The short version
- We use a few cookies and browser-storage items: essential ones are always on, and anything that remembers where a visit came from beyond the visit itself stays off until you accept.
- We don't run analytics, advertising pixels or session recording on zome.io or the app's public pages today.
- Choose with Reject all or Accept all on the cookie card, and change your mind any time with Cookie settings in the footer.
- If your browser sends Global Privacy Control, we note it and turn nothing optional on.
- A business's own analytics or ad tags on a website we build for it are not covered by this page.
A plain-language summary, for convenience. The full text below is what applies.
Cookies are small files that a website saves in your browser. We also use similar browser storage (localStorage and sessionStorage) and treat it the same way on this page. This page lists everything Zome sets, so you can see what it is and decide.
For how we use personal information more generally, see the privacy policy.
Your choices
The first time you visit, a small card asks you to accept or reject. There are two answers:
- Reject all keeps only the essential items. They keep you signed in, remember your choice and keep the site secure. They are always on. Items that remember a choice you make on screen, such as the dark look, are set only when you use that control.
- Accept all also lets us remember, for 30 days, the page you landed on, campaign tags, the site that sent you and any ad you clicked, so we can see which ads work.
We ask again after 12 months, or sooner if we change what Accept all covers.
Cookie settings
You can change your mind at any time: Open cookie settings. The same link is called Cookie settings in the footer of zome.io and of the app's public pages. It reopens the same card. Your choice is saved in the cookie zome_consent.
Global Privacy Control. If your browser sends the Global Privacy Control signal, we treat it as a request to keep the optional items off. The cookie card notes that it was seen and turns nothing on. Accept all is still your own choice, and it does turn them on. The signal is read in your browser and saved as a yes or no in your consent record.
What we do not use
- No analytics tags, advertising pixels or session recording are loaded on zome.io or the app's public pages today.
- No fonts, scripts or media are loaded from other companies on a page of zome.io.
- If that changes, the new tool will start only after you accept, and we will update this page first.
The three kinds of items
| Category | What it covers | When it is set |
|---|---|---|
| Essential | Sign-in, security, remembering your cookie choice, and keeping a feature working while you use it. | Always |
| Preferences | How you arranged the screen, such as the light or dark look, or whether a sidebar is open. They hold no name or other identifier. | When you use that control |
| Attribution | Where a visit came from: UTM tags, the landing page, the referring site and ad click IDs. | For this visit only. For 30 days after it only if you accept |
On zome.io
| Name | What it does | How long | Host | Category |
|---|---|---|---|---|
zome_consent (cookie) | Remembers your cookie choice: a version number, the time, whether optional items are allowed, and whether Global Privacy Control was on. It holds no name or other identifier. If your browser blocks cookies, a copy is kept in session storage for the tab. | 12 months | zome.io, also read on app.zome.io | Essential |
zome_attribution (cookie) | Carries the source of your visit to the free scan on app.zome.io. | This visit (a session cookie). 30 days only if you accepted | zome.io, also read on app.zome.io | Attribution |
zome-attr-s (session storage) | Holds the source of your visit while you browse. Ad click IDs are left out unless you accepted. | This visit | zome.io | Attribution |
zome-attr (local storage) | Keeps the source of your visit for 30 days. Written only if you accept the optional items. | 30 days | zome.io | Attribution |
zome-annc (local storage) | Remembers you closed the announcement bar. | Until you clear it | zome.io | Preferences |
zome-check-* (local storage) | Remembers which boxes you ticked on a checklist, on this device only. | Until you clear it | zome.io | Preferences |
zome-job-value (local storage) | Remembers the average job value you typed into the report. | Until you clear it | zome.io | Preferences |
zome-demo-book (session storage) | Keeps the booking link you were given after a demo request. | This visit | zome.io | Essential |
zome-report-* (session storage) | Keep the state of the report you are viewing, so it is still there if you move around. | This visit | zome.io | Essential |
In the app
The app is at app.zome.io. The free scan and the app's public pages need no sign-in. These items are essential to sign-in, security or the feature you are using, and none holds an advertising identifier. Most are set by our servers and cannot be read by scripts in your browser.
| Name | What it does | How long | Host | Category |
|---|---|---|---|---|
zome_session | Keeps you signed in. | 30 days | app.zome.io | Essential |
zome_device | Remembers a browser you trusted at sign-in, so the sign-in code isn't asked every time. | 30 days | app.zome.io | Essential |
zome_2fa | Holds a sign-in code request while you enter the code. | 30 minutes | app.zome.io | Essential |
zome_verify | Remembers a sign-up or sign-in that is waiting for email confirmation, so the confirm screen can resend the link. It is not a session. | 24 hours | app.zome.io | Essential |
zome_report_session | Keeps you signed in to the report you opened with your phone number. | 30 days | app.zome.io | Essential |
zome_report_nonce | Protects the step where you open a report. | 30 minutes | app.zome.io | Essential |
zome_scan_pass | Remembers that your browser passed the security check at the start of a free scan, when that check is switched on. | 26 hours | app.zome.io | Essential |
zome_scan_recent | Remembers the scans you ran recently, so scanning the same business again opens the one you already have. | 6 hours | app.zome.io | Essential |
zome_visit_access, zome_visit_challenge | Check a code before showing a private visit page. | 30 days, 10 minutes | app.zome.io | Essential |
zome_gbp | Protects connecting your Google Business Profile. | 15 minutes | app.zome.io | Essential |
zome_view_as, zome_staff_reset | Used only by Zome staff, when an owner has allowed read-only support access and for resetting access. | Up to 60 minutes, 5 minutes | app.zome.io | Essential |
zome_campaign_draft | Holds a marketing message you are writing until you send it. | 10 minutes | app.zome.io | Essential |
zome-theme (cookie) | Remembers whether you chose the light, dark or system look. It is a cookie set by the app's code in your browser, so the page can load in the right look. | 12 months | app.zome.io | Preferences |
zome_side, zome_billing_hero, zome_calls_log, zome_form, zome_home_l, zome_home_sig, zome_home_setup_*, zome_home_examples_* (cookies) | Remember how you arranged the app, such as whether the sidebar or a panel is open. Some are set by the app's code in your browser. | Up to 12 months. zome_home_sig lasts 10 seconds | app.zome.io | Preferences |
zome-annc (local storage) | Remembers you closed the announcement bar on the app's public pages. | Until you clear it | app.zome.io | Preferences |
zome-scan-attr (session storage) | Holds the source of your visit while you use the free scan. | This visit | app.zome.io | Attribution |
zome-report-opportunity:* (session storage) | Keeps the average job value you typed into a report, so it is still there if you reload the page. | This visit | app.zome.io | Preferences |
zome.sidebar, zome.iw.*, zome.ee.*, zome.home.*, zome:customers:*, zome:recent:*, zome:list:*, zome:maps-app, zome:sms-explained, zome-schedule-panels, st-section (local and session storage) | Remembered layout and search preferences in the app, on your device only. For example the sidebar width, the schedule panels you opened, the settings section you were in, your recent searches, where you were in a list, the invoice and estimate preview choice, and your chosen maps app. | Until you clear it, or for this visit | app.zome.io | Preferences |
The layout and search preferences in the last row stay in your browser. They are not sent to us.
Other companies
A few steps load a tool from another company. That company can set its own cookies, which we don't control, under its own policy.
- Cloudflare Turnstile runs a security check to stop automated abuse, in the step where you confirm your phone number to open a report and, when it is switched on, at the start of a scan.
- Google Maps draws the map in a report in the app.
- Stripe runs the page where a business pays for a plan. You are sent to Stripe's own page.
Websites we build for businesses
A website Zome builds and hosts for a business is that business's own website. The items below are Zome's own. A business may also add its own analytics or advertising tags, such as Google Analytics, Google Tag Manager or a Meta pixel. Those are chosen by the business, load on its site and are its responsibility. This page and the cookie card on zome.io do not control them, so look for that business's own notice.
| Name | What it does | How long | Host | Category |
|---|---|---|---|---|
zs-channel (session storage) | Remembers how this visit started, such as search, a link or an ad, so a booking a few pages later is credited to it. | This visit | The business's website | Attribution |
zs-fu, zs-print (session storage) | Remember which of the business's own follow-up messages or printed items (such as a card) a link came from, for the same reason. | This visit | The business's website | Attribution |
zc-install (local storage) | Remembers that you closed the hint to add a customer page to your home screen. | Until you clear it | The customer page | Preferences |
Counting visits without a cookie. A website Zome hosts counts visits for its owner. When a page loads, when someone taps a phone number and when someone starts a booking, the page sends a small message to Zome (/api/track) with the type of event (view, call or book start), the page and where the visit came from. Zome stores a daily hash of the visitor's IP address and browser details, mixed with a secret, to tell visitors apart for that day. It does not store the IP address with the count, and it sets no cookie for this.
Contact
If you have a question about this page, please use our contact page.
What changed
- First published. The cookie details that were inside the privacy policy now also have a page of their own.
Questions about this page?
Send us a message. A real person reads every message and replies by email.