Jatzo stores a small amount of information on your device. Every item below is either strictly necessary to provide something you asked for, or remembers a choice you made yourself, so under the Privacy and Electronic Communications Regulations 2003 we do not need to ask for your consent to it and there is no cookie banner. We use no analytics, advertising or tracking cookies, and no third party sets anything on your device through our site.
| What | Where | Why | How long | Basis for no consent |
|---|---|---|---|---|
| Session cookie | Your browser | Keeps you signed in and protects your requests from forgery | Up to eight hours, or until you sign out | Strictly necessary |
| Colour theme | Your browser's local storage | Remembers the light or dark theme you chose | Until you clear it | Remembers a choice you made |
| Outlook add-in connection | Outlook's storage on your device, tied to the mailbox you are signed in to, and a reference in your mailbox's add-in settings | Keeps the add-in connected so you do not type the code again | Until you disconnect or revoke it, or it goes 90 days unused | Strictly necessary for the add-in you installed |
| Gmail add-on connection | Storage Google keeps for you and for the add-on | As above | Until you disconnect or revoke it, or it goes 90 days unused | Strictly necessary for the add-on you installed |
The Spoof Check page sets nothing beyond the session cookie, which protects its forms. It tells Jatzo when a few things happen on it, such as the report form coming into view or a link being copied, and Jatzo counts them by day with nothing about who. Those requests carry the session cookie, as every request to Jatzo does, and it is read only to check the request's protection against forgery; nothing new is stored on your device for them. Each is also limited through a keyed digest of the connection, kept on the server for two days. The counts are not the analytics this statement means below.
If we ever add anything that is not strictly necessary, such as analytics, we will ask first and give you a way to refuse. The Data (Use and Access) Act 2025 relaxed the consent rule for some analytics from 5 February 2026; we do not rely on that relaxation, because we do not use analytics.