The short version
zeluxa.com sets one cookie of its own, plus Google Analytics cookies if analytics is allowed. Our cookie remembers your cookie choices. Google Analytics helps us see which pages people read, in aggregate. We run no advertising pixels, and no marketing tag loads today.
Nothing optional runs until you say yes, wherever you are. Analytics stays off until you choose Accept all or switch it on under Manage preferences, and you can change your choice at any time.
What a cookie actually is
A cookie is a small text file a website asks your browser to keep. On your next visit, the browser hands it back, which is how a site recognises you.
Some cookies do useful work, like remembering a setting you chose. Others follow you between sites to build an advertising profile. The word covers both, and that is why the term causes such confusion.
Similar technologies do the same job under different names: local storage, session storage, tracking pixels, browser fingerprinting. Apart from Google Analytics, when analytics is allowed, we use none of them.
The cookies we use
| Name | Purpose | Category | Duration |
|---|---|---|---|
| zx_consent | Remembers your cookie choices: whether functional, analytics and marketing are allowed, and when you chose. | Strictly necessary | 1 year |
| _ga | Set by Google Analytics to tell visits apart. | Analytics | Typically up to 2 years |
| _ga_<ID> | Set by Google Analytics to keep track of sessions for our site's measurement ID. | Analytics | Typically up to 2 years |
All three are first-party cookies, stored under zeluxa.com. We set zx_consent ourselves, for the whole site, marked Secure so it travels only over HTTPS, and SameSite=Lax. Google's script sets the two analytics cookies, and only when analytics is allowed and switched on for the site.
What else the site loads
Besides Google Analytics, when you allow analytics, the site loads nothing from other companies.
Fonts
We use two typefaces, Fraunces and Inter. They are served from our own hosting, so your browser does not contact Google Fonts or any other font service to display them.
The contact form
Nothing leaves your browser until you press submit. When you do, the form sends your message to our own website, which stores it and forwards it to our inbox. Ignore the form and it sends nothing.
Server logs
Our host, Web Hosting Canada, records the requests its servers answer: your IP address, the page requested, the time, and your browser's identifying string. Every web server keeps a log like this. It is how anyone diagnoses a fault or spots an attack.
These logs sit on servers in Canada, and our host rotates them on its own schedule. We do not mine them, and we do not link them to anything you send us.
Changing your mind
Use the Cookie settings link in the footer of any main page. It reopens your choices, and you can switch any optional category off or back on. Saving replaces your earlier choice.
You can also delete the zx_consent cookie in your browser. The banner then asks again on your next visit.
Turning analytics off stops Google Analytics straight away. The page reloads, and the _ga cookies our site can reach are deleted. Every major browser lets you inspect stored cookies, delete them, and block them ahead of time:
Blocking cookies altogether does not break this site. The banner will simply keep asking, because it has nowhere to remember your answer.
If this changes
Nothing in the functional or marketing categories loads today. If we add a tool to either one, such as live chat or a campaign tag, we commit to three things.
- We rewrite this page before the tool goes live, and we name it, what it collects, and the cookies it sets.
- It loads only in its own category and follows the same rule: off until you agree.
- Declining stays as easy as accepting. Reject non-essential sits next to Accept all, with equal prominence.
The date at the top of this page changes whenever its content does.
Where Canadian law sits on this
Cookies that identify a person count as personal information under Canadian privacy law, which is why consent enters the picture at all.
Federal law under PIPEDA allows implied consent for some low-risk analytics. Quebec's Law 25 calls for privacy by default. Europe's GDPR, the UK's rules and Türkiye's data protection law, KVKK, expect consent before non-essential cookies are set.
Rather than guess where you are, we apply the strictest of these to everyone: optional cookies stay off until you say yes.
Contact
Questions about tracking or privacy
[email protected]
Everything else
[email protected]
Our Privacy Policy covers the wider picture of what we collect and why.