Cookie Policy

What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help websites function properly and improve user experience. Cookies may collect information such as:

• browser type
• device information
• pages visited
• session activity

We also use your browser's local storage for some of the same purposes.

Essential Cookies

These cookies are required for the platform to function properly:

• sb-…-auth-token — keeps you signed in (one or more cookies, depending on the size of the session)
• ezpz_2s_trust — for 30 days after you pass two-step sign-in and tick “Trust this device”, a signed value that lets this browser skip the second step for your account only. Signing out keeps it; turning two-step off or changing how you get codes makes it stop working
• ezpz_2s_state — for ten minutes, a signed note of whether your account has two-step sign-in turned on, so we do not have to look it up on every page
• __Host-ezpz-handoff — for two minutes while signing in on your agency’s own web address, a one-time random value that proves the sign-in is finishing in the same browser that started it
• gcal_next — for ten minutes while you connect Google Calendar, the page to return you to afterwards
• gmail_next — for ten minutes while you connect Gmail, the page to return you to afterwards
• ezl-pw-recovery — for fifteen minutes after you open a password-reset link, shows that you arrived from that link, so the choose-a-new-password page will accept the change
• pz-pw-recovery — for fifteen minutes after you open a Portal password-reset link, shows that you arrived from that link and which account it was sent to, so the choose-a-new-password page will accept the change; removed once the password is changed
• ezpz_sb_flow — for ten minutes while you sign in with Supabase to connect a data copy, a sealed code that proves the sign-in you return from is the one you started
• ezpz_sb_link — for up to an hour after you sign in with Supabase, your sealed Supabase sign-in, so you can pick a project to connect; removed once it is connected
• ezpz_zoom_flow — for ten minutes while an agency admin connects Zoom, a sealed code that proves the sign-in you return from is the one you started
• ezpz_help_visit — for up to two hours while EZPZ staff help an agency set up, which helping visit this browser is on; removed when they finish or sign out

Without these cookies, certain parts of the platform may not function.

Preference Cookies

We set first-party cookies that remember choices you have made so the platform behaves consistently between visits:

• ezpz_analytics — whether you turned product analytics off in Settings → Privacy → Usage analytics, kept for a year on the device you set it on
• ezpz_privacy_optout — a request not to sell or share your personal information, made on Your Privacy Choices or sent by your browser's Global Privacy Control signal
• ezpz-side — which side of the platform (the CRM or the agency portal) you last used, so signing in returns you there
• ezpz_last_sign_in — whether you last signed in with Google or with email, so the sign-in page can point you back to the same option
• ezpz_surface — whether you are using the platform inside our iOS app, so the screens you see match that app
• pz:theme — your display-theme preference in the agency portal
• pending_referral_code — briefly remembers a referral link you followed so the referral is credited if you sign up
• pending_agency_invite — if you followed an agency’s invite link, remembers which agency invited you (and who shared the link) for 30 days, so that signing up puts you on their team
• pending_join_form — if you sent an agency’s join form, remembers which agency (only its id) for 30 days, so that when you next sign in we can tell you if your account can’t join it
• ezpz_agency_consent_later — if you chose “Not now” when your agency asked to see your records, remembers that choice for a week so the question doesn’t come back on every page
• ezpz_agency_texts_later — if you chose “Not now” when your agency asked to send you texts, remembers that choice for a week so the question doesn’t come back on every page
• ezpz_setup_later — agency owners and admins only: remembers that you chose “Finish later” on agency setup, so the site stays open until the end of your day
• ezleads-theme, ezleads-color-theme, ezleads-palette, ezleads-density, ezl_bp, ezl_sidenav, pz_rail, ezl_leads_view_v2, ezl_leads_county and ezl_help_tab — how the platform looks and where you left it: light or dark theme, colors, row density, your screen size so the first paint fits it, whether the side rail is open, your last Leads view, whether your Leads table shows the County column, and the Help topic you chose to open on
• ezl_user_view — staff accounts only: whether “view as user” is on
• ezl_admin_shell — staff accounts only: whether the admin pages show their menus in a header bar or in the older side rail
• ezpz_brand_demo — staff accounts only: which agency’s brand is being demoed, for up to two hours or until sign-out
• ezpz_design — agency owners, admins and developers only: whether Design mode is on, so your own pages show your agency’s draft look while you shape it; nobody else sees it. For up to twelve hours or until sign-out
• ezpz_view_as — agency owners and admins only: whether View as is on, so your portal shows what a new recruit, a licensed agent or a manager sees, and nothing you do saves. For up to two hours or until sign-out
• ezpz_sandbox — agency owners and developers only: whether the Developer home shows the agency’s test copy (the sandbox) instead of the live agency, for up to eight hours

These cookies are not used for advertising and are not shared with third parties.

On Agents' Landing Pages

If you visit a licensed agent's landing page to ask for a quote, two more cookies can be set there:

• ezl_otp_proof — after you confirm your phone number with a one-time code, shows for 15 minutes that you did, so the request you submit is accepted
• ezl_gclid — if you arrived from a Google ad, the ad-click identifier Google adds to the link, kept for up to 90 days so the request you submit is recorded as coming from that ad

Analytics and Performance

PostHog, our product-analytics provider, sets a first-party cookie (ph_…_posthog) that holds a random identifier for your browser, so that visits from the same browser can be counted together. Sections 2.12 and 7 of our Privacy Policy describe what is measured and how to turn it off: the Usage analytics switch in Settings, or a Do Not Track signal from your browser.

Vercel Web Analytics and Speed Insights, which count page views and measure how fast pages load, set no cookies.

Third-Party Cookies

We run no advertising pixels or ad-network tags. Cookies from another company can still reach your browser in two ways, each under that company's own privacy policy:

• Embedded content. Some signed-in pages embed a video (YouTube, Vimeo, or Loom), a form (Typeform), or Plaid's bank-connection window in Manage Money. The company serving the embed can set its own cookies inside it.
• Sites we send you to. Stripe's checkout and billing pages and the Google, Apple and Meta sign-in and connection screens are their own sites and set their own cookies there.

Managing Cookies

Most browsers allow you to control or disable cookies through your browser settings.

However, disabling cookies may affect the functionality of certain parts of the EZ Leads platform. To turn off product analytics without blocking cookies, use Settings → Privacy → Usage analytics; to opt out of the sale or sharing of personal information, use Your Privacy Choices.

Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology or regulations.

Contact

If you have questions about this Cookie Policy, contact:

support@myezleads.com