Zaybair Cookie Policy

Effective date: 15 October 2026
Operator: Yusuf Gangat, trading as Zaybair

This Cookie Policy explains how the Zaybair US website uses cookies, browser storage and similar technologies. It should be read together with the Privacy Policy.

Zaybair is operated by Yusuf Gangat, trading as Zaybair, at 15 The Braids Road, Emmarentia, Johannesburg, South Africa. Questions can be sent to [email protected].

1. What these technologies are

Cookies are small pieces of data that websites or service providers can store through your browser. Websites can also use local storage, session storage and network-based measurement technologies that do not necessarily create a cookie.

Zaybair uses a deliberately small set of technologies for website security, privacy preferences, analytics and conversion measurement.

2. Necessary technologies

Necessary technologies support security, form delivery, privacy preferences and basic site operation. These do not depend on optional analytics or advertising consent where they are required to provide the requested website function.

The site uses Cloudflare Turnstile to protect forms against automated abuse. Cloudflare may use cookies, browser storage or other technical signals as part of this security service.

The site also stores your privacy preference in first-party local storage under zaybair_privacy. It contains the consent version, analytics choice, advertising choice and timestamp. Zaybair treats the saved choice as valid for up to 180 days unless it is changed, cleared or invalidated by a new consent version.

Some successful form journeys may use a first-party session-storage receipt for confirmation-page continuity. It contains a random submission ID, confirmation route and timestamp, no form-field values or email address, and is treated as valid for approximately 10 minutes.

3. Google Tag Manager

Google Tag Manager is used to manage Google measurement tags. Loading the tag manager does not by itself mean that optional storage is granted. Zaybair uses Google Consent Mode to communicate the current privacy choice to Google tags.

The default optional consent state is denied. The site’s privacy controller applies your effective Analytics and Advertising choices and updates Google Consent Mode when those choices change.

4. Analytics

If you allow Analytics, Zaybair uses Google Analytics 4 to understand website usage and successful business events.

Analytics events are limited to approved measurement information such as event name, page path/title and ordinary technical information associated with the browser request. Zaybair’s launch tracking implementation does not send form-field values, names, email addresses or free-text messages to GA4.

If analytics storage is denied, Google may still receive limited consent-aware measurement requests depending on Google’s Consent Mode behaviour, but analytics storage remains denied.

5. Advertising measurement

If you allow Advertising, Google Ads conversion tracking can use the granted advertising consent state and associated browser storage in accordance with Google’s systems.

If Advertising is denied, Zaybair still allows Google Consent Mode to send restricted/cookieless conversion measurement requests. In staging, a denied-consent form conversion was verified as a POST request to Google’s pagead2.googlesyndication.com conversion endpoint with no visible _gcl_* advertising cookie created during that denied-consent test.

At launch:

• ad_storage, ad_user_data and ad_personalization default to denied;
• analytics_storage defaults to denied;
• personalization_storage remains denied;
• functionality_storage and security_storage are granted for necessary functionality/security;
• advertising-data redaction is enabled;
• URL passthrough is disabled; and
• enhanced conversions are not enabled.

6. Privacy Choices and withdrawal

You can use the website’s Privacy Choices control to select Analytics and Advertising independently.

Your saved choice persists in first-party local storage for up to 180 days. You can reopen Privacy Choices and change or withdraw a choice. The site then updates the Google consent state. Where the site’s own optional Google-related first-party cookies can be cleared by JavaScript, they are removed on withdrawal. Some third-party or HttpOnly storage may not be directly removable by the site and remains subject to browser/provider controls.

Clearing browser storage will also clear the saved preference, after which the site returns to its default optional-denied state.

7. Global Privacy Control

The site recognises Global Privacy Control (GPC) for advertising. When your browser sends GPC, Advertising is forced off and cannot be enabled while that signal remains active. Analytics remains an independent choice.

8. Current launch inventory

The live inventory should be verified again after the production domain is connected. The launch architecture currently includes the following categories:

Meta Pixel is not enabled in the current launch configuration. If it is enabled later, this policy should be updated before or at activation and Meta should remain gated by the applicable Advertising choice and GPC behaviour.

Provider-generated cookie names and durations can vary according to browser, consent state and provider configuration. Zaybair therefore avoids publishing a generic cookie-name list that might not match the actual live configuration. The production site should be periodically re-audited and this inventory updated when materially necessary.

9. Third-party providers

Relevant providers at launch include Cloudflare and Google. Postmark is used for transactional form email delivery but is not used as a browser advertising/analytics cookie provider.

Third-party technologies are also subject to their providers’ privacy and cookie practices. Zaybair does not control every third-party browser or server-side retention behaviour.

10. Changes

Zaybair may update this Cookie Policy when providers, tags, consent behaviour or website functionality change. The current effective date will appear at the top of this page.

11. Contact

Yusuf Gangat, trading as Zaybair
15 The Braids Road
Emmarentia, Johannesburg
South Africa
Email: [email protected]