This policy explains which cookies and similar technologies Zeno uses on zeno.id and on our customers' websites. We don't use advertising or third-party analytics cookies.
On our customers' websites
The Zeno agent stores the visitor ID it was given, so a returning browser is recognised even when some of its characteristics change. It's kept in two places, so it survives one of them being cleared. Each entry belongs to one public key, so two projects on one website never see each other's entries.
| Name | Type | Purpose | Duration |
|---|---|---|---|
_fpvid_* | First-party cookie | The device's visitor ID, for fraud prevention, one cookie per public key the website uses (the name ends in the key's last 8 characters) | 1 year |
fp:visitor:* | Local storage | The same visitor ID, one entry per public key | Until cleared |
fp:result:* | Local or session storage, as the website chooses | Only when the website turns on the agent's cache: the last identification (request ID and visitor ID) for one of the website's users, so it isn't repeated for a while. The name holds the public key and a hash of the website's user ID and label, never the ID itself. | The time the website sets, usually seconds or minutes; once past it, removed the next time the agent runs on the site, or when the tab is closed for session storage |
In zero trust mode the agent keeps no visitor ID and removes the entries it stored before, cached identifications included.
The agent also reads browser characteristics, as described in our Privacy Policy. Whether the website needs consent for this depends on what it uses it for and the law where its users are; the website is responsible for asking. Our Europe Privacy Policy Addendum and the privacy and consent guide explain more.
On our website and dashboard
| Name | Type | Purpose | Duration |
|---|---|---|---|
fp:session | Local storage | Keeps you logged in to the dashboard | Until you log out; the session ends 30 days after it was last used |
fp:device | Local storage | A random key that marks this browser as one you logged in from before, set after a login you confirmed with a code or an emailed link, so later logins here don't ask for an emailed code. We keep only its hash | Until cleared; it stops working when you forget the browser in your profile |
fp:project | Local storage | The project you last opened | Until cleared |
fp-locale | Cookie | Your language, picked or set from your country on your first visit | 1 year |
fp-theme | Cookie | Light, dark or your system's colours, once you pick one | 1 year |
menu-collapsed | Local storage | Whether the dashboard menu is minimised | Until cleared |
fp:remember:* | Local storage | View choices in the dashboard, like a page's period, chart or time zone, and the last 6 external IDs you searched on a project's Related page | Until cleared |
sveltekit:* | Session storage | Scroll positions, so going back and forward returns you to where you were | Until the tab is closed |
_fpvid_*, fp:visitor:*, fp:built-in:logins | Cookie, local storage | Login protection: the browser's visitor ID in our logins project, as above, set when you log in, sign up, verify your email, reset your password or accept an invite, and the project's key of the day, so the day before's entries are removed | 1 year, until cleared or replaced on a later day |
These are needed for the site to work or to keep your account secure.
The live demo
The live demo on our website shows what the agent can tell about your browser. It doesn't run on its own: nothing is read from your browser or stored in it until you start it with Run the live demo. By starting it you agree to the following, for the demo only:
| Name | Type | Purpose | Duration |
|---|---|---|---|
_fpvid_*, fp:visitor:*, fp:built-in:demo | Cookie, local storage | The browser's visitor ID in our demo project, as above, and the project's key of the day, so the day before's entries are removed | 1 year, until cleared or replaced on a later day |
fp:live-demo | Session storage | That you started the demo, so it doesn't ask again while this tab is open | Until the tab is closed |
You can withdraw by clearing this site's data in your browser; the demo then asks again. That stops further identifications, but the demo's events stay stored for 7 days. To have them erased sooner, write to [privacy contact email] with the visitor ID the demo showed you.
Your choices
You can delete cookies and site data in your browser's settings at any time. Blocking them on the dashboard logs you out. On a customer's website, clearing them usually doesn't change your visitor ID: it is worked out from the device's characteristics again, since it's a fraud prevention identifier designed to recognise a device that clears its storage.
Questions: [privacy contact email].