Legal
Cookie Policy
Last updated: 23 October 2026.
1. What are cookies
Cookies are small text files stored in your browser when you visit a website. They enable us to remember preferences, keep sessions active and collect information about how the platform is used.
2. Legal basis and consent
Non-essential cookies, such as marketing cookies, are only activated after your explicit consent. Consent is always:
- Voluntary: never a condition for using the platform.
- Specific and informed: you know exactly what each category does before accepting.
- Revocable: can be withdrawn at any time via the preferences banner in the footer or in account settings.
3. Strictly necessary cookies
Always active. Cannot be disabled as they are essential for the platform to function.
| Cookie | Purpose | Duration |
|---|---|---|
| jwt_token | JWT authentication token stored as an HttpOnly cookie. Contains no personally identifiable data beyond the session ID. | 24 hours |
| zelect_logged_in | Signals to the frontend that an active session exists. Contains no identifying data. | 24 hours |
4. Usage analytics (no cookies)
We do not use analytics cookies. Usage analytics and the site support chat run on Indiehacker Studio, which works without cookies and does not store IP addresses. It only keeps a random, anonymous identifier in your browser's local storage to count unique visitors and keep your chat conversations.
5. Marketing cookies (Meta Pixel)
Only activated with your explicit consent, either via the cookie banner (on zelect.io) or the marketing consent checkbox during sign-up (on zelect.io/en/app). These cookies are set by the Meta Pixel, a technology from Meta Platforms, Inc., and are used to measure the effectiveness of advertising campaigns on Facebook and Instagram.
| Cookie | Purpose | Domain | Duration |
|---|---|---|---|
| _fbp | Meta browser identifier. Distinguishes unique visitors for conversion attribution and cross-visit tracking. | .zelect.io | 90 days |
| _fbc | Ad click identifier. Created from the fbclid URL parameter when the user arrives via a Meta ad. | .zelect.io | 90 days |
In addition to cookies, we use the Meta Conversions API (server-to-server) to complement tracking with greater accuracy. Data sent includes: SHA-256-hashed email, SHA-256-hashed internal user identifier, and IP address. See the Privacy Policy for full details.
The _fbp and _fbc cookies are set on the root domain .zelect.io so they are shared between the landing page (zelect.io) and the app (zelect.io/en/app), ensuring consistent funnel attribution.
6. Managing your preferences
You can review or withdraw your consent at any time:
- By clicking "Manage cookie preferences" in the footer of any page on the site.
- In your account settings in the app, for marketing consent given during sign-up.
- By contacting us at support@zelect.io.
Withdrawing consent prevents future cookies and tracking events, but does not delete data already transmitted to Meta. To exercise rights over already-transmitted data, refer to Meta's Privacy Policy.
7. Third-party cookies
In addition to Meta cookies (described above), the payment processor Stripe may set cookies necessary to complete transactions securely. These are strictly necessary for payment and do not require consent. See Stripe's Privacy Policy for more information.
8. Updates to this policy
This Policy may be updated to reflect legal, technical or operational changes. The effective date on this page will be updated whenever a material revision is made.