Effective January 2025 · Last updated August 5, 2026
How we use browser storage
We use cookies and similar browser storage only for security, requested features, preference records, and optional analytics. Required and functional storage is not used for advertising.
Optional analytics remains off until you select “Allow Google Analytics.” Refusing analytics does not limit access to Zoekee.
Cookie and storage inventory
| Name | Provider and category | Purpose | Typical duration |
|---|---|---|---|
sessionid | Zoekee · Required | Maintains a secure session and, when signed in, authentication. | Browser session by default; up to 14 days when “Remember me” is selected. |
csrftoken | Zoekee · Required | Protects forms and account actions against cross-site request forgery. | Up to 1 year. |
messages | Zoekee · Required | Temporarily carries success or error notices between page requests. | Session storage; removed after the message is read. |
analytics_consent | Zoekee · Required preference record | Records that this browser affirmatively allowed optional analytics. | 180 days. |
analytics_opt_out | Zoekee · Required preference record | Records that this browser declined optional analytics and suppresses tracking. | 180 days. |
theme (local storage) | Zoekee · Functional | Remembers the light, dark, or system display choice. | Until changed or cleared in the browser. |
billboard_toast_dismissed (session storage) | Zoekee · Functional | Remembers which owner-only billboard notices were dismissed in the current browser tab. | Until the browser tab is closed. |
zoekee_wf_<flag-name> | Zoekee · Functional | Keeps a browser in the same product-feature rollout group when a percentage rollout is active. | Up to 30 days; an inactive rollout assignment may last only for the browser session. |
zoekee_wft_<flag-name> | Zoekee · Functional testing | Remembers an explicitly requested feature-test assignment when an administrator enables testing for that feature. | Browser session. |
_GRECAPTCHA | Google reCAPTCHA · Required security | May be set when a protected form runs to perform bot and abuse risk analysis. | Controlled by Google; present only where reCAPTCHA executes. |
_ga | Google Analytics 4 · Optional analytics | Distinguishes browsers for aggregate usage measurement. | 180 days from the first consented visit; browsers may shorten this. |
_ga_<container-id> | Google Analytics 4 · Optional analytics | Persists Google Analytics session state. | 180 days from the first consented visit; browsers may shorten this. |
Optional Google Analytics
With your permission, we use Google Analytics 4 to understand page use, navigation, device categories, and where the product needs improvement.
Google Analytics is currently our only approved non-essential third-party analytics tool. We do not currently enable advertising pixels, advertising personalization, session replay, or third-party chat tracking.
When enabled, your browser sends information to Google, which may include the page URL, IP address, device or browser information, and Google Analytics identifiers. Read how Google uses information from sites that use its services and Google's GA4 cookie documentation.
Our policy is to configure Google Analytics user-level and event-level retention for no more than 14 months. This setting does not control Google’s aggregated standard reports or every category of data Google retains under its own policies.
Security storage
Protected forms may use Google reCAPTCHA for fraud and bot prevention. Google states that reCAPTCHA sets the necessary _GRECAPTCHA cookie when executed for risk analysis. See the Google reCAPTCHA FAQ.
We treat that storage as required only on flows where the security check runs. It is not part of our optional audience analytics.
First-party analytics
When analytics is allowed, Zoekee may record privacy-limited events using page paths without query strings, coarse device categories, referrer domains, and rotating non-reversible session hashes.
Raw first-party analytics events are kept for 30 days. Aggregated metrics are kept for 365 days. We do not store raw IP addresses or full user-agent strings in those analytics events.
Manage your choice
Optional analytics remains off until you select “Allow Google Analytics.” You can change or withdraw that choice on this page at any time, using controls with the same number of steps.
The browser preference lasts for 180 days. If you are signed in, declining analytics also updates your account setting so the opt-out follows your account. Allowing analytics still requires an affirmative choice in each browser.
If your browser sends Global Privacy Control, optional analytics stays off even when an older consent cookie exists. Removing that signal lets you choose again.