 months). You can change or withdraw consent at any time — withdrawing is as easy as giving it — and withdrawal stops the relevant storage going forward.
5. Manage consent
Change your choices any time with the control (also in the footer and the colophon). Questions: privacy@zestli.ai.