Skip to content
Back to the legal hub

Cookie policy

Compliant with the ePrivacy Directive 2002/58/EC and the UK Privacy and Electronic Communications Regulations (PECR).

Version 1.1 · Updated on October 14, 2026

1. What cookies are

A cookie is a small text file that is downloaded to your device when you visit a website. It lets the site remember information about your visit — preferred language, session tokens, display options — to improve your experience and enable certain functionality.

Under UK and EU regulation, only strictly necessary cookies for providing the service you have expressly requested may be installed without your prior consent. For all others (analytics, marketing, etc.) your explicit opt-in is required.

2. Cookies and storage we use

2.1. Strictly necessary (always active)

These do not require consent because the platform does not work without them:

  • Session tokens — stored in localStorage under the keys wallapets-access-token and wallapets-refresh-token. They are issued by our own backend and are not shared with third parties.
  • Theme preference — the wallapets-theme key with the value light, dark or system.
  • Non-critical UI state — collapsed sections, dismissed banners, post-OAuth redirect, walks in progress. All under the wallapets- prefix.
  • Cloudflare — the __cf_bm and cf_clearance cookies are technical, anti-bot and apply to the entire Cloudflare network; we cannot disable them.
  • Cloudflare Web Analytics: counts visits and measures page speed without installing cookies or storing anything on your device, and without following you across websites. It doesn't use your IP to identify you. That's why it doesn't need your consent, but we're telling you anyway.

2.2. Functional — only if you enable them

  • Push notifications — Firebase Cloud Messaging stores a device token in the browser to send you alerts. It is only created if you grant the browser permission.
  • Geolocation — the browser's geolocation API is used when you start a walk or enter neighbourhood rescue. You control when you grant the permission, browser by browser.

2.3. Analytics — only with consent

  • Right now we don't use any. We don't load Google Analytics, Google Tag Manager or Microsoft Clarity.
  • If we ever add a statistics tool with cookies, we'll list it here with its name, what it's for and how long it lasts, and it will only be turned on if you give your permission in the cookie notice.

2.4. Marketing and advertising

Mizuu does not use marketing cookies or third-party advertising cookies as of the date this document was updated. We have no Facebook Pixel, no TikTok Pixel, no Google Ads remarketing, or anything similar.

The first time you access Mizuu, a consent banner appears that lets you:

  • Accept all: today this is the same as only what's necessary, because we don't use optional cookies; if we add any, we'll ask you again.
  • Reject all — only strictly necessary cookies are used.
  • Configure: you choose by category.

Your choice is saved for 12 months. After that we'll ask you again. You can change it whenever you want, whether you have an account or not, with the button below or with the “Cookie preferences” link in the footer of the website. If you have an account, also in Settings → Privacy and cookies.

When you press it, we delete your choice and the cookie notice shows up again.

Regardless of the banner, you can block or delete cookies from your browser settings. These are the official links:

If you block strictly necessary cookies, some features may stop working (notably, you will be logged out and unable to log in again).

5. Changes to this policy

If we introduce new cookies or the purposes change, we will ask for your explicit consent again before installing them. The date and version are always visible in the document header.


If you find any discrepancy between this text and the applicable legislation, the latter prevails. The Mizuu legal team reviews the documents at least once a year and whenever there is a relevant regulatory change. For questions, write to legal@mizuu.pet.