1. What Are Cookies
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, provide a better user experience, and supply information to site owners. This policy explains what cookies zoneout uses, why we use them, and how you can manage them.
2. Types of Cookies We Use
2.1 Essential Cookies (Strictly Necessary)
These cookies are required for the Platform to function. They cannot be disabled without breaking core functionality.
| Cookie | Provider | Purpose | Duration |
|---|
| sb-*-auth-token | Supabase | Stores authentication session tokens | Session / 1 year |
| sb-*-auth-token-code-verifier | Supabase | PKCE code verifier for OAuth | Session |
| cf_clearance | Cloudflare | Records that a Turnstile challenge was passed | 30 minutes |
| __cf_bm | Cloudflare | Bot management identifier | 30 minutes |
2.2 Functional Cookies
These cookies enable enhanced functionality and personalization. Disabling them may affect your experience.
| Cookie | Provider | Purpose | Duration |
|---|
| zoneout-locale | zoneout | Stores your preferred language | 1 year |
| zoneout-cookie-consent | zoneout | Stores your cookie consent preferences | 1 year |
| zoneout-sidebar | zoneout | Remembers sidebar collapsed/expanded state | 1 year |
2.3 Analytics Cookies
These cookies help us understand how visitors use the Platform so we can improve it. All analytics data is aggregated and anonymized.
| Cookie | Provider | Purpose | Duration |
|---|
| _va | Vercel Analytics | Privacy-friendly web analytics | Session |
3. Cloudflare Turnstile
We use Cloudflare Turnstile as an alternative to traditional CAPTCHAs on authentication forms (login, registration, password reset). Turnstile works by analyzing browser behavior to distinguish humans from bots without intrusive challenges.
- Turnstile may set the
cf_clearance and __cf_bm cookies listed above. - It collects browser fingerprint data, mouse movements, and keystroke timing to verify you are a human. This data is processed by Cloudflare under their Privacy Policy.
- These cookies are classified as strictly necessary because they are essential for security and cannot be opted out of.
4. Third-Party Cookies
Some third-party services integrated into the Platform may set their own cookies:
- Stripe: sets cookies for payment fraud prevention when you interact with payment forms. See Stripe's Privacy Policy.
- OAuth providers: when signing in via Google, Apple, or GitHub, those services may set their own cookies during the authentication flow.
- Embedded content: if user posts embed third-party content (YouTube videos, GitHub gists), those services may set cookies. We have no control over third-party cookies from embedded content.
5. Local Storage and Similar Technologies
In addition to cookies, we use browser local storage for:
- Cookie consent preferences: your cookie consent choice is stored in local storage so we can remember it across sessions.
- UI state: sidebar collapse state, feed scroll position, and draft post content.
- Zustand stores: client-side state management data for app performance.
Local storage data remains on your device and is not transmitted to our servers unless explicitly part of a user action.
6. How to Manage Cookies
6.1 Cookie Consent Banner
When you first visit zoneout, a cookie consent banner allows you to accept all cookies or customize your preferences. You can change your preferences at any time through the cookie settings in the Platform footer.
6.2 Browser Settings
Most browsers allow you to control cookies through their settings. You can typically:
- View and delete existing cookies.
- Block all cookies or third-party cookies.
- Set your browser to notify you when a cookie is being set.
Note that blocking essential cookies will prevent you from logging in and using core Platform features.
6.3 Browser-Specific Instructions
7. Changes to This Cookie Policy
We may update this Cookie Policy to reflect changes in the cookies we use or for operational, legal, or regulatory reasons. We will notify you of material changes by posting a notice on the Platform. Please review this policy periodically.