Cookie Policy

1. What Are Cookies?

Cookies are small text files stored on your browser or device when you visit a website. They allow the website to recognize your session, keep you signed in, remember your preferences, and maintain security.

2. Essential Cookies

Zappit uses essential cookies required for authentication, CSRF security, and session management. Disabling essential cookies will prevent you from signing in or using protected account features.

• next-auth.session-token / __Secure-next-auth.session-token: Maintains your authenticated user session securely across pages.
• next-auth.csrf-token / __Host-next-auth.csrf-token: Protects against Cross-Site Request Forgery (CSRF) attacks during authentication and form submissions.
• next-auth.callback-url: Stores your intended destination URL to seamlessly redirect you after signing in.
• zappit_consent: Records your accepted legal and cookie consent version so you are not prompted repeatedly.

3. Functional & Optional Cookies

Zappit uses a first-party referral cookie when you visit the site via a partner affiliate link:

• zappit_ref: A signed HTTP-only cookie used to attribute order commissions to approved Zappit affiliate partners when you complete a purchase.

4. No Third-Party Tracking or Advertising Cookies

Zappit does not use Google Analytics, Meta Pixel, cross-site advertising cookies, or third-party behavioral tracking cookies. All analytics (such as NFC card taps and QR code scans) are first-party metrics processed directly on Zappit servers without selling or sharing data with ad networks.

5. Managing Cookies

You can control and manage cookies through your web browser settings. Most browsers allow you to block or delete cookies. Please note that if you block essential cookies, Zappit account login and ordering functions will not operate correctly.