Cookie Policy

This Cookie Policy explains the cookies and similar browser storage that BurTech Solution ("we", "us") uses on the Zamilo website at zamilo.io and in the Zamilo app at https://app.zamilo.io. There are only a few, and every one of them is needed for the website or the app to work, or remembers a choice you made yourself.

1. What cookies and local storage are

A cookie is a small text file that a website asks your browser to keep. Your browser sends it back to that website with each request, so the website can recognise, for example, that you are signed in.

Local storage and session storage are similar places in your browser where a website can keep small pieces of information. Unlike cookies, they are not sent to the website with each request; they stay in your browser. Session storage is cleared when you close the tab.

A cookie can be:

• strictly necessary: without it, a part of the website or the app that you asked for cannot work (for example, signing in or sending a form);
• functional: it remembers a choice you made, such as the dark theme or staying signed in.

Other kinds of cookie, used by many websites to measure visitors or show advertising, are not used on Zamilo (see section 4).

2. Cookies on our website

These cookies may be set when you visit zamilo.io:

Name	Set by	Purpose	Duration	Category
session	Zamilo website	Set only when you open a page with a form (contact, support, request an invitation, book a demo or apply as an affiliate). It holds the form's anti-forgery token, which proves that the form was sent from our page and not forged by another website.	Until you close your browser	Strictly necessary
Cloudflare security cookies, such as __cf_bm	Cloudflare, on our domain, for us	Cloudflare protects the website for us. It may set a short-lived cookie to tell people from automated bots and stop abuse.	Short-lived (__cf_bm lasts 30 minutes)	Strictly necessary

Reading the other pages of the website sets no cookie of ours.

3. Cookies and local storage in the app

These cookies are used when you sign in to the app at https://app.zamilo.io:

Name	Set by	Purpose	Duration	Category
session	Zamilo app	Keeps you signed in as you move from page to page, and holds the anti-forgery tokens that protect the app's forms.	Until you close your browser	Strictly necessary
remember_token	Zamilo app	Set only if you tick "Keep me signed in on this computer" when you sign in. It keeps you signed in after you close your browser.	30 days	Functional
theme	Zamilo app	Remembers whether you chose the light or the dark theme.	1 year	Functional
Cloudflare security cookies, such as __cf_bm	Cloudflare, on our domain, for us	Tells people from automated bots and stops abuse.	Short-lived (__cf_bm lasts 30 minutes)	Strictly necessary

The app also keeps a few interface preferences in your browser's local storage and session storage. They never leave your browser:

Name	Where	Purpose	Kept until	Category
theme	Local storage	A copy of your light or dark theme choice.	You clear it	Functional
sidebar-collapsed	Local storage	Whether you collapsed the side menu.	You clear it	Functional
Names starting remember:	Local storage	On the scanning page, the device and place you typed, so they are filled in next time.	You clear it	Functional
Names starting pick:	Session storage	Which lines of a pick list you have ticked.	You close the tab	Functional

When you connect a service such as Microsoft 365, QuickBooks Online or Shopify, you sign in on that provider's own pages. Those pages set their own cookies under the provider's own policies.

4. What we do not use

• No analytics or statistics cookies.
• No advertising or marketing cookies.
• No tracking pixels, social media buttons or other third-party scripts.
• No third-party cookies set by the website itself. The Cloudflare cookies described above are set on our own domain by Cloudflare, which protects the website and the app for us.

We do not use cookies or browser storage to follow you across other websites, to build a profile of you, or to show you advertising.

5. Why there is no cookie banner

Privacy laws in many places, including the European Union and the United Kingdom, require a website to ask for consent before it sets cookies, unless the cookies are strictly necessary to provide a service you asked for. Every cookie and storage item listed above is either needed for the website or the app to work, or remembers a choice you made yourself, such as the dark theme or staying signed in. None is optional in the sense those laws mean, and none is used to track you. So there is nothing to ask your consent for, and no banner.

If we ever want to add a cookie or similar technology that needs your consent, we will ask for it before setting it, and we will update this policy first.

6. Blocking or deleting cookies

You can block or delete cookies, and clear local storage, in your browser's settings. Most browsers have these options under Settings, in a section called Privacy, Privacy and security, or Cookies and site data. There you can usually:

• see the cookies and site data each website has stored, and delete them;
• block cookies from all websites or from particular ones;
• delete cookies and site data automatically when you close the browser.

Your browser's help pages explain the exact steps.

If you block or delete our cookies, this is what changes:

• Website forms: without the session cookie, the website's forms cannot be sent, because the anti-forgery check fails. You can write to us by email instead, at [email protected].
• Signing in: without the session cookie, you cannot sign in to the app.
• Staying signed in: without remember_token, you need to sign in again each time you open your browser.
• Theme: without theme, the app opens in the light theme.
• Cloudflare: if you block Cloudflare's security cookies, you may be asked to prove you are not a bot more often, or be unable to reach the website or the app.
• Local storage: clearing it resets the side menu and empties the scanning page's remembered fields. Nothing else is lost.

7. Global Privacy Control and Do Not Track

Global Privacy Control (GPC) and Do Not Track are signals your browser can send to ask websites not to sell or share your information or track you. Because we use no tracking, analytics or advertising cookies, and do not sell or share personal information, there is nothing for these signals to switch off. We honour them all the same: if we ever add something they apply to, a browser sending either signal will be treated as having opted out.

8. Changes to this policy

If we change the cookies or browser storage we use, we will update this policy, its version number and its effective date before the change takes effect. If a new cookie needs your consent, we will ask for it first, as explained in section 5.

9. Contact us

For questions about this policy, write to [email protected]. Our Privacy Policy explains how we handle personal information more generally.