Cookie Policy
This Cookie Policy explains how Zo2y uses cookies and similar technologies on the Zo2y website and progressive web app. It is part of our Privacy Policy.
1. What Are Cookies
Cookies are small text files placed on your device when you visit a website. They let the site recognize your device between page loads and across visits. "Local storage" and "session storage" work similarly but are stored by your browser rather than set by servers.
We also use related technologies like web storage, IndexedDB, service workers, and pixels. Where this policy refers to "cookies", it covers all of them.
2. What We Use Cookies For
- To keep you signed in across pages.
- To remember theme and accessibility preferences.
- To measure site performance (only if you opt in).
- To detect and prevent abuse.
- To deliver the installable progressive web app to your device.
3. Cookie Categories We Use
| Category | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Authentication, security, load balancing, request signing | No +�G�Gǥ always on |
| Functional | Theme, last-viewed page, list filter state, locale | No +�G�Gǥ set only after you opt in or sign in |
| Analytics | First-party aggregated page metrics (no third-party trackers) | Yes +�G�Gǥ opt-in only |
| Advertising | We do not use advertising cookies | N/A |
4. Full Cookie & Storage List
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
sb-gfkhjbztayjyojsgdpgk-auth-token | Supabase / strictly necessary | Holds your access and refresh tokens so you stay signed in. | Session + refresh |
zo2y-auth-v2 | localStorage / strictly necessary | Mirrors your session snapshot for offline UX. | Until you sign out |
zo2y-auth-durable-v2 | localStorage / strictly necessary | Persists last-known session across tab closes. | Up to 30 days |
zo2y-auth-explicit-signout-v2 | localStorage / strictly necessary | Records explicit sign-outs so we don't auto-restore a stale session. | 10 minutes |
zo2y-cookie-consent | localStorage / strictly necessary | Stores your cookie consent choice. | 12 months |
zo2y-theme | localStorage / functional | Remembers your light/dark theme. | 12 months |
zo2y_country_gallery_cache_v4 | localStorage / functional | Caches travel page gallery images for fast reloads. | 7 days |
zo2y_travel_photo_cache_v7 | localStorage / functional | Caches country travel photos. | 14 days |
zo2y-analytics-consent | localStorage / analytics | Records your analytics opt-in. | 12 months |
zo2y_perf_* | localStorage / analytics | Aggregated page performance samples. | 30 days |
| Service Worker cache | Cache API / strictly necessary | Enables offline access and faster page loads. | Until cleared |
5. Third-Party Cookies
Zo2y itself does not set advertising or cross-site tracking cookies. The third-party services we use may set their own cookies on their domains. Those are governed by each provider's own cookie policy:
These cookies are set when your browser requests a resource from their domains (e.g., loading a font from fonts.googleapis.com). You can block them with browser settings, but the corresponding feature may not work.
6. Manage Your Preferences
You can change your cookie choices at any time from the cookie consent banner.
You can also delete Zo2y data and start over using the clear-auth page, which removes local storage, cookies, service workers, and cached data.
7. Browser Controls
Most browsers let you:
- See what cookies are set and delete them.
- Block third-party cookies.
- Block all cookies (this will break sign-in).
- Clear cookies automatically when you close the browser.
- Enable "Do Not Track" or "Global Privacy Control" (we honor GPC).
Browser help pages:
8. Contact
Zo2y Privacy TeamEmail: privacy@zo2y.com
Effective date: June 6, 2026.