Workzoom cookie policy.

How Workzoom handles cookies

Workzoom uses cookies and similar storage technologies to operate the marketing website at workzoom.com, measure how visitors use it, and attribute marketing leads to their source. Cookies inside the Workzoom application (the product your administrator logs into) are governed separately by the in-app session policy.

Cookies fall into three categories: strictly necessary, analytics, and marketing. Strictly necessary cookies always run because the site cannot function without them. Analytics and marketing cookies only run after you click Accept all on the consent banner. You can change your mind at any time by clicking Cookie preferences in the footer.

Strictly necessary cookies

These run as soon as you load the site. They keep the site secure, remember session-level state, and make form submissions work. Without them the site does not function. They cannot be disabled through our consent banner.

Cookie	Set by	Purpose	Lifetime	Category
wz_consent_v1	Workzoom (localStorage)	Stores your consent banner choice so we do not ask on every page.	Persistent	Necessary
wz_first_touch	Workzoom (localStorage)	Records the URL and UTM parameters of your first landing page so we can credit the right marketing channel if you become a customer.	Persistent	Necessary
wz_last_touch	Workzoom (sessionStorage)	Records the most recent landing page in the current browser session for attribution on form submission.	Session	Necessary
Vercel infrastructure cookies	Vercel	Load balancing, request routing, and security across Vercel's edge network.	Session	Necessary

Analytics cookies

These only run after you click Accept all. They tell us how many people visit, which pages they read, and where in our funnel they drop off. They do not identify you personally.

Cookie	Set by	Purpose	Lifetime	Category
_ga, _ga_*	Google Analytics 4 (via GTM)	Distinguishes unique visitors. IP is truncated by GA4 before storage.	2 years	Analytics
_clck, _clsk	Microsoft Clarity	Anonymous session ID for heatmaps and session recordings. Form fields and text content are masked by default.	_clck 1 year; _clsk 1 day	Analytics

Until you accept analytics cookies, Google Analytics runs in Consent Mode v2 cookieless ping mode: aggregate page-view signal is recorded without dropping client-side cookies. Microsoft Clarity is not loaded at all.

Marketing cookies

These only run after you click Accept all. They connect your visits to a HubSpot contact record so we can attribute downloads, booking requests, and form submissions to the same person across sessions.

Cookie	Set by	Purpose	Lifetime	Category
hubspotutk	HubSpot	Identifies the same browser across sessions for visitor-to-contact attribution.	6 months	Marketing
__hstc	HubSpot	Tracks individual visits (timestamps and source) for funnel analysis.	6 months	Marketing
__hssrc	HubSpot	Notes whether the visitor restarted their browser.	Session	Marketing

Global Privacy Control (GPC)

Workzoom honors the Global Privacy Control signal. If your browser sends Sec-GPC: 1, we treat it as a denial of analytics and marketing cookies until you explicitly accept them through the banner.

Browser controls

You can also block or delete cookies at the browser level. Each browser provides its own controls; see your browser's privacy settings for instructions. Blocking strictly necessary cookies may break parts of the site, including form submissions and the consent banner itself.

Changes to this policy

We will update this page when we add or remove cookies, change retention periods, or change the vendors that set them. The "Last updated" date at the top of the page reflects the most recent change.

Questions

Contact Workzoom's Privacy Officer Matthew Woolley at info@workzoom.com for questions about how Workzoom uses cookies, or to request deletion of any record we hold against your browser identifier. Quebec residents may also contact the Commission d'accès à l'information du Québec.

For the full list of vendors processing visitor data, see our sub-processor list. For Workzoom's broader privacy practices, see the Privacy policy.