Cookie Notice

1. The short version

xigzag uses a small number of first-party cookies. None are advertising cookies and none come from third-party trackers. Essential cookies keep you signed in and keep your bag; everything else waits for your choice.

2. Essential cookies

These make the service work and can't be switched off:

• xz_session / __Host-xz_session (essential): Keeps you signed in to the Studio. Lifetime: until you sign out, at most 7 days.
• xz_ws (essential): Remembers which workspace you are working in. Lifetime: 1 year.
• xz_member (essential): Keeps a shopper or member signed in to a site's account area. Lifetime: until sign out, at most 30 days.
• xz_staff / __Host-xz_staff (essential): Signs in our own support staff to the operator console. Lifetime: 1 day.
• xz_imp / __Host-xz_imp (essential): Marks a support session where our staff look at an account with the owner's consent. Every such session is logged. Lifetime: 15 minutes.
• xz_cart (essential): Holds the shopping bag on a storefront. Lifetime: 30 days.
• xz_claim (essential): Proves that this browser built a guest preview, so only you can claim it into your account. Lifetime: 30 days.
• xz_pgpw (essential): Lets you back into a password-protected page after you entered its password. Lifetime: the browser session.
• xz_age (essential): Remembers that you confirmed your age on a site with an age check. Lifetime: 30 days.
• xz_consent (essential): Remembers your cookie choice so we don't ask again. Lifetime: 1 year.

3. Preference cookies

• xz_geo (preference): Remembers that a site already offered you its regional version, so you're not redirected twice. Lifetime: 30 days.
• xz_lang / xz_ui_lang / xz_cur / xz_mkt (preference): Remembers your language, currency and market. Lifetime: 1 year.
• xz_ref / xz_aff (preference): Remembers the referral or affiliate link you arrived from, so the person who shared it is credited. Lifetime: 30 days.

4. Analytics cookies

• xz_sid / xz_vid / xz_attr / xz_mc (analytics): First-party visit counting and campaign attribution. Set only after you allow analytics; otherwise visits are counted with a daily-rotating anonymous hash and no cookie. Lifetime: 30 minutes to 1 year.

Where the law requires consent, these are only set after you allow them in the cookie banner.

4a. Legal basis and your consent

Essential cookies are strictly necessary for a service you asked for, so they need no consent (ePrivacy Directive Art. 5(3), UK PECR reg. 6). Preference and analytics cookies are set only with your prior, opt-in consent; "Reject" is as easy as "Accept", nothing is pre-ticked, and we keep a record of your choice (the xz_consent cookie, with the date and the categories). You can withdraw at any time and the cookies are then removed. Web fonts (including Google Fonts families) are served from our own servers: your browser never contacts Google Fonts, so no IP address or other data is sent to Google to show a font.

5. Sites built on xigzag

Each business that builds a site with xigzag controls its own site. Its owner can turn on a consent banner and publish its own cookie policy; if they add third-party tools (for example a booking widget or a map), those tools may set their own cookies under that business's responsibility.

6. Your choices

You can change your choice at any time from the cookie banner link in a site's footer, or clear cookies in your browser. Blocking essential cookies will sign you out. Questions: privacy@xigzag.com. See also our Privacy Policy.

Who we are

xigzag is operated by Arad Soft Ltd., a company established in Ontario, Canada. Privacy officer (the person in charge of the protection of personal information): Privacy Officer, support@xigzag.com, privacy@xigzag.com; requests can also be made at /privacy/request. EU representative: [EU REPRESENTATIVE (Art. 27) OR "not required"]. UK representative: [UK REPRESENTATIVE OR "not required"]. General contact: hello@xigzag.com.

Change log

• 2.0 (2026-10-04): Stated the legal basis (ePrivacy consent for non-essential cookies), consent records, withdrawal, and that web fonts (Google Fonts families) are self-hosted, so no browser contacts Google for them.
• 1.0 (2026-06-01): First published version.

For a material change we give at least 30 days' notice by email and in the Studio before it takes effect, except where a change is required by law or to address abuse or security.