Cookie Policy
What cookies ZinCut uses, why, and how to control them.
Last updated: August 25, 2026
What are cookies?
Cookies are small text files a website stores in your browser. We also use one piece of local browser storage in a similar way — both are covered on this page. We use them for one purpose: keeping the product working. We don't use cookies or local storage for advertising, and we don't run any analytics or tracking scripts on this site. For what personal data these are tied to, see our Privacy Policy; for the rest of the terms that apply when you use ZinCut, see our Terms of Use.
Cookies & storage we use
Every cookie and browser storage item ZinCut sets or relies on is listed below. All of them are strictly necessary or purely functional — there's no cookie preference toggle on this site because there's nothing optional to turn off.
| Name | Type | Set by | Category | Purpose | Duration |
|---|---|---|---|---|---|
| sb-*-auth-token | Cookie | ZinCut (Supabase) | Strictly necessary | Keeps you signed in and identifies your account on every request. Without it you'd be logged out immediately. | Until you log out, or refreshed automatically while you're signed in |
| Midtrans Snap session cookies | Cookie (third-party) | Midtrans (payment processor) | Strictly necessary | Set by Midtrans's own checkout script (loaded via next/script on the Pricing page and the Settings page, where subscribing, changing plan, or buying credits happens) to process payment and detect fraud. | Set and controlled by Midtrans, cleared when the checkout window closes |
| studio-alerts-toasted | Local storage (not a cookie) | ZinCut, client-side only | Functional / preferences | Remembers which account or billing alerts (like a failed payment or a plan change) you've already been shown as a pop-up toast in this browser, so the same one doesn't appear twice. Never sent to our servers. | Persists in your browser until you clear your browser's site data |
Cookies we don't use
No analytics cookies (like Google Analytics), no advertising or retargeting cookies, and no third-party trackers of any kind. The only external script on this site is Midtrans' own checkout script.
Third-party cookies
Midtrans is the only third party that sets cookies through ZinCut, for the payment and fraud-detection purposes described in the table above. fal.ai, which powers our AI tools, never runs in your browser — we call it only from our own servers, so it never sets any cookie or identifier on your device. If you sign in with Google or Facebook, that sign-in briefly takes you to their site, where they may set their own cookies under their own privacy policies — that's outside our control and not listed above, since it isn't something ZinCut sets.
Controlling cookies
Because every cookie here is essential to signing in and processing payments, blocking them will break the product — you'll be signed out and won't be able to complete a purchase. You can still clear or block cookies, and clear local storage, at any time through your browser's settings; there's just no separate in-app cookie consent banner or preference tool, since there's nothing optional to disable.
Mobile app
ZinCut is currently a web-only product, so this policy covers cookies and browser storage on zincut.com. If we release a mobile app in the future, traditional browser cookies won't apply there in the same way — a mobile release would instead use device-level equivalents (like secure local storage for your login session), and any SDKs it adds would need their own review and its own update to this policy at that time.
Changes to this policy
If what we use cookies or local storage for ever changes — for example, if we add analytics in the future — we'll update this page and the date above.
Questions?
Reach out to support@zincut.com and we'll help.