Cookie Policy

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to remember information about your visit (such as your preferred language or login) to make browsing easier for you.

2. Types of cookies used

a) Strictly necessary cookies

Essential for the platforms to function. They cannot be disabled. They include:

• Consent cookies (Cookiebot) — on zed-zen.com
• Supabase session cookies (authentication) — on app, radio, pulse, meniu
• Language preferences (ro/en) — on all platforms
• Theme preferences (dark/light mode) — on zed-zen.com
• CSRF and security tokens

b) Performance and analytics cookies

We use Google Analytics 4 (GA4) on the main website zed-zen.com to understand how visitors interact with the site. The data collected includes: pages visited, session duration, device type and traffic source. These cookies are set only with the explicit consent of the user.

c) Functional cookies

On the SaaS platforms (app, radio, pulse, meniu), we use cookies/localStorage for: session state, interface preferences, display settings (e.g. billing period, filters, sorting). These are necessary for the applications to function correctly.

d) Marketing cookies

We currently do not use marketing or retargeting cookies on any of the platforms. If we introduce such cookies in the future, you will be notified through the consent banner.

3. Cookies per platform

4. Third-party cookies

• Cookiebot (Cybot A/S, Denmark) — cookie consent management on zed-zen.com
• Google Analytics 4 (Google LLC, USA) — web traffic analysis on zed-zen.com
• Supabase (Supabase Inc., USA — EU servers) — authentication cookies on the SaaS platforms
• Stripe (Stripe Inc., USA) — payment processing cookies (only on checkout pages)
• Cloudflare (Cloudflare Inc., USA) — security and performance cookies (cf_clearance, __cf_bm)
• Web3Forms — contact form processing on zed-zen.com

5. Cookie duration

• Session cookies — deleted automatically when the browser is closed or on logout
• Persistent cookies — remain on the device until they expire or are deleted manually (max. 13 months under GDPR)
• Supabase authentication cookies — the duration of the active session (max. 7 days of inactivity)
• Cookiebot cookies — 12 months (consent)
• GA4 cookies — according to the settings (max. 14 months)
• localStorage — persistent until deleted manually (language, theme, UI preferences)

6. Managing cookies

You have several options for managing cookies:

• The Cookiebot banner — on zed-zen.com, you can change your cookie preferences at any time using the button at the bottom of the page
• Browser settings — you can block or delete cookies in your browser settings (Chrome, Firefox, Safari, Edge)
• SaaS platforms — authentication cookies are deleted automatically on logout. Essential cookies cannot be disabled without affecting functionality

Warning: Disabling essential cookies may prevent the platforms from functioning correctly.

7. Legal basis

• Strictly necessary cookies — Art. 6(1)(f) GDPR (legitimate interest — operation of the services)
• Analytics cookies (GA4) — Art. 6(1)(a) GDPR (the user’s explicit consent, obtained through Cookiebot)
• SaaS functional cookies — Art. 6(1)(b) GDPR (performance of the contract — provision of the service)

8. Your rights

Under the GDPR, you have the right of access, rectification, erasure, restriction of processing, portability and objection with regard to data collected through cookies. To exercise these rights or for any questions, contact us at [email protected]. Full details in the Privacy Policy.

9. Contact

FORTITUDO VINCIT SRL CUI (Tax ID): 43990858 | Trade Reg. No.: J2021000522266 Email: [email protected] Phone: +40 757 314 021 București, Romania