Cookies and browser storage

1. Technical and Security Cookies (Essential)

zustalo_session: securely maintains your authenticated session (HttpOnly, Secure, SameSite=Lax). Active for the duration of your session or sign-in.

XSRF-TOKEN: cryptographic token protecting forms and requests against cross-site request forgery (CSRF attacks).

zustalo_consent: cookie storing your cookie consent preferences for 180 days.

These cookies are essential for the operation of the platform and cannot be switched off.

2. Functional Features and Browser Local Storage (localStorage)

theme: saves your preferred light, dark, or system visual appearance mode.

zustalo_guest_favorites_v1: saved favorite listings for visitors who are not signed in. Stored exclusively on your device.

zustalo_recently_viewed_v1: listing IDs you have recently visited, powering the “Recently Viewed” slider row.

zustalo_compare_v1: listing IDs added to your material comparison tray.

Data in localStorage does not contain passwords or payment credentials and is not automatically transmitted with every page load.

3. Google Analytics 4 and Google Ads (Optional — Consent-Based)

Google Analytics 4 (_ga, _ga_*, _gid): measures aggregate, anonymized traffic and category popularity to help improve the site interface (retained for up to 180 days).

Google Ads (_gcl_*, _gac_*): measures promotional campaign performance and conversions (e.g. ad submissions) to connect sellers and buyers effectively.

Without your prior explicit opt-in consent via the cookie banner, no analytics or advertising cookies are placed and no tracking data is sent.

4. Managing and Revoking Consent

You can change or revoke your consent at any time by clicking “Cookie settings” in the site footer. Revoking consent immediately deletes tracking cookies.

You can also clear cookies and browser storage at any time in your browser’s privacy settings.