Cookie Notice
Last updated: 4 July 2026.
Our approach
We keep cookies to the minimum. Zappt does not use advertising or cross-site tracking cookies, and our card analytics are cookieless (no identifiers stored on your device). Under PECR/ePrivacy, only strictly-necessary cookies are set without consent; anything else is opt-in.
Cookies we set
| Cookie | Purpose | Type |
|---|---|---|
| next-auth.session-token | Keeps you signed in | Strictly necessary |
| next-auth.csrf-token | Cross-site request forgery protection | Strictly necessary |
| ebc-cookie-consent | Remembers your cookie choice | Strictly necessary |
Strictly-necessary cookies do not require consent because the service cannot function without them. We will update this table if any non-essential cookie is ever introduced (it would be opt-in via the banner).
Managing cookies
You can clear or block cookies in your browser settings; blocking the session cookie will sign you out. Public cards can be viewed without signing in and set no functional cookies beyond what your browser requires.