1. The short version
- Cookies that keep you signed in and keep the service secure are always on. The site cannot work without them
- Everything else is off until you say yes
- You can change your mind at any time using in the footer
- We do not use cookies to sell your data or to build advertising profiles about you
2. What a cookie is
A cookie is a small text file a website stores on your device so it can recognise your browser on a later visit.
We use the word cookie loosely in this policy to also cover similar technologies, which do a comparable job:
- Local storage and session storage, which hold data in your browser rather than in a cookie file
- Pixels and tags, small pieces of code that record that a page or an email was opened
- Software development kits, code inside our Chrome extension and WordPress plugin
The marketing site at www.zicy.com is served as static files, with no request-time server, so it cannot set cookies itself. Every storage item you can find on either www.zicy.com or app.zicy.com is set by client-side code, or by the Zicy app's own sign-in and payment systems, and is listed in section 4.
3. The categories we use
Strictly necessary
These are required for the service to function and are set without consent, because you cannot use Zicy without them.
They do things like keep you signed in across pages, remember which brand profile is active, protect forms against cross-site request forgery, balance server load, and enforce your plan's limits.
Functional
These remember preferences so the product behaves the way you left it. Examples are the light and dark theme toggle, your language, your dismissal of a banner, and your saved filters.
Turning these off does not break Zicy, but it will keep forgetting your choices.
Analytics
These tell us which pages and features are used, where people get stuck, and which errors are firing. We use this to fix and improve the product.
We use Google Consent Mode v2. Before you give consent, analytics runs without cookies and without personalised advertising signals.
4. The cookies we actually set
| Name | Provider | Category | Purpose | Lifetime |
|---|---|---|---|---|
| zicy-consent | Zicy, first party, browser localStorage | Strictly necessary | Stores your cookie choice so the banner does not ask again | Until you clear site data. Browser storage has no expiry date |
| currentToken | Zicy, first party | Strictly necessary | Keeps you signed in to the Zicy app | Until you sign out or the session expires |
| firebase:authUser | Google Firebase, first party, browser localStorage | Strictly necessary | Holds your sign-in session for the Zicy app | Until you sign out |
| __stripe_mid | Stripe | Strictly necessary | Fraud prevention on payment pages | 1 year |
| __stripe_sid | Stripe | Strictly necessary | Fraud prevention within a single session | 30 minutes |
| _ga | Google Analytics, first party | Analytics | Distinguishes one visitor from another | 2 years |
| _ga_YEW4D13JKT and _ga_KV5E88LTXN | Google Analytics, first party | Analytics | Keep session state for the Zicy website and the Zicy app respectively | 2 years |
The analytics cookies are set only after you accept analytics cookies. If you decline, Zicy's site measurement runs without cookies.
Cookie names and lifetimes change as we ship. If you find one on our site that is not listed here, tell us at privacy@zicy.com and we will correct this page.
5. Third parties that can set cookies
- Google, for Tag Manager, Analytics 4 and Firebase Authentication. policies.google.com/privacy
- Stripe, for payment processing and payment fraud prevention. stripe.com/privacy
- Vercel, for privacy-friendly site analytics that sets no cookies and no browser storage. vercel.com/legal/privacy-policy
Where a third party sets a cookie through our site, that provider's own notice governs what it does with the data. We choose our providers carefully and bind them by contract, but we do not control their notices.
6. How to change your choices
- On our site: open here or in the footer. Your choice is stored and applied on every later visit. This is Zicy's own consent tool; we do not use a third-party consent platform
- In your browser: every major browser lets you block or delete cookies in its settings. Blocking strictly necessary cookies will stop Zicy from working
Clearing your cookies also clears your stored consent choice, so you will be asked again on your next visit.
7. Consent, and where it applies
If you are in the European Economic Area or the United Kingdom, we ask for your consent before setting any cookie that is not strictly necessary, and we do not treat continued browsing as consent.
If you are in Malaysia, Personal Data Protection Act 2010 as amended, or in California, we still give you the same controls. We think one standard is simpler than three.
You can withdraw consent at any time, and withdrawing is as easy as giving it.
8. Changes to this policy
We update this page when our cookies change, and we change the date at the top. If a change means we need your consent again, we will ask.
9. Contact
- Questions about cookies: privacy@zicy.com
- Postal address: Growth Pro Sdn. Bhd., 60 Persiaran Midlands, 10250 Penang, Malaysia
- More detail on how we handle personal data: see the privacy policy