Three cookies, named, with what each one holds.
A cookie policy is only useful if it lists the actual cookies. These are ours — there are no others, and none of them are advertising cookies.
Last updated 13 August 2026
On a merchant's storefront
Set by our script, first-party, on the store's own domain.
- _zinx_vid
- A random identifier for the browser, so the same visitor stays in the same test group. Not derived from anything personal. Lasts one year.
- _zinx_grp
- Which group of which experiment this visitor is in. Read at checkout so an order can be credited to the right group. Lasts one year.
- _zinx_try_…
- Written only by theme and template tests, one per experiment. It records that the redirect for this test has already been attempted, so a visitor can never be sent round a loop. Lasts 30 minutes.
All three are first-party, set with SameSite=Lax, and marked Secure on any store served over HTTPS. None is readable by another site, and none is shared with anyone.
Local storage, alongside them
- _zinx_cfg
- A copy of the store's experiment configuration, so a returning visitor applies their variant with no network wait. It contains no information about the visitor.
Consent decides whether any of this is written
We ask Shopify, and Shopify's answer is final.
Before writing anything, our script asks Shopify’s Customer Privacy API whether analytics processing is allowed for this visitor. Shopify’s answer already accounts for where the shopper is, so there is nothing for us to guess about geography.
- Consent given
- The cookies above are written and the test runs.
- Consent refused
- Nothing is written and nothing is measured. Anything stored on an earlier visit is deleted from the device — withdrawing consent should stop us holding data, not merely stop us adding to it.
- No consent banner on the store
- Where there is no consent framework to ask, there is no consent to respect, so the test runs. A merchant can switch an experiment to strict, which makes silence count as a refusal.
On this website
Sign-in only. There is no analytics or advertising cookie on any page you are reading.
The marketing pages set no cookies at all. Once you sign in, a session cookie keeps you signed in, and a small preference is stored locally for your theme and display scale.
There is no advertising pixel, no third-party analytics tag and no tracker on this site.
Turning them off
Three ways, and all of them work.
- Refuse analytics in the consent banner on the store you are visiting. That is the cleanest route, and it removes anything already stored.
- Clear cookies for the store in your browser. The next visit starts fresh — though the same group may be re-derived, because assignment is deterministic by design.
- Block cookies for the site entirely. Zinx Signal fails open, so the page still works and you simply see the store’s original version.
Elsewhere
Where to go next, depending on who you are.
The privacy policy lists everything recorded, not just what is stored on a device. How it works explains why a sticky group is necessary in the first place.
Questions: [email protected].