2. Why cookies exist on Zagvo
We use cookies for four purposes, and nothing else:
- Authentication: so you stay signed in as you move between pages instead of logging in repeatedly.
- Security: to protect against request forgery, session hijacking and automated abuse.
- Preferences: to remember choices such as interface and consent settings.
- Analytics and performance: to understand aggregate usage and diagnose errors, so the product improves.
What we do not do
We do not use cookies for advertising, we do not sell data collected through cookies, we do not run third-party advertising or retargeting networks on this site, and we do not build cross-site behavioural profiles of you.
3. Essential cookies
These are strictly necessary to deliver the Service you have requested. They cannot be switched off through a consent choice, because without them the Service does not work. Under EU and UK rules they do not require consent.
3.1 Authentication cookies
Set when you sign in, whether with an email address and password or through Google sign-in. They hold the session and refresh tokens that identify your Account for the duration of your session, and are cleared when you sign out. Without them you cannot access your Workspace.
3.2 Security cookies
Used to protect requests against cross-site request forgery, to bind a session to the browser that created it, and to support bot protection and rate limiting on sign-in and other sensitive endpoints. Our edge and bot-protection provider may set a short-lived cookie to distinguish legitimate visitors from automated traffic.
3.3 Load and routing cookies
Our hosting provider may set operational cookies to route requests correctly and maintain service integrity. They contain no personal profile information.
4. Preference cookies
These remember choices you have made so the Service behaves the way you expect: interface preferences, dismissed notices, the last workspace surface you were on, and your cookie consent decision itself. They are not required for the Service to function, but disabling them means preferences reset on every visit, including your consent choice, which we would then have to ask about again.
5. Analytics and performance cookies
5.1 Analytics cookies
These help us understand aggregate behaviour, which pages are visited, which features are adopted, where people get stuck. Identifiers used are pseudonymous, and we use the results in aggregate to make product decisions. Where consent is required in your region, these are set only after you consent.
5.2 Performance and error monitoring
These support measurement of page performance and capture of runtime errors so we can fix defects. Error reports include technical metadata and may include an Account identifier so we can trace a specific report, but are not used for tracking you across sites.
6. Session and persistent cookies
Session cookies exist only while your browser is open and are deleted when you close it. They are used mainly for security and short-lived state.
Persistent cookies remain for a defined period so we can recognise your browser on a later visit, for example to keep you signed in or to remember your consent choice. The table below gives the typical durations we use.
| Category | Type | Typical duration |
|---|---|---|
| Authentication | Persistent and session | Session token: up to 1 hour; refresh: up to 30 days |
| Security and anti-abuse | Session | Session, or up to 24 hours |
| Preferences | Persistent | Up to 12 months |
| Consent choice | Persistent | Up to 12 months, then re-asked |
| Analytics | Persistent | Up to 13 months |
| Performance and error monitoring | Session and persistent | Session, or up to 6 months |
Durations are maximums; individual cookies may be shorter, and provider defaults can change. If you need an exact, current inventory for a procurement or compliance review, ask us at legal@zagvo.com and we will provide one.
7. Third-party cookies
Some cookies are set by providers we use to deliver the Service, rather than by zagvo.com directly. They are limited to the following.
| Provider category | Purpose | Consent required |
|---|---|---|
| Authentication, database and storage provider | Maintaining your signed-in session | No (essential) |
| Edge hosting, CDN and bot protection | Routing, integrity, abuse prevention | No (essential) |
| Google sign-in | Optional authentication when you choose Google | No (essential to that choice) |
| Payment processor | Fraud prevention during checkout | No (essential to payment) |
| Product analytics provider | Aggregate usage measurement | Yes, where required |
| Error monitoring provider | Crash and error diagnosis | Yes, where required |
We do not permit these providers to use cookies set through Zagvo for their own advertising purposes. Their own policies govern data they process as controllers; the Privacy Policy lists these providers and their roles.
8. Cookie consent
Where the law requires consent, including the EEA, the United Kingdom and Switzerland, we set non-essential cookies only after you have given it, and we record your decision so we do not ask again unnecessarily. Essential cookies are set on the basis of necessity rather than consent.
You can change or withdraw your choice at any time using the cookie settings available from this website, or by clearing cookies in your browser. Withdrawing consent stops future non-essential cookies; it does not delete analytics data already collected, though you may request erasure under the Privacy Policy.
In regions where consent is not required for analytics, we still honour recognised opt-out signals such as Global Privacy Control where technically feasible.
9. Browser and device controls
Independently of our settings, your browser gives you control. Most browsers let you view existing cookies, delete them, block third-party cookies, or block all cookies. Look under Settings, then Privacy or Site data, in Chrome, Safari, Firefox or Edge, and note that private or incognito windows discard storage when closed.
Blocking everything has consequences
Blocking all cookies and browser storage prevents sign-in, so the Zagvo Workspace will not be usable. Blocking only non-essential cookies is fully supported and costs you nothing but our analytics.
10. Retention of cookie data
Cookies expire according to the durations in Section 6, or earlier if you delete them. Data derived from analytics cookies is retained for up to 14 months and then aggregated or deleted, as described in the retention schedule of the Privacy Policy. Security and access logs generated alongside these cookies are typically retained for 12 months for incident investigation.
11. Regional rights
- EEA, UK and Switzerland. Prior consent for non-essential cookies, the right to withdraw consent at any time, and rights of access, erasure and objection over data derived from them.
- California and comparable US states. The right to know what is collected and why, to request deletion or correction, and to opt out of sale or sharing. We do not sell or share personal information for cross-context behavioural advertising, so there is no such opt-out to exercise.
- Elsewhere. Local law may provide equivalent rights; contact us and we will apply whichever standard gives you more control.
12. Updates to this policy
We may revise this document from time to time to reflect changes in the Service, our providers, or applicable law. When we make material changes we will update the “Last updated” date, publish the revised document on this page, and (where the change materially reduces your rights or materially expands your obligations) notify account holders by email or in-product notice before the change takes effect. Changes are effective on the stated effective date. Continued use of the Service after that date constitutes acceptance of the revised document. Prior versions are available on request.
Because cookies change when providers change, we review this policy whenever we add or remove a provider that sets cookies, and at least annually.
13. Contact
- Cookie and privacy questions: legal@zagvo.com
- General support: help@zagvo.com, or the contact page on this website