zinn_consent — your privacy choices (1 year)
Remembers your answer: 'granted' (everything), 'denied' (nothing), or 'analytics' or 'ads' (one purpose only). It is set only when you answer the banner or the Privacy choices panel.
Legal
Cookie Policy
We set a handful of first-party cookies, and Google sets its own on our domains for analytics and for measuring our own adverts. This page lists every one of them by name and explains the choices you have.
Your choices, by region
We measure how our websites are used with PostHog (EU region) and Google Analytics 4, and we use Google's advertising signals to measure and improve our own adverts. In the European Economic Area, the United Kingdom and Switzerland none of this runs until you choose: a banner asks, with Accept all, Reject all and Settings (one choice for analytics, one for advertising). Everywhere else it is on from the first page, and you can change your choice at any time.
- In the EEA, the UK and Switzerland, Google's analytics storage, ad storage, ad user data and ad personalisation start switched off (Google Consent Mode), and PostHog does not run, until you accept.
- Outside those regions they start switched on. No banner is shown, and the "Privacy choices" link at the foot of every page opens the same choices.
- Your answer is kept in the zinn_consent cookie and is honoured on zinndigital.com, our product sites and our plugin sites. Reject all switches every signal off; Settings lets you allow analytics or advertising on its own.
- Your theme, currency and attribution cookies work the same whatever you choose.
Every cookie we set
Every cookie below is set on our own domains, and we do not sell or share their contents. Google's cookies are used for analytics and, where you allow it, to measure and personalise our own adverts.
zinn_attr, zinn_ad — attribution (90 days)
If you arrived from an ad or a campaign link, this stores the campaign parameters that were already in the URL you clicked (utm_source, utm_medium, utm_campaign, utm_term, utm_content, and the gclid/fbclid/ttclid/msclkid click ids). It lets us credit a signup to the campaign that produced it for our own accounting. It holds no behavioural profile and nothing you did not already send us in the address bar.
zinn_theme — preference (1 year)
Remembers whether you chose the light theme, the dark theme, or to follow your operating system. Strictly necessary for the preference to persist.
zinn_currency — preference (1 year)
Remembers which currency you asked to see prices in. Strictly necessary for the preference to persist.
_ga and _ga_<id> — Google Analytics 4 (up to 2 years)
Set by Google Analytics on our domains to tell one visit from another and count returning visitors. Set only where analytics is allowed: by default outside the EEA, the UK and Switzerland, and inside them only after you accept.
_gcl_au — Google Ads conversion measurement (90 days)
Set by Google's tag where advertising is allowed, to connect a visit to the Google advert that led to it so we can tell which of our adverts work. Not set if you refuse advertising.
What analytics measures
PostHog runs on its EU cloud (eu.i.posthog.com), so that data stays in the EU, alongside Google Analytics 4. We deliberately send both far less than they are capable of collecting.
- We record events we defined in advance — which page was viewed, which button was clicked, how far down a page people read.
- Autocapture is off. We do not send the text of whatever you clicked, and we never record your screen or session.
- We never send personal data: no name, email address, phone number, postal address, password, payment detail, form field value or search term. A denylist strips those keys before anything leaves your browser, as a backstop to the types that already forbid them.
- Search terms are replaced by their shape. A domain search sends the TLD and how many characters you typed — never the domain itself, which is often your own name or an unannounced project.
- Anonymous visitors get no persistent PostHog profile.
- The analytics code is downloaded only once the page has finished its work, so it cannot slow down what you came for.
Your rights and how to reach us
Zinn Digital® Ltd (Company No. 16385785, VAT No. GB 526 5236 92), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is the data controller for the cookies described on this page.
You have the right to access, correct or erase the data we hold about you, to restrict its processing, and to change your privacy choices at any time (the Privacy choices link at the foot of every page). You may also complain to the UK Information Commissioner's Office (ico.org.uk).
For anything on this page, or to exercise any of those rights, email office@zinndigital.com.
FAQ
How do I change my choices?
Use the "Privacy choices" link at the foot of any page: Accept all, Reject all, or allow only analytics or only advertising. You can also block cookies for our sites in your browser. The site works the same either way, and your theme and currency preferences keep working.
Why do some visitors see a banner and others do not?
In the European Economic Area, the United Kingdom and Switzerland the law requires us to ask before analytics or advertising cookies are set, so visitors there see a banner and nothing is set until they choose. Elsewhere these run from the first page, and the same choices are one click away in the footer.
Do you use advertising or cross-site tracking cookies?
We run no third-party advertising networks or cross-site trackers. Where you allow advertising, Google's tag measures which of our own Google adverts led to a visit or a sign-up, and can personalise our adverts to you; Reject all or Settings turns this off. We never sell your data.
Why does the attribution cookie not need consent?
It stores only the campaign parameters that were already present in the URL you clicked, in order to account for a commercial relationship — it builds no profile of your behaviour and tracks you across no other site. We list it here anyway, because telling you about every cookie we set matters more than only listing the ones we are obliged to.
Where is the data stored?
PostHog data goes to its EU cloud region (eu.i.posthog.com) and stays in the EU. Google Analytics data is processed by Google. The preference cookies are stored only in your own browser.