Cookie policy
This page lists everything the Kootzoo site keeps in your browser: what it is for, how long it stays and who provides it. The anonymous visit counts store nothing; extended analytics run only if you accept them.
Last updated October 16, 2026
Read the Listing rules before you post.
Cookies and storage
A cookie is a small text file that a website asks your browser to keep. A site can also keep data in your browser's local storage, or ask it to run a small background program called a service worker. On this page, all of these are called “storage”.
Kootzoo uses storage to keep you signed in, to remember your choices, to protect its forms from bots and, only if you accept, to count how the site is used. Kootzoo sets no advertising cookies.
Your choice
Necessary storage is always on: the site cannot work, or keep its forms safe, without it.
Anonymous visit counts are always on: they use no cookie and store nothing in your browser (see Analytics below).
Analytics are off until you press Accept in the notice at the bottom of the page. Reject, or no answer, keeps them off.
Your answer is kept in this browser for 12 months, then the notice asks again. You can change it at any time: use Cookie settings in the footer of any page. If your browser sends Do Not Track or Global Privacy Control, analytics stay off even if you accept, and so do the anonymous visit counts.
Necessary
Always on, because the site needs them. Most of them exist only once you sign in or turn on notifications.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| sb-<project>-auth-token | Keeps you signed in. Set only when you sign in. A long session is split into numbered parts (.0, .1 …). | Up to 400 days after you last used the site, or until you sign out | Kootzoo |
| sb-<project>-auth-token-code-verifier | Completes a sign-in with Google or Apple, or a password reset. Set when you start one and deleted when it finishes. | Until the sign-in finishes (at most 400 days if you abandon it) | Kootzoo |
| kz_signed_in | A flag (the value 1) that tells the header whether to ask who is signed in. It holds nothing else. | Up to 400 days; removed when you sign out | Kootzoo |
| kz_push_device | Remembers which of your devices this browser is, so that signing out can stop its notifications. Set only if you turn on browser notifications. | Up to 400 days; removed when you turn notifications off or sign out | Kootzoo |
| kz:cookie-consent (local storage) | Remembers whether you accepted or rejected analytics, and when. | 12 months, then we ask again | Kootzoo |
| Service worker /sw.js and the browser's push subscription | Shows the notifications you turned on, even when the site is closed. It keeps no copy of any page. Registered only when you are signed in and have allowed notifications. | Until you turn notifications off or clear the site's data | Kootzoo, with your browser's push service |
| __prerender_bypass | Team only: lets Kootzoo's editors preview unpublished text. Visitors never receive it. | Until the browser is closed | Kootzoo |
Preferences
Set only when you use the control that sets them: choosing a language or a theme, pressing “Not now”, or choosing a place in the map’s search. Apart from the language cookie, which the site reads to open in your language, they stay in your browser and are never sent to us.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| kz_locale | Remembers the language you chose, so the site opens in it. | 1 year | Kootzoo |
| kz-theme (local storage) | Remembers whether you chose the light or the dark theme. | Until you clear it | Kootzoo |
| kz-density (local storage) | Remembers how close together table rows are in the business back office and the team's console. | Until you clear it | Kootzoo |
| kz:push-offer:snoozed-at (local storage) | Remembers that you pressed “Not now” on the offer to turn on notifications. | 30 days, then the offer may return | Kootzoo |
| kz:map-recent (local storage) | Remembers the last five places you chose in the map’s search, so you can pick them again. It stays in your browser and is never sent to Kootzoo. | Until you clear it (“Clear recent searches” in the search does) | Kootzoo |
Analytics
Kootzoo uses PostHog, on its EU cloud, to learn which parts of the site work. It works at two levels.
Anonymous visit counts are always on. They count pages opened, the country your visit comes from (named by our hosting network; no IP address is sent to PostHog), the kind of device, how long a page stays open and a short, fixed list of steps (such as opening the map, filing a report or joining the waiting list). They keep nothing in your browser: no cookie and no local storage, and the anonymous code that groups one day's page views of a visit changes every day, so a visit cannot be linked to the next. The events carry no name, email address or free text.
Extended analytics run only if you accept. PostHog then keeps an id in your browser, so it can tell a returning visit, works out your city from your IP address (which it does not keep), and records where you click and how you move around a page (heatmaps). We collect no clicks on your messages, profile, account or sign-in pages. A second tool, Vercel Web Analytics, also only if you accept, counts page views (which page, from where, on what kind of device) without cookies.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| None for anonymous counts. If you accept: ph_<project>_posthog and __ph_opt_in_out_<project> (cookie and local storage) | Anonymous counts store nothing. If you accept, it recognises your browser across visits and ties your clicks together. | Anonymous counts: nothing. If you accept: up to 1 year | PostHog (EU cloud) |
Security and error reports
Always on. Cloudflare Turnstile checks that a form is filled in by a person. It loads on the pages that have the waiting-list or contact form as soon as they open, not only when you send the form. Cloudflare's documentation does not list what Turnstile keeps in your browser; the entry below is what we measured. Sentry receives a report when something on the site breaks.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| cf.turnstile.u (local storage, inside Cloudflare's own frame) | Used by Cloudflare Turnstile to tell people from bots. It sits in Cloudflare's frame, not in the Kootzoo site's own storage. | No expiry that we know of: it stays until you clear it | Cloudflare |
| None (nothing is stored) | Receives a report when something on the site breaks. | Nothing is kept in your browser | Sentry |
Other companies involved
Four outside services are involved. They mostly work on our behalf, and the privacy policy says what they receive.
- Cloudflare (Turnstile, the bot check): sees your IP address, details of your browser and the page's address when the check runs. Cloudflare also uses these signals to improve its bot detection, as its own policy explains.
- PostHog (analytics): receives the anonymous visit counts above and, only if you accept, the clicks and heatmaps, on its EU cloud.
- Vercel (Web Analytics, only if you accept): receives the page views named above.
- Sentry (error reports): receives a technical report when something breaks, with the error and the page it happened on.
Clearing what is kept
Your browser lets you see, block and delete cookies and site data: look for “Cookies and site data” in its privacy settings. Deleting the sign-in cookies signs you out. Deleting your cookie choice makes the notice ask again. If you block all cookies, you cannot sign in.