# Cookie Notice — Hanzo AI

> The cookies and similar technologies Hanzo uses, the consent posture by category, and how to control them.

Legal

# Cookie Notice

The cookies and similar technologies Hanzo uses, the consent posture by category, and how to control them.

Draft, pending counsel review — not yet effective. Version 2026-07-22, last updated 2026-07-22.

This Cookie Notice explains how Hanzo AI, Inc. uses cookies and similar technologies (local storage, SDKs, pixels) on hanzo.ai and the Hanzo Console. It supplements the [Privacy Policy](https://hanzo.ai/legal/privacy).

## 1. Categories

- Strictly necessary. Authentication, session integrity, security, load balancing, and core functionality. These are always active; the Services cannot operate without them, so they do not require consent.

- Analytics. Measurement of how hanzo.ai is used: our own first-party analytics and Google Analytics.

- Marketing performance. Measuring the advertising campaigns that bring visitors to Hanzo: the Meta Pixel, Google's ad measurement, the ad click a visit arrived from, and the matching conversion events Hanzo sends to Google and Meta from its servers, with email addresses hashed.

- Personalised third-party marketing. Letting Google and Meta use that data to personalise ads, such as audiences and retargeting. When it is off, Meta receives the data under Limited Data Use and Google under ad personalisation denied.

## 2. Consent and control

All categories other than strictly necessary are on by default, and you can turn each off at any time through [Your privacy choices](#choices); your choice is kept in the `hz_consent` cookie and applies to the events Hanzo sends from its servers as well as to the tags in your browser. You can also control cookies through your browser. We honor Global Privacy Control as an opt-out of sale and sharing: with it, marketing performance and personalised third-party marketing stay off, and analytics starts off.

A browser privacy signal governs cookies and comparable tracking; it does not by itself withdraw a separate, affirmative [research contribution](https://hanzo.ai/legal/research-contribution), which is managed independently in your settings.

## 3. Retention

Nonessential analytics identifiers are retained no longer than the period listed in the [Privacy Policy](https://hanzo.ai/legal/privacy) retention schedule — generally no more than 13 months — after which they expire or are renewed only with continued consent. Strictly necessary cookies persist only as long as the session or security function requires.

## 4. Cookie inventory

Name / pattern

Category

Purpose

Duration

Provider

`hz_consent`

Strictly necessary

Your Cookie Preferences

13 months

Hanzo

`hanzo_iam_*` (local storage)

Strictly necessary

Your sign-in session

Until sign-out

Hanzo

`hz_cid`

Analytics

A first-party Google Analytics client id, set when `_ga` is absent

2 years

Hanzo

`_ga`, `_ga_*`

Analytics

Google Analytics visitor and session

2 years

Google

`hz_touch`

Marketing performance

The ad click (gclid, gbraid, wbraid, fbclid) a visit arrived from

90 days

Hanzo

`_fbp`, `_fbc`

Marketing performance

Meta browser and click identifiers

90 days

Meta, set by Hanzo or the Pixel

Publication gate: Confirm this Notice with counsel before it is published as effective.
