Cookie Policy

Last reviewed: 18 September 2026 · Version 2026-09-18

Cookies, browser storage and tracking across Zephira’s website, dashboard and linked services.

1. What this policy covers

Cookies store small pieces of information in a browser. Similar rules can apply to local or session storage, pixels, tags, fingerprinting and access to device information. This policy should be read with the Privacy Policy. The public marketing website, the redesigned website and the customer dashboard use different components; a setting on one host may not automatically apply to another.

2. Necessary functions

Authentication and security controls support sign-in, protect requests and enforce account access. Checkout continuity remembers a verified payment while you finish account setup. These functions support services you request; blocking necessary cookies can prevent sign-in or payment activation.

Technology	Purpose	Duration or control
WorkOS authentication and transaction cookies	Customer sign-in, session continuity and authentication security.	Session and expiry settings are managed by the configured authentication service; sign-out ends the application session.
zephira_pending_checkout	Connect a verified checkout with account sign-in on the dashboard.	Up to 24 hours; removed after successful account matching.
Dashboard onboarding session storage	Remember whether the requested account setup prompt has been shown in that browser session.	Browser session; clearing site storage removes it.
Hosting or security cookies	Access control, request routing and abuse protection where the hosting service sets them.	According to the relevant service and browser session; they can differ between domains.

3. Optional measurement and advertising

The public marketing website includes a Google Tag Manager container. A tag manager can load other technologies; the container name alone does not establish the tags, their purposes or consent status. Optional analytics or advertising tags require the appropriate control before use unless a specific legal exception applies.

The redesigned website does not include a general advertising or analytics tag in its application layout. The dashboard records account activity and navigation events for service administration and product use analysis, as described in the Privacy Policy. That server-side collection must also have an appropriate legal basis; it is not made lawful merely by avoiding third-party cookies.

Rejecting optional technologies must not prevent ordinary access to the service. Continued browsing, accepting contractual terms or submitting an enquiry is not consent to optional tracking. We do not claim that an accept-only notice gives a valid choice for optional analytics or advertising.

4. Your choices

Use a site’s available cookie controls to refuse or withdraw optional permissions. Browser settings can delete or block stored data, but may also disrupt necessary functions. Where you cannot find an effective control, contact office@zephira.ai with the page address and technology concerned. Do not assume that clearing a cookie stops all server-side processing or removes information already held.

The UK has limited purpose-specific exceptions for certain statistical or appearance functions, with conditions including information and, where required, a simple objection mechanism. Those exceptions are not a blanket permission for marketing analytics, advertising or cross-service profiling. Different rules can apply in the EEA and elsewhere.

5. Linked checkout, sign-in and AI services

If you continue to Stripe, WorkOS or an AI client, that service may set its own cookies or access browser information on its domain. Review its notice and controls. A link to an external provider does not mean that all of its tracking is necessary on Zephira’s own pages. The Service Providers page identifies relevant providers and their notices.

6. Inventory and changes

Technology names, expiry and data use can change when a service or configuration changes. This page records identifiable application functions and should not be read as a certificate that every third-party tag has been independently audited. Contact us for information about a particular cookie or to report a mismatch. Material new optional purposes require updated information and any necessary fresh consent before activation.