What is a cookie?
A cookie is a small text file that is stored on your computer or other internet connected device in order to identify your browser, provide analytics, remember information about you such as your language preference or login information. They're completely safe and can't be used to run programs or deliver viruses to your device.You can learn more about cookies by clicking here (external link).
What type of cookies does Zoho use?
Cookies can either be session cookies or persistent cookies. A session cookie expires automatically when you close your browser. A persistent cookie will remain until it expires or you delete your cookies. Expiration dates are set in the cookies themselves; some may expire after a few minutes while others may expire after multiple years. Cookies placed by the website you’re visiting are called “first party cookies".
Below is a detailed list of the cookies we use on our website. Our website is scanned with our cookie scanning tool regularly to maintain a list as accurate as possible. We classify cookies in the following categories:
Strictly Necessary Cookies
Strictly Necessary cookies are necessary for our website to function and cannot be switched off in our systems. They are essential in order to enable you to navigate around the website and use its features. If you remove or disable these cookies, we cannot guarantee that you will be able to use our websites.
| Cookie Name | Purpose | Validity |
|---|---|---|
| zalb_ followed by a 10-character sequence of numbers or alphanumeric characters. | Load balancing and session stickiness | Session |
| csr* / *csr* / *csr, zmpncc, zfccn | Website security | Session |
| dcl_pfx_lcnt | Navigation through cross-domains | Session |
| JSESSIONID | HTTP session token identifier | Session |
| stk, rtk | Login, Signup - Success & failure analysis | Session |
| _imtrem | Manage the 'Remember me' option | Session |
| _z_identity | Manage the user's login session | Session |
| IAMTFA* | Two Factor Authentication validation | Session |
| _zsudc | Manage custom domain login sessions | Session |
| zidp | Maintain OpenID sign in options | Session |
| zoho_fbuid | Maintain Facebook login option | Session |
| GAUTH_TICKET | Provide the authentication token in mobile apps for mobile sign in ability | Session |
| tfa_ac | Two Factor Authentication management | Session |
| clientauthtoken | Support sign in for client portal | Session |
| _iamadt, _iambdt | Manage logged in user session | 1 month |
| zip | Store IP locale country value for proper website operations | 1 day |
| AKA_A2 | Performance optimisation in loading of pages | 1 hour |
| dcl_bd | Stores the base domain of the current data center (DC) to ensure proper cross-data center domain navigation. | Session |
| is_pfx | Stores the current web URL domain prefix information | Session |
| IAMTFATICKET_<zuid> | Stores the trusted browser session, when "Trust this Browser" option is enabled during TFA verification by the user. | 180day(s) |
| ^(?=.*\d)[a-z0-9]{37}_user_uuid$ | Account and Session Management | 6 hours |
| ^IAMSATCK_[0-9]+$ | It is utilized to prevent brute force sign-in attacks originating from a browser. | 90 days |
| aprmjrnpkcrkks | Security of website/application | Session |
| BuildCookie_AssetType | Build management | 6 months |
| IAM_TEST_COOKIE | Security of website/application | 1 day |
| PHPSESSID | PHP session cookie associated with embedded content from this domain. | 2 days |
| wms-tkp-token | This is set by IAM filter to facilitate WMS authentication | 1 month |
| wms.agent | This cookie informs the client whether the 'wms-tkp-token' is present. If not, an alternative authentication flow is used. | 1 month |
| ZCNEWLIVEUI | To decide whether to load new Live UI for Application users | Session |
| ZCNEWUIPUBLICPORTAL | To know whether to load new UI or orld UI for public, portal and custom domain pages | Session |
| zmirc | To redirect the user to a app group based on free / paid | 1 day |
| zpcc | CSRF Cookie, this cookie will set when customer access external(published) link | Session |
| zpct | Security of website/application | Session |
| zuserlang | Stores the preferred language for web page | 1 day |
| IsMarketingSkip | Skip syncing sign up data to internal relationship management tools | Session |
| acc_ver | Redirect to the new user interface of Zoho accounts page | 1 year |
| isiframeenabled | Manage the loading of some static containers for better UI client performance | 1 day |
| uesign | Validate client ID while loading previous visit chats | 1 month |
| PaymentsReferral | To identify the referral partner of the visitor. | 90 days |
Functional/Preference Cookies
Function/Preference cookies allow us to remember the choices made by you (such as your user name, language or region) as well as other functionalities (such as controlling the cookie banner, redirection to a new page) in order to provide a more personalised online experience. These preferences are remembered (through the use of persistent cookies) so that you need not set them again the next time you visit the page.
Note : The live chat widget will not work if the functionality/preference setting is disabled.
| Cookie Name | Purpose | Validity |
|---|---|---|
| has_js | Check if JavaScript is enabled in the visitor's browser | Session |
| zc_consent, zc_show | Manage user consent for tracking and cookie banner display settings | 1 year |
| *polls | Maintain state and choices made by visitors in the polls conducted | 1 year |
| ZFEdition | Maintain choice of edition across the Zoho Finance products suite | 150 days |
| ZFUserCountry, ZFUserCountryCode | Store country name & country code to pre-fill in forms within Zoho Finance products suite | 150 days |
| zld*dragpos, zld*state | SalesIQ chat window options(position and state) | 5 minutes |
| isexitmodaldisabled | Store user preferences(eg. cookie banner, timezone, country, IP, locale etc) | 90 days |
| pll_language | Polylang uses the cookie pll _language to remember the language selected by the user when he comes back to visit again the website. This cookie is also used to get the language information when not available in another way. | 1 year |
| ^zld[0-9]+state$ | Used to store the minimisation and maximisation state of the embed | 5 minutes |
| zflow_userDC | Store user preferences such as cookie banner preferences, timezone, country, IP address, locale, etc. | 7 days |
Analytics Cookies
Analytics cookies help us improve the way our websites work (e.g. by ensuring that users are finding what they are looking for easily). These track information about visits to the websites so that we can make improvement and report our performance. For example: analyze visitor and user behavior so as to provide more relevant content or suggest certain activities. These cookies also collect information about how visitors use the websites, which site the user came from, the number of each user’s visits and how long the user stays on the websites. We might also use analytics cookies to test new pages or features to see how users react to them.
| Cookie Name | Purpose | Validity |
|---|---|---|
| RT | Measures page load time, or other timers associated with the page | 7 days |
| za_anonymous_id | Understand visitors behaviour across our website | 1 year |
| zc_cu, zc_cu_exp, zc_tp | Understand visitors behaviour across our website | 1 year |
| Z*PageURL, Z*Ref, ZohoMarkRef, ZohoMarkSrc | Understand visitors behaviour across our website | 1 month, 1 month, Session, Session |
| zsstssn, zsltssn | Understand visitors behaviour across our website | 30 minutes, 90days |
| *_zldp, *_siqid,*_uuid | Understand visitors behaviour across our website | 2 years |
| *_zldt | Count number of visits to a page | 1 day |
| zabUserId, zabHMBucket, zabBucket, zabVisitId, zabSplit, ztpctest, zab_* | Manage, analyse and understand visitor behaviour across our website | 1 year, 1 year, 1 year, Session, 1 year, Transient, 1 hour |
| cookie-uid | Understand visitors behaviour across our website | Session |
| creator_cd | Analyse effectiveness of adwords campaigns | 3 months |
| zpzohopage, zpzohoref | Track source and referral webpage information to understand user navigation | Session |
| gclid | Analyse effectiveness of adwords campaigns | 3 months |
| gtm_zoho_source | Store referral source information | 3 months |
| *zsrv0.*, zsr*, ps_payloadSeqId | Understand visitors behaviour on a webpage | 2 hours |
| ^[a-z0-9]{32}$ | Used for deriving the path taken by the visitor and the number of visitors that dropped off while traversing through the funnel. | 1 month |
| ^webformstarter_[a-z0-9]+$ | Webpage analytics | Session |
| ^webformvisitor_[a-z0-9]{64}$ | Analytical/Performance | Session |
| ^zsc[0-9a-z]{32}$ | This cookie is set when a new session is started in full tracking. This cookie is used to identify the current session for full tracking. | 1 day |
| landingPageUrl | Store user preferences(eg. cookie banner, timezone, country, IP, locale etc) | 3 months |
| postMasterUUID | Webpage analytics | 1 year |
| zft-sdc | This cookie stores metadata ( entrances, source etc) of a session which is used by full tracking. | 1 day |
| zia_{exp key - alphanumeric} | This cookie is set when user provides Identity information by using identifier API | 1 year |
| zps-tgr-dts | This cookie contains session level metadata related to pagesense triggers. | 1 year |
*Information* : A local storage object named "zglobal_Acookie_optOut" is used to remember your cookie preference. The use of this storage object is categorised as Strictly necessary.
What is a third party cookie?
A third-party cookie is one which is not set by the website that you are visiting (eg. cookies set by youtube.com on zoho.com). Some of Zoho's own technologies and applications may be hosted in a domain that is a third-party to the domain that you may be visiting. However, our commitment extends to these domains (cdn.pagesense.io, js.zohocdn.com, *.zohopublic.com, zoho.in, zoho.com.au, zoho.com) equally.
However, Zoho does not allow third-party tracking companies to set cookies or other trackers on our website as part of our commitment to protect the privacy of our users with the utmost care. When we embed content that is hosted on a third-party's platform on our website, the third-party may set cookies on your browser which are usually for the purposes of providing the service as intended (such as for bandwidth management, to store your preference of language, tracking consent and for collecting anonymous statistics such as the number of times a video has been streamed). Wherever possible, we choose the most privacy friendly options such as Privacy Mode, Anonymous Statistics Only, to ensure we guarantee you privacy. However, some of the properties of such embeds may not be fully under our control such as our ability to control cookies that are set by these third-parties unilaterally when the webpage embedded with such content loads.
Here is the list of the cookies set by such third-party company embeds on our website.
| Cookie Name | Purpose | Validity | Third Party Name |
|---|---|---|---|
| PREF | Stores your preferences and other information, such as preferred language, the number of search results you wish to see, and whether Google's SafeSearch filter is enabled. | 8 months | YouTube |
| YSC | Registers a unique ID to keep statistics of what videos from YouTube the visitor has seen. | Session | YouTube |
| VISITOR_INFO1_LIVE | Measures your bandwidth to determine if you receive the new or old player interface. | 8 months | YouTube |
| use_hitbox | Increments the views counter on the YouTube video | 8 months | YouTubes |
| sc_anonymous_id | To implement, measure and improve their embedded content/service on the website - The collection of data also includes visitors’ interaction with embedded content/service. | 3650 days | SoundCloud |
| __cf_bm | This cookie is used to distinguish between humans and bots. | 1 day | Vimeo |
| vuid | Collects statistics on a user's visits to the website, such as which pages have been read. | 2 years | Vimeo |
| player | Saves the user's preferences when playing embedded videos from Vimeo. | 1 year | Vimeo |
| _abexps | Remembers your settings, such as language, region, or username. | 1 year | Vimeo |
How you can manage cookies?
Cookie preference manager
You can manage your cookie preference anytime by clicking on `Manage Cookie Preference` at the top of this page or via the Cookie icon that appears at the left bottom most corner of the webpages (if you visit from the EU, UK, Brazil, Japan or California regions).
Browser settings
Most browsers allow you to control cookies through their 'settings' preferences. However, if you limit the ability of websites to set cookies, you may worsen your overall user experience, since it will no longer be personalized to you. It may also stop you from saving customized settings like login information.
Browser manufacturers provide help pages relating to cookie management in their products. Please see below for more information.
- Ulaa
- Google Chrome
- Internet Explorer
- Mozilla Firefox
- Safari (Desktop)
- Safari (Mobile)
- Android Browser
- Opera
- Opera Mobile
Product-Specific Cookie Information
For information regarding cookies set by our products, please check the specific cookie pages for each product:
Disclaimer
We may update this Cookie Statement from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal or regulatory reasons. Please therefore re-visit this Cookie Statement regularly to stay informed about our use of cookies and related technologies. For more information relating to cookies, you may contact privacy@zohocorp.com.