Cookie policy

This page describes the cookies and similar browser storage used by First Look, Zbang's free Google Ads audit, at https://ads.zbang.ai/app-home and how you can change what you allow.

First Look is operated by Zbang Ltd (registered in England and Wales as ZBANG LTD, company number 11824205; registered office 71–75 Shelton Street, London, WC2H 9JQ, United Kingdom), referred to as "Zbang" in this policy.

About cookies and browser storage

Cookies are small text files a site stores on your device. Some are strictly necessary so the app can sign you in and remember your workspace. Others are optional and only set if you say yes.

Your consent choice itself is saved in your browser's localStorage, not a cookie. It lives at the zbang-consent-v1 key and records which categories you allowed and when.

How we ask for consent

On your first visit you'll see a Manage link followed by equally prominent Reject and Accept buttons. You can change your choice anytime by clicking Cookie preferences in the footer.

Consent is stored per surface. If you granted consent on zbang.ai you'll still see a separate banner here on ads.zbang.ai, because the two are treated as distinct surfaces.

Essential

Always on. Required for the app to load, sign you in, and remember your consent choice. Without these the app can't work.

• Session cookie: issued by the app after sign-in so we know who you are on follow-up requests. Cleared on log out.
• CSRF token cookie: protects form submissions against cross-site request forgery.
• zbang-consent-v1 localStorage: stores your cookie-preference choice so we only ask once.
• Cloudflare Turnstile: an adaptive security check loaded only after repeated password failures. It processes browser, device, network, site-origin, and challenge-result signals needed to prevent automated login abuse. Turnstile pre-clearance is disabled. See Cloudflare's Turnstile privacy addendum .

Analytics

Off by default. Aggregate, anonymised traffic and usage data so we can see what's working. No individual profiling.

• Google Analytics 4 (property G-059MF8HY0P): loads gtag/js from googletagmanager.com. We pass anonymize_ip: true and disable ad personalisation signals. See Google's privacy policy .

Marketing

Off by default. Advertising platforms set these to measure campaigns and show relevant ads across the web.

• Meta Pixel (id 2517266624991480): loads fbevents.js from connect.facebook.net, fires a PageView event, and records conversion events (sign-up, Google Ads connect) when you act in the app. See Meta's privacy policy .

Functionality

Off by default. Remembers preferences like theme or language across visits. The app doesn't currently set any functionality cookies; the category is reserved so adding one in the future doesn't require re-consent.

Third parties

When you connect Google Ads or Microsoft Advertising, your browser is redirected to that provider's separate sign-in and consent screens. After repeated password failures, the login page may load Cloudflare Turnstile for an essential abuse-prevention check. Data those providers process is governed by their policies and the disclosures above. The same applies to any other third-party site you reach from the app.

Browser controls

Most browsers let you view and clear cookies and local storage from their settings. For a walkthrough, see aboutcookies.org .

Contact

Questions about this policy: go@zbang.ai