Catzonia Policy

Cookie Policy

Version cookies-2026-06-v1 Last updated 3 June 2026

In short. We use only the cookies and storage we need to run the site and remember your choices. Marketing/analytics cookies fire only after you give consent. You can refuse them from your browser at any time.

1. What is a cookie?

A cookie is a tiny text file stored by your browser. Similar mechanisms include localStorage, sessionStorage, and pixel beacons. This policy covers all of them.

2. Strictly necessary

__cf_bm — Cloudflare bot management. Session.
catzonia_session — keeps your booking state if you navigate away. Session.
catzonia_ref — remembers a referral code you visited with. 14 days.
catzonia_admin_token (admin users only) — required for staff console access. Session.

These cannot be refused without breaking the site.

3. Performance / analytics

PostHog — aggregated product analytics. Fires only after consent.
Cloudflare Web Analytics — aggregate page-view counts, no fingerprinting.

4. Marketing

Meta Pixel — Facebook/Instagram ads attribution. Phone is hashed (SHA-256) before send.
TikTok Pixel — TikTok ads attribution.
Google Tag Manager — loads marketing tags only after consent.

5. How to refuse

Marketing/analytics scripts run only after you opt in via the consent banner. To clear or revoke, open your browser’s privacy settings — in modern browsers this is Settings → Privacy and security → Cookies. You can also delete localStorage for catzonia.com to clear all our client-side memory.

6. Do Not Track / GPC

We honour the Global Privacy Control signal. If your browser sends it, we treat your visit as if you had declined marketing/analytics cookies.

7. Changes

When the cookie list changes we bump the version code above and update the date. Material changes are announced in the consent banner.

8. Contact

Cookie or privacy queries: privacy@catzonia.com.