Cookie Policy

1. What Are Cookies and Local Storage?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to the site owner. Cookies can be "session" cookies (deleted when you close your browser) or "persistent" cookies (remain on your device for a set period or until you delete them).

Local storage is browser storage that remains on your device until it is cleared. We use the term "browser storage" below to cover cookies and local storage together.

2. How We Use Cookies

Zvsquared uses browser storage to authenticate users, keep the Service secure, preserve work that has not yet been submitted, and, with your permission, understand how visitors and learners use the Service. We do not use advertising cookies or track people across unrelated websites.

3. Browser Storage We Use

Authentication cookies

Supabase sets session cookies when you sign in. They allow the Service to recognise your authenticated session, refresh it, and protect account-only pages. Blocking or deleting these cookies will sign you out or prevent sign-in from working correctly.

Local storage

The app stores certain information locally on your device, including unsent session drafts, debrief action plans, and rubric notes. This data is not a cookie and is not transmitted merely because it is stored. It is sent only when you take an action that submits the relevant content to the Service.

Analytics storage

If you select "Accept analytics", PostHog stores an anonymous device identifier and session information in a cookie and local storage. We use this to measure pricing views, signup and payment funnels, practice-session completion, mock-interview completion, and debrief usage. Analytics remains disabled if you decline or have not made a choice.

• zvs_analytics_consent: records your analytics choice for up to 180 days and is shared between zvsquared.com and app.zvsquared.com.
• ph_<project-token>_posthog: set by PostHog only after acceptance to distinguish devices and sessions; it may persist for up to 365 days.

We disable PostHog autocapture and session replay. We do not send interview answers, transcripts, notebook text, email addresses, or AI responses to PostHog as analytics event properties.

4. Cookies We Do Not Use

We do not set:

• Advertising or retargeting cookies.
• Social-media tracking cookies.
• Third-party cookies for cross-site behavioural profiling.

5. Third-Party Services

Supabase provides our authentication cookies. If you continue to Stripe-hosted checkout or billing pages, Stripe may use cookies and similar technologies under its own policies. If you accept optional analytics, PostHog processes limited usage events on our behalf. See Supabase's Privacy Policy and Stripe's Privacy Policy and PostHog's Privacy Policy.

6. How to Control Browser Storage

You can control browser storage in the following ways:

• Sign out: use the sign-out control to end your authenticated session on the current device.
• Browser settings: modern browsers allow you to view, block, or delete cookies and local storage for a site.
• Private browsing: browser storage is generally cleared when a private-browsing session ends.
• Analytics choice: select Accept or Decline when the analytics notice appears. To change a saved choice, clear the site data for zvsquared.com; the notice will appear again.

Clearing authentication cookies will sign you out. Clearing local storage can permanently remove drafts and notes that have not been submitted or saved to your account.

7. Changes to This Policy

We may update this Cookie Policy to reflect changes in the cookies we use or applicable regulations. Material changes will be communicated through the Service when required by law.

8. Contact

Questions about our use of cookies should be directed to:

Zvsquared
support@zvsquared.com