Cookie Policy

Your choice

We ask before we store anything on your device that is not strictly necessary. Until you press Accept on the cookie banner, none of the analytics or advertising cookies on this page are set: the Google tag is not requested, PostHog does not run in your browser (it only receives an anonymous count of page visits from our server, as described below), Vercel Web Analytics does not load, and no affiliate referral cookie is written.

In the United States it works the other way round on our public pages while you are not signed in: there is no banner when you arrive, and analytics and advertising (PostHog product analytics, Vercel Web Analytics, the Google tag, our own page-view record and first-visit cookie) are on by default until you opt out with Your privacy choices in the footer, or your browser sends Global Privacy Control. Session recording, heatmaps, sending your email address to Google or Meta and the affiliate referral cookie still wait for you to press Accept. In the dashboard, on the sign-in and sign-up pages, and whenever you are signed in to your account, these wait for Accept, as they do outside the United States. The Meta pixel is the exception, as it has been since October 2026: in the United States it is on by default on every page it runs on (our public pages, pricing, sign-up, sign-in and the subscribe steps), signed in or not, until you opt out. Once you have opted out you are counted without cookies, like a visitor who declined.

On our public pages, we count anonymous page visits without cookies when you decline (or have not chosen yet), and nothing identifies you. No analytics script runs in your browser, and nothing is stored on or read from your device for it beyond the strictly necessary items in the table below (your cookie choice, sign-in and your light/dark setting). Our server passes PostHog an anonymous count, without your IP address. The "Anonymous page counts" row below lists exactly what is sent.

You can change or withdraw that choice at any time — it takes one click, the same as giving it, and it is the same control either way:

Cookie settings

Withdrawing consent deletes the identifiers we can reach from your browser and reloads the page so nothing non-essential is left running. Some third-party cookies (for example Google's test_cookie on doubleclick.net) can only be removed by your browser, because they are not readable by this site.

We rely on your consent under regulation 6 of the Privacy and Electronic Communications Regulations 2003 (PECR) and Article 6(1)(a) UK GDPR. Strictly necessary items are used under the PECR exemption, which does not require consent.

What Accept turns on

The cookie banner is short on purpose. This is the full version of what it asks. Pressing Accept allows the following, and pressing Reject allows none of it. Essential cookies, the ones that run the site and keep you signed in, are used either way. In the United States some of it is on by default unless you opt out: see “Where you are changes the default” below.

• PostHog product analytics (EU region, reached through zen-mode.io/ingest): which pages you view, which features you use, and which marketing source you arrived from. Clicks and other interactions are counted without the text or attributes of the element involved.
• PostHog heatmaps: where people click, move the mouse and scroll to, on our public marketing pages only, never inside the dashboard, the admin area or the affiliate portal.
• PostHog session recording: a replay of the page, on our public marketing pages only, never inside the dashboard, the admin area or the affiliate portal, and never on the sign-in or sign-up pages. Everything you type into any field is masked before it leaves your browser: we see that a field was filled in, not what was in it. Console messages, network headers and request bodies are not recorded.
• Google Ads: the Google tag, so we can tell which ad brought a sign-up and build remarketing audiences. Outside the United States the Google tag is not even requested until you accept. Your email address goes to Google with a sign-up (to match it to the ad) only if you pressed Accept.
• Meta (Facebook) pixel: so we can tell which Meta ad brought a sign-up and build advertising audiences. It runs on our public marketing pages, pricing, sign-up, sign-in and the subscribe steps only, never inside the dashboard, and it is sent the page's path without anything after a ? or #. It also reports a new account, opening checkout, and starting a trial or a paid plan (with the plan's price). After a trial or payment our server tells Meta too, and only if you pressed Accept does that include a hashed copy of your email address. Outside the United States the Meta pixel is not even requested until you accept.
• Vercel Analytics: page-level traffic counts. It sets no cookie, but each page view sends one request to our own domain.
• Our own records: a page-view record on our servers, a cookie remembering which marketing source first brought you here, and an affiliate referral cookie if you arrived from a partner's link.

Every item is listed with its exact cookie or storage key, who sets it and how long it lasts in the analytics and advertising table below. Withdrawing consent stops all of it straight away, recording included. The Privacy Policy covers what happens to the data afterwards.

Where you are changes the default

We work out roughly where you are from your IP address, and that decides whether analytics and advertising wait for you to press Accept, or are on until you opt out. Session recording and heatmaps wait for you to press Accept everywhere, the United States included.

• United Kingdom, EU/EEA, Switzerland, and anywhere else, or if we cannot tell: nothing is loaded until you press Accept. You are asked on your first visit.
• United States: there is no banner when you arrive. On our public pages, while you are not signed in, PostHog product analytics, Vercel Analytics, the Google tag, our own page-view record and first-visit cookie are on by default. In the dashboard, on the sign-in and sign-up pages, and whenever you are signed in to your account, they wait for you to press Accept, as everywhere else. The Meta pixel loads by default on every page it runs on, including sign-up, sign-in and the subscribe steps, signed in or not. You can opt out at any time with Your privacy choices in the footer, which stores your opt-out for a year (pressing Reject there is the opt-out). If your browser sends the Global Privacy Control signal, we treat it as an opt-out and none of them loads, with no action needed from you. Once you have opted out we still count the visit, without cookies, as described above.

In every region, your email address (or a hashed copy of it) is sent to Google or Meta only if you pressed Accept. In the United States, a trial or purchase can still be reported to Meta by our server without your email address unless you have opted out.

Google Consent Mode

Before any Google tag can run, the page sets Google Consent Mode v2 to denied for advertising storage, advertising user data, advertising personalisation and analytics storage. If you accept, we send an update granting those four. If you do not, the Google tag is never loaded at all, so the denial is the only state it would ever see. In the United States, on our public pages while you are not signed in, unless you have opted out or your browser sends Global Privacy Control, the tag loads by default with an update granting advertising storage, advertising personalisation and analytics storage; advertising user data stays denied until you press Accept.

Used without asking you

Most of this table is the strictly necessary set: signing in, keeping you signed in, remembering your theme, and recording the cookie choice itself. Turning those off would break the service, so PECR does not require consent for them.

Three rows are not cookies at all, and are listed because they store nothing on your device, which means regulation 6 does not reach them and there is no consent gate to put them behind. The first is Sentry error reporting, which runs on every page so that a broken page gets noticed. Sentry's own Session Replay, which would have recorded a reconstruction of your screen, is switched off entirely. The second is the Peacock chat assistant: opening it stores nothing in your browser, but sending it a message stores that message, the reply and your IP address on our servers, and sends the message to Anthropic to generate the reply. Its retention runs on two clocks, the IP address at 30 days and the conversation at 12 months, and section 9 of the Privacy Policy covers it in full.

The visitor company lookup is the third. On our public marketing pages (never the dashboard) each page view sends our server the page path and the name of the site that linked you here, with no cookie attached. Our server asks ipapi.is which organisation your IP address is registered to and keeps that organisation's name and type, never your IP address, for 30 days. We use it to see what kinds of organisations visit the site. It does not identify you as a person, and if your browser sends Global Privacy Control no lookup is made. Section 2 of the Privacy Policy explains it, including how to object.

The homepage website preview adds three strictly necessary items, and only once you enter your website and ask for a preview: the zm_home_preview cookie, which carries that request into sign-up so your setup opens with your website and suggested audience; the zm_hpv cookie, which limits how many previews one browser can run; and a Vercel BotID check that the request comes from a person. You asked for the preview, and we cannot provide it without them, so they are not behind the consent choice. We store neither cookie's value nor your IP address, only a scrambled (hashed) form. The zm_home_preview cookie expires after 30 days, so your setup can still start from your website if you sign up later; zm_hpv expires after a day. The website itself is kept on our server, and we may get in touch with your company about ZenMode; section 2 of the Privacy Policy explains how.

Analytics and advertising — after you accept, or by default in the United States

Outside the United States none of these load until you press Accept. In the United States they load by default on our public pages while you are not signed in (the Meta pixel also on sign-up, sign-in and the subscribe steps, signed in or not), except session recording, heatmaps and the affiliate referral cookie, unless you opt out or your browser sends Global Privacy Control (see Where you are changes the default). Durations are the maximum lifetime the provider sets; a cookie can be removed sooner by you or your browser.

Where this data goes

Google LLC (United States), Sentry (United States), Vercel (United States), Cloudflare (United States) and Anthropic (United States) process data outside the UK. PostHog is on its EU region (Germany) and our requests reach it through a proxy on our own domain. Where data leaves the UK/EEA we rely on the provider's Standard Contractual Clauses or the UK International Data Transfer Agreement. The full list of processors, including the ones that never touch your browser, is in our Privacy Policy.

Questions

Email hello@zen-mode.io. You can also complain to the UK Information Commissioner's Office at ico.org.uk.