Cookie Policy

1.What a cookie is here

A cookie is a small file that a website asks your browser to keep and send back on your next visit. Local storage is the same idea with one difference: it stays on your device and is never sent anywhere by the browser itself.

Both are covered by this policy, because what matters is not the technique but whether something is stored on your device and what it is used for.

We use three kinds, and they are treated differently: what the service cannot work without, analytics, and advertising. The last two are set only if you allow them, and you allow them separately.

2.Strictly necessary — used without asking

These are needed for Marzi to work at all: to keep you signed in, to tell a person from an automated flood of requests, and to remember the answer you gave to the cookie notice. The law does not require consent for them, and they cannot be switched off while you use the service.

mm_session

set at platform.marzi.ai when you sign in, and it is what keeps you signed in. It holds no personal data, only a signed token; it cannot be read by scripts, it travels over HTTPS only, it expires after 30 days, and the session ends by itself after 60 minutes without activity.

marzi_consent

set across marzi.ai once you answer the cookie notice. It records which categories you allowed, the version of the question and when you answered, so that we do not ask again on every page and can show what you agreed to. It lasts 180 days; after that we ask again.

__cf_bm and similar

our network and security provider, Cloudflare, sits in front of both domains and may set a short-lived cookie of its own, typically for about 30 minutes, to distinguish visitors from automated traffic. It carries no advertising purpose.

Your session token, the interface language and the light or dark theme are kept in your browser's local storage, under the names mm_supa_session, ami-lang and ami-theme. They stay on your device. Clearing them signs you out and resets those preferences; nothing else is lost.

3.Analytics — only if you allow it

We measure how the website is used so that we can see which pages are read and which are ignored. This is the only non-essential thing we store, and it is off until you say otherwise.

_ga

set by Google Analytics 4 in the marzi.ai domain. It holds a random identifier so that two page views can be recognised as one visitor rather than two. It lasts up to 2 years.

_ga_M1Z92502W5

set by Google Analytics 4 for this specific property, to keep the state of your visit. It lasts up to 2 years.

With your consent, the following is sent to Google Analytics: the address of the page you opened, the page you arrived from, the language and the type of page, your browser, device and operating system, an approximate location derived from a shortened IP address, and the random identifier above. We do not send your name, your e-mail address or anything you typed into the Platform.

The recipient is Google Ireland Limited, which processes this data on our behalf and may transfer it to the United States under the transfer safeguards described in the Privacy Policy. The data is kept for no longer than 14 months.

On this Analytics property the advertising features are switched off: Google Signals and ad personalisation are disabled, so the two cookies above are not used to show you advertising. Advertising is measured separately, by the tag described in the next section, and only if you allowed that too.

Until you allow analytics, Google's script is not loaded at all. Nothing is stored, and Google is not contacted — not even to report that you refused.

4.Advertising — only if you allow it

We buy advertisements for Marzi on Google. To know which of them are worth paying for we have to be able to tell that the person who created an account is the person who clicked a particular advertisement — and those two things happen on two different pages, often on two different days. A cookie is the only thing that can join them.

This is off until you say otherwise, and it is a separate answer from analytics: allowing one does not allow the other.

_gcl_aw

set when you arrive from one of our Google advertisements. It holds the click identifier Google added to the address, so that a sign-up later on can be reported back as coming from that advertisement. It lasts up to 90 days and is set for the whole marzi.ai domain, because the click lands on marzi.ai and the account is created on platform.marzi.ai.

_gcl_dc

the same thing for a click that came through Google's display and campaign-manager systems rather than search. Up to 90 days.

_gcl_au

set by the Google tag to measure how its own advertising works — how often a visit turns into something — without identifying you by name. Up to 90 days.

other _gcl_ cookies

Google occasionally adds a further cookie of the same family while it hands a click over to the page. These are short-lived and serve the same purpose. If we ever connect this advertising account to Google Analytics, Analytics will also write _gac_ followed by the property identifier, for up to 90 days and for this purpose only.

With your consent, the following is sent to Google Ads: the address of the page you opened, the identifier of the advertisement click above, whether you created an account, your browser, device and operating system, and an approximate location. We do not send your name, your email address or anything you typed into the Platform.

The recipient is Google Ireland Limited. For its advertising products Google does not act only on our instructions: under the terms it publishes it also processes part of this data for its own purposes, including showing our advertisements again to people who have already visited us. It may transfer the data to the United States under the transfer safeguards described in the Privacy Policy.

Unlike analytics, this tag also runs inside the Platform after you sign in, because it was asked to measure every page of platform.marzi.ai. It measures the advertising and nothing else: it is not told which sections you open, and no Analytics property is active there.

Until you allow advertising, Google's script is not loaded at all. Nothing is stored, and Google is not contacted — not even to report that you refused.

5.How we ask, and what your answer means

The first time you open marzi.ai or the sign-in page, a notice appears with two buttons of equal weight: accept everything, or refuse everything. A third link opens the detailed view, where analytics and advertising are two switches you set independently of each other.

Nothing non-essential is stored before you answer. Closing the notice, scrolling the page or continuing to read is not consent, and there is no option that we pre-select for you.

Refusing costs you nothing: the whole website and the whole Platform work exactly the same way afterwards. There is no content behind a consent wall.

We ask again after 180 days, and also sooner if the list of cookies or their purposes changes — an answer to the old question is not an answer to the new one.

6.Changing or withdrawing your answer

You can change your mind at any time, and it has to be as easy as agreeing was.

• Use the “Cookies” link in the footer of any page on marzi.ai. It reopens the same panel with your current answer shown.
• Switch a category off and save. The cookies of that category are deleted from your browser immediately, and if nothing is left switched on Google's script is not loaded again.
• You can also delete cookies or block them in your browser settings. Blocking the strictly necessary ones will stop you from staying signed in.

Withdrawing consent does not affect data collected while the consent was in force. If you want that data removed as well, write to [email protected] and we will act on it as described in the Privacy Policy.

7.What we do not do

• No advertising technology other than the Google Ads tag described above: no Meta Pixel, no TikTok pixel, no LinkedIn Insight Tag, no Hotjar or similar session recording, and no Google Tag Manager container.
• No advertising of anyone else: we measure our own advertisements, and we do not carry advertisements on marzi.ai or in the Platform.
• No selling or sharing of personal data with data brokers.
• No analytics inside the Platform itself: once you are signed in, the sections you open are recorded only in our own service log, which is described in the Privacy Policy. The advertising tag runs there, with your consent, and is told none of that.
• No building of a profile of you from what you do inside the Platform, and no use of it to target you.

8.Your rights and who to ask

Consent is one of the legal bases named in the Privacy Policy, and withdrawing it is one of the rights listed there, together with access, correction, deletion, restriction, objection and portability.

For anything about this policy, or to exercise a right, write to [email protected].

You may also lodge a complaint with the data protection supervisory authority competent for you. For matters falling under the jurisdiction of Cyprus, that is the Office of the Commissioner for Personal Data Protection.

9.Changes to this Cookie Policy

We will update this policy whenever a cookie is added, removed or used for a new purpose.

A change to anything non-essential means the question itself has changed, so the notice appears again and nothing new is stored until you answer it.

Every version carries a revised "Last updated" date at the top of this page.