Cookie Policy
1. What Are Cookies
Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences, keep you logged in, and understand how the site is being used. Cookies can be session-based (deleted when you close your browser) or persistent (stored for a set period).
2. Who We Are
Controller: ZendPaw
Contact: hello@zendpaw.com
Website: www.zendpaw.com and app.zendpaw.com
Operating in: United States and Mexico
3. Cookies We Use
| Cookie Name | Type | Purpose | Provider | Duration | Required? |
|---|---|---|---|---|---|
| zp-cookie-consent | Preference | Stores your cookie consent choice (accepted/declined) | ZendPaw | 1 year | Yes |
| next-auth.session-token | Essential | Keeps you authenticated while logged in to your account | ZendPaw | Session / 30 days | Yes |
| next-auth.csrf-token | Essential | Security token to prevent cross-site request forgery attacks | ZendPaw | Session | Yes |
| __stripe_mid | Third-party | Payment fraud prevention and security by Stripe | Stripe (stripe.com) | 1 year | When paying |
| __stripe_sid | Third-party | Payment session tracking by Stripe | Stripe (stripe.com) | 30 minutes | When paying |
| cf-turnstile-* | Third-party | Bot detection and security verification by Cloudflare Turnstile. Processes IP address and browser data to distinguish humans from bots | Cloudflare (cloudflare.com) | Session | Yes (security) |
| va_* (Vercel Analytics) | Analytics | Anonymous, aggregated usage statistics. No personal data is stored. Only activated if you accept cookies | Vercel (vercel.com) | 1 year | No |
4. Cookie Categories Explained
Essential Cookies
Required for the site to function. Cannot be disabled. No consent required.
Preference Cookies
Remember your choices such as consent status. Help us provide a consistent experience.
Analytics Cookies
Help us understand how visitors use our site. We use anonymous, aggregated data only. Only loaded after you accept cookies.
Third-Party Security Cookies
Set by Stripe and Cloudflare to protect against fraud and automated abuse. These are necessary for payment processing and bot protection.
5. How We Obtain Consent
When you first visit ZendPaw, a cookie banner asks for your consent. You can accept or decline non-essential cookies. Essential and security cookies are always active as they are necessary for the site to function and to protect against fraud. Your preference is stored in the zp-cookie-consent cookie for one year. You can change your preference at any time by clearing your browser cookies and revisiting the site.
6. Your Rights
US Residents (CCPA/CPRA)
- Right to know what personal data is collected via cookies
- Right to opt out of sale or sharing of personal data (we do not sell data)
- Right to delete personal data collected via cookies
- To exercise rights: hello@zendpaw.com
Mexican Residents (LFPDPPP 2025)
- Derechos ARCO: Acceso, Rectificacion, Cancelacion, Oposicion
- Right to be informed about cookie use before data collection
- Right to withdraw consent at any time
- Responsible entity: ZendPaw - hello@zendpaw.com
- You may also contact the Secretaria Anticorrupcion y Buen Gobierno (formerly INAI) to file a complaint
EU/UK Residents (GDPR)
- Right to withdraw consent at any time
- Right to access, rectify, or erase data collected via cookies
- Legal basis for essential cookies: legitimate interest
- Legal basis for analytics cookies: consent
- Contact: hello@zendpaw.com
7. Third-Party Cookie Policies
- Stripe: https://stripe.com/privacy
- Cloudflare: https://www.cloudflare.com/privacypolicy/
- Vercel: https://vercel.com/legal/privacy-policy
We do not control third-party cookies. Please review their policies for more information.
8. How to Manage Cookies in Your Browser
You can manage cookies through your browser settings. Browser paths are commonly:
- Chrome: Settings > Privacy and Security > Cookies
- Firefox: Settings > Privacy & Security > Cookies
- Safari: Preferences > Privacy > Manage Website Data
Blocking essential cookies will prevent login and payment functionality from working.
9. Do Not Track
We honor browser Do Not Track (DNT) signals. When DNT is enabled, Vercel Analytics is not loaded regardless of your cookie consent choice.
10. Changes to This Policy
We will update this policy when we add new cookies or change our practices. The "Last updated" date at the top will reflect any changes. Material changes will be communicated by email to registered users.
11. Contact
For any questions about our use of cookies:
Email: hello@zendpaw.com
Response time: within 5 business days
For Mexican users / Para usuarios mexicanos:
Email: hello@zendpaw.com
Derechos ARCO y consultas sobre privacidad