We identify visitors with no cookies, and the midnight UTC flaw

This "company" (Zenovay) is a complete fraud, they've made everything up.

The About page claims that the launched platform in 2023[0] but the domain zenovay.com didn't even exist until 2025-07-28[1].

None of the blog authors (all the profile pictures are AI-generated (flagged by SynthID)) exist and the blog posts are AI-generated. Not even "Engineering Lead Martin Hale".

None of the pages list a real company. Not even the Impressum[2], it just lists the company's address as "Zenovay, Switzerland" with no more info. Same fake placeholder on Terms, Privacy, Cookies, and DPA.

And this post also claims cookieless tracking is the default, with no cookies or similar but the actual script does the opposite. It uses everything it says it doesn't, lol.

It's off by default and sets a 30-day tracking cookie, writes to localStorage, IndexedDB and sends a client-generated UUID as the visitor ID, directly contradicting the claim that "the tracker itself sends no identifier because it does not have one."... It also stores "returning visitor" history.[3]

It even has cross-domain tracking, session replays, heatmaps, error tracking and adblock evasion with "randomize tracking endpoint"

The actual creator is Jasin Banovi (who knows if that's even his real name)[4]. He claims to have launched it with a friend, Rainer Rankwiler[5], but that person is also fake, you can tell from the GAN-generated profile picture.

[0]: https://zenovay.com/en/about/

[1]: https://zenovay.com.whoswho/

[2]: https://zenovay.com/en/legal/impressum/

[3]: https://api.zenovay.com/z.js

[4]: https://www.producthunt.com/@jasko_ctrl

[5]: https://www.producthunt.com/@ranky

> The moment you write an identifier to someone’s device, you own a pile of questions about consent, retention, and deletion, and your users own a banner. We wanted the default to be the mode where those questions do not exist, because there is nothing to delete.

It's fascinating to see a company be so upfront and honest about their desire to track you without the possibility that you'd notice. If you never notice, you can't object, right? If you never notice, actually getting informed consent can be skipped, I suppose.