Cookie policy

Last updated: 09.10.2026

This Cookie Policy explains how Dzeya OÜ (Design Systems Surf) uses cookies and similar technologies on designsystems.surf and its subdomains. For how we handle personal data in general, see our Privacy Policy.

What are cookies and similar technologies

Cookies are small files stored in your browser. Similar technologies include local storage, pixels and scripts that send information about your visit to us or to a third party. In this policy we call all of them "cookies".

Your choice

When you first visit from the EU, EEA, UK or Switzerland, a banner asks for your consent. Only strictly necessary cookies are used until you click "Accept". If you click "Reject", no analytics, marketing or functional cookies are used.

In other regions, analytics, marketing and functional cookies may be on by default.

You can change your choice at any time with the Cookie Settings link at the bottom of every page, and you can delete or block cookies in your browser settings.

Strictly necessary

Needed for the site to work and to remember your cookie choice. These do not need consent.

  • Framer (website hosting): stores your cookie choice in local storage (framerCookiesConsentMode, framerCookiesDismissed) until you clear it.

  • Cloudflare (security for my.designsystems.surf and survey.designsystems.surf): __cf_bm, 30 minutes, to filter bots.

  • Account login (my.designsystems.surf): stores your login session in local storage while you are signed in.

  • Stripe and Link (checkout): cookies set on Stripe's and Link's own pages to process payments securely and prevent fraud. See their cookie policies.

Analytics

Help us understand how the site is used, so we can improve it. Used only with your consent.

  • Google Analytics 4 (Google): visits, pages, clicks, form submissions and purchases. Cookies _ga, _ga_WWQ8H4EW28, up to 13 months.

  • Microsoft Clarity (Microsoft): session recordings and heatmaps of how you use pages. Cookies _clck (1 year), _clsk (1 day) and Microsoft cookies such as MUID (up to 13 months).

  • Ahrefs Web Analytics (Ahrefs): page visit statistics without cookies.

  • Kit Insights (Kit, via SegMetrics): connects website visits with our email list. Cookies _seg_uid, _seg_visitor (1 year).

  • Page analytics on my.designsystems.surf and survey.designsystems.surf (Lovable): page visit statistics; a session-id cookie for 30 minutes.

Inside your account (my.designsystems.surf) we also use PostHog for product analytics. It runs on our server and does not set cookies in your browser.

Our website host, Framer, also counts page visits for all visitors with its built-in analytics. It does not use cookies or identify you; if you arrive from another website, it remembers that referring site in local storage.

Marketing

Help us measure our ads and show them to people who visited our site. Used only with your consent.

  • Google Ads (Google): conversion tracking and remarketing. Cookie _gcl_au (90 days) and Google advertising cookies such as test_cookie on doubleclick.net.

  • Meta Pixel (Meta: Facebook, Instagram): page views, sign-ups and checkout starts. Cookies _fbp, _fbc (90 days).

  • TikTok Pixel (TikTok): page views and sign-ups. Cookies _ttp, _tt_enable_cookie, ttcsid (up to 13 months).

  • LinkedIn Insight Tag (LinkedIn): retargeting and sign-up conversions. LinkedIn cookies such as bcookie (1 year), li_gc (6 months), lidc (1 day).

Functional

Remember information to make the site easier to use. Used only with your consent.

  • Checkout pre-fill and attribution (our own script): stores in local storage the campaign that brought you (dss_utm_*), your email list ID (dss_kit_sub_id) and, if you came from one of our emails, your email address (dss_known_email, 30 days), so we can pre-fill your email at checkout and know which campaign led to a purchase. This information is passed to Stripe with your order.

  • Form campaign tags (Framer): framerFormsUTMTags, for the browser session, only if you arrive from a campaign link.

Server-side measurement

When you sign up or buy, our servers send the event (for example product and value, and for Meta hashed contact details such as email and name) to Google Analytics, Google Ads and Meta so we can measure our ads. No cookies are set by this, and personal identifiers are hashed before sending. See the Privacy Policy for the legal basis.

Changes

We update this policy when our tools change. The "Last updated" date shows the latest version.

Contact: hey@designsystems.surf