Google Ads audit

About cookies and browser storage

Cookies are small text files a site stores on your device. Some are strictly necessary so the app can sign you in and remember your workspace. Others are optional and only set if you say yes.

Your consent choice itself is saved in your browser's localStorage, not a cookie. It lives at the zbang-consent-v1 key and records which categories you allowed and when.

How we ask for consent

On your first visit you'll see a banner with three equally prominent options — Accept all, Reject all, or Customise. No dark patterns. You can change your choice anytime by clicking Cookie preferences in the footer.

Consent is stored per surface. If you granted consent on zbang.ai you'll still see a separate banner here on ads.zbang.ai, because the two are treated as distinct surfaces.

Essential

Always on. Required for the app to load, sign you in, and remember your consent choice. Without these the app can't work.

• Session cookie — issued by the app after sign-in so we know who you are on follow-up requests. Cleared on log out.
• CSRF token cookie — protects form submissions against cross-site request forgery.
• zbang-consent-v1 localStorage — stores your cookie-preference choice so we only ask once.

Analytics

Off by default. Aggregate, anonymised traffic and usage data so we can see what's working. No individual profiling.

• Google Analytics 4 (property G-059MF8HY0P) — loads gtag/js from googletagmanager.com. We pass anonymize_ip: true and disable ad personalisation signals. See Google's privacy policy.

Marketing

Off by default. Advertising platforms set these to measure campaigns and show relevant ads across the web.

• Meta Pixel (id 2517266624991480) — loads fbevents.js from connect.facebook.net, fires a PageView event, and records conversion events (sign-up, Google Ads connect) when you act in the app. See Meta's privacy policy.

Functionality

Off by default. Remembers preferences like theme or language across visits. The app doesn't currently set any functionality cookies — the category is reserved so adding one in the future doesn't require re-consent.

Third parties

When you connect Google Ads, your browser is redirected to Google's sign-in and consent screens. Cookies set there are governed by Google's own policies, not this notice. The same applies to any other third-party site you reach from the app.

Browser controls

Most browsers let you view and clear cookies and local storage from their settings. For a walkthrough, see aboutcookies.org.