What these technologies are
A cookie is a small text file stored by a browser. Similar technologies include session storage, local storage, URL identifiers and server-side identifiers linked to a browser. They can remember a login, protect a session, save a preference or measure use of a website.
Categories we use
| Category | Why it is used | Consent |
|---|---|---|
| Strictly necessary | Authentication, Account sessions, security, fraud prevention, load balancing, checkout and remembering privacy choices. | Operates where needed to provide a requested service. It cannot be disabled through the cookie banner, although browser controls may block it and break features. |
| Functional | Optional preferences or features that are not essential to the core request. | Used only after consent where required. |
| Analytics | First-party measurement of visits, source, page use, journeys and performance so Dáva Zmysel can understand and improve the Service. | Used only after consent where required. Dáva Zmysel's global launch setting is opt-in for non-essential analytics. |
| Advertising | Cross-site advertising, retargeting or behavioural profiles. | Not used at launch. Dáva Zmysel will update this Policy and obtain required consent before introducing it. |
Current technology inventory
| Technology | Provider and scope | Purpose | Category | Lifetime |
|---|---|---|---|---|
| Authentication session cookies | Dáva Zmysel and Supabase on the Dáva Zmysel application. | Keep an authorised user signed in, protect the Account session and apply access controls. | Strictly necessary | Session or until logout; persistent login duration depends on the final authentication configuration. |
| Security and request integrity cookies | Dáva Zmysel, hosting or security provider. | Prevent abuse, preserve request integrity, route traffic and protect the Service. | Strictly necessary | Session or short-lived according to the provider configuration. |
| Payment and checkout cookies | Stripe on Stripe-hosted or embedded payment pages. | Process payment, prevent fraud and maintain checkout security. | Strictly necessary for checkout | Varies under Stripe's configuration and policy. |
| Consent preference | Dáva Zmysel on the website or application. | Remember whether a user accepted or rejected optional technologies. | Strictly necessary | Up to 12 months. |
_dava_anon | Dáva Zmysel first-party cookie on a site using the Dáva Zmysel tracking snippet. | Provide an anonymous browser identifier for first-party journey and attribution measurement within the relevant Customer domain. | Analytics | Up to 12 months, subject to Customer configuration and consent. |
| Session identifier and session storage | Dáva Zmysel first-party technology on a configured site. | Link same-session events and minimum attribution state. It must not contain raw email, payment data or authentication secrets. | Analytics or functional | Until the tab or browser session ends or after 30 minutes of inactivity. A click identifier, if enabled, expires within 24 hours. |
The exact cookie name may vary where a provider controls it. The live Cookie Settings panel should be treated as the most current inventory after the production scan and before publication of this Policy.
Your choices
You can accept or reject non-essential technologies through the banner or Cookie Settings control. Rejecting analytics does not prevent access to the public website or core Account functions, but some optional features or measurement may be unavailable.
You may withdraw consent at any time through Cookie Settings. Withdrawal stops future optional storage and analytics and removes relevant Dáva Zmysel browser identifiers where technically available. It does not make earlier lawful processing unlawful.
Browser settings can block or delete cookies and site storage. Blocking strictly necessary technologies may prevent login, checkout, security checks or other requested functions.
Where applicable and technically supported, Dáva Zmysel recognises Global Privacy Control or another legally recognised opt-out preference signal for non-essential processing. Dáva Zmysel does not sell personal information or share it for cross-context behavioural advertising.
Customer websites
A Customer that installs Dáva Zmysel controls its website, consent manager and legal basis. It must describe the technologies actually enabled, identify Dáva Zmysel and relevant categories of data, state retention and overseas processing, and obtain consent where required.
Dáva Zmysel's explicit-consent mode is designed so the browser snippet does not set the Dáva Zmysel analytics cookie or send analytics events until the Customer calls the consent function. Redirect routing and minimum security processing may still occur where lawful. The Customer must provide an effective withdrawal method and keep its implementation consistent with its notice.
Third party sites
Stripe and other linked providers may use their own cookies under their policies. A link or integration does not give Dáva Zmysel control over the provider's technology. Review the provider's notice before using its service.
Changes
We may update this Policy when technologies, providers or laws change. We will publish a new version and seek fresh consent before materially expanding a consent-based purpose where required.
Contact
- Privacy requests[email protected]
- General support[email protected]
- Postal address63A Edward Street, Pyrmont NSW 2009, Australia