Legal
Cookie Policy
Last updated: October 9, 2026
This policy explains how ZumaFlix uses cookies and related browser storage to operate the marketplace and, if you choose, remember campaign attribution. Read it with our Privacy Policy.
1. About cookies
Cookies are small text files stored by a website in your browser. Similar technologies include browser storage that keeps information on your device. This policy covers those technologies when used on ZumaFlix. The Privacy Policy explains our broader handling of personal information.
2. Why we use them
ZumaFlix uses essential cookies for sign-in security and checkout continuity, and a preference cookie to remember your cookie choice. A functional cookie can remember the dashboard persona you selected. If you allow it, a separate optional cookie remembers campaign attribution. The implementation reviewed for this policy does not use analytics or advertising cookies or pixels.
3. Cookies used on ZumaFlix
The table lists the names and lifetimes configured in the application. Secure-prefixed names are used in secure environments; otherwise the non-prefixed name is used. A lifetime marked “browser session” ends when the browser session ends, subject to browser behaviour.
| Cookie | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| next-auth.session-token / __Secure-next-auth.session-token | ZumaFlix (NextAuth) | Maintains an authenticated sign-in session. | Strictly necessary | Up to 24 hours |
| next-auth.callback-url / __Secure-next-auth.callback-url | ZumaFlix (NextAuth) | Supports sign-in navigation and return to the requested page. | Strictly necessary | Browser session |
| next-auth.csrf-token / __Host-next-auth.csrf-token | ZumaFlix (NextAuth) | Supports cross-site request forgery protection in authentication flows. | Strictly necessary | Not specified by application configuration |
| zumaflix_checkout | ZumaFlix | Continues a checkout session between checkout steps. | Strictly necessary | Up to 24 hours |
| activePersona | ZumaFlix | Remembers a signed-in user’s selected dashboard persona. | Strictly necessary for the selected dashboard function | 30 days |
| zumaflix_cookie_consent | ZumaFlix | Remembers whether campaign attribution was allowed or declined. | Strictly necessary preference | 180 days |
| zf_campaign_attribution | ZumaFlix | Remembers first- and last-touch campaign attribution when allowed. | Optional campaign attribution | Up to 90 days |
Authentication cookie names may include a secure prefix in HTTPS or production environments. NextAuth also uses a CSRF cookie in authentication flows; the application does not set a fixed expiry for that cookie. Cookie lifetimes can also be affected by browser settings.
4. Browser storage
Some features use local or session storage rather than cookies. These values are kept in your browser and are not sent with every web request like a cookie.
| Technology | Purpose | Duration |
|---|---|---|
| localStorage: zumaflix_cart | Keeps cart contents available between visits and supports cart synchronization. | Browser storage; remains until cleared by the user or browser. |
| localStorage: pcw:draft | Preserves a product-creation draft in the admin interface. | Browser storage; removed by the workflow or when browser storage is cleared. |
| sessionStorage: zumaflix:image-search-results | Passes image-search results to the marketplace view during navigation. | Current browser tab session. |
5. Essential and optional technologies
Essential cookies support features you request, including signing in and completing checkout. The cookie-choice preference is also needed to remember your decision. The active-persona cookie is set only after a signed-in user selects a dashboard persona and is needed to resume that selected dashboard function.
Campaign attribution is optional. ZumaFlix asks before setting the campaign-attribution cookie or recording a campaign visit for attribution. You can choose “Essential only” or “Allow campaign attribution”; declining does not block essential site functions.
ZumaFlix does not currently use analytics/performance cookies or advertising/marketing cookies. This may change; we will update this policy and provide choices where required before enabling optional technologies.
6. First-party and third-party technologies
The cookies listed above are set by ZumaFlix for its own site features. We did not identify analytics or advertising scripts that place third-party cookies on the pages reviewed. When you leave ZumaFlix for a payment provider’s own hosted payment page, that provider may use its own technologies under its separate privacy and cookie notices. ZumaFlix does not control those independent practices.
Checkout code integrates with Stripe, Paystack, and Flutterwave. Whether a particular payment flow takes you to a provider-hosted page depends on the payment method and flow you use.
Some campaign forms can be embedded on another website. Browser privacy settings may limit storage in an embedded context; campaign attribution remains subject to the choice you make on ZumaFlix.
7. Managing your choice and browser settings
You can change or withdraw your campaign-attribution choice at any time using the control below or “Cookie settings” in the footer. Choosing “Essential only” removes the campaign-attribution cookie and prevents future campaign attribution tracking from being recorded through that feature.
You can also use your browser settings to view, delete, or block cookies and clear local or session storage. Blocking essential cookies or storage may prevent sign-in, checkout, or other features from working. Browser “Do Not Track” signals are not used by the application to change cookie behaviour.
8. Nigerian data-protection context
We distinguish technologies needed to provide a feature you request from optional campaign attribution. Where consent is required under applicable law, optional attribution is used only after you choose to allow it. This policy does not represent regulatory certification or approval.
9. Changes to this policy
We may update this policy when our use of cookies or related technologies changes or when required. We will post the current version here with its updated date and provide additional notice for significant changes where appropriate or required.
10. Contact
For questions about this policy or your privacy choices, contact support@zumaflix.com.