Jatzo stores a small amount of information on your device. Every item below is either strictly necessary to provide something you asked for, or remembers a choice you made yourself, so under the Privacy and Electronic Communications Regulations 2003 we do not need to ask for your consent to it and there is no cookie banner. We use no analytics, advertising or tracking cookies, and no third party sets anything on your device through our site.
| What | Where | Why | How long | Basis for no consent |
|---|---|---|---|---|
| Session cookie | Your browser | Keeps you signed in and protects your requests from forgery | Up to eight hours, or until you sign out | Strictly necessary |
| Remembered browser | Your browser, sent only to the sign-in and password recovery pages | Lets you sign in, or recover your account, from a browser you have used before while somebody else is making failed attempts on your address. It holds a random reference for the browser and a keyed digest of your account and password, not your address | 180 days, or until you change your password | Strictly necessary to keep your account secure |
| Colour theme | Your browser's local storage | Remembers the light or dark theme you chose | Until you clear it | Remembers a choice you made |
| Outlook add-in connection | Outlook's storage on your device, tied to the mailbox you are signed in to, and a reference in your mailbox's add-in settings | Keeps the add-in connected so you do not type the code again | Until you disconnect or revoke it, or it goes 90 days unused | Strictly necessary for the add-in you installed |
| Gmail add-on connection | Storage Google keeps for you and for the add-on | As above | Until you disconnect or revoke it, or it goes 90 days unused | Strictly necessary for the add-on you installed |
Jatzo counts how much the public site is used: one for each page drawn, and one each time a free tool is used. A count is a day, the name of the thing that happened, and a number. Nothing about the visitor goes with it, so a count cannot be traced to anybody, not even by us: no address, no session, no account and nothing about the device. It follows that these counts say how many times something happened and not how many people did it, and the operator's own screen says so. Nothing is stored on your device for them.
The Spoof Check page sets nothing beyond the session cookie, which protects its forms. It tells Jatzo when a few things happen on it, such as the report form coming into view or a link being copied, and Jatzo counts them by day with nothing about who. Those requests carry the session cookie, as every request to Jatzo does, and it is read only to check the request's protection against forgery; nothing new is stored on your device for them. Each is also limited through a keyed digest of the connection, kept on the server for two days. The counts are not the analytics this statement means below.
If we ever add anything that is not strictly necessary, such as analytics, we will ask first and give you a way to refuse. The Data (Use and Access) Act 2025 relaxed the consent rule for some analytics from 5 February 2026; we do not rely on that relaxation, because we do not use analytics.