docs(legal): update cookies in privacy policy (#7493)

* docs(legal): update cookies in privacy policy

* add note about customer instances

* Apply suggestions from code review

Co-authored-by: Florian Forster <florian@zitadel.com>

* perf: filter events by instance ids (#7489)

fix: filter events by instance ids

* docs: describe DefaultInstance vs FirstInstance (#7487)

* docs: describe DefaultInstance vs FirstInstance

* link to docs

* add better searchable tip to the docs

* add better searchable tip to the docs

* add link

* docs: remove localhost from links (#7503)

* remove visitor analytics

* Update docs/docs/legal/policies/privacy-policy.mdx

---------

Co-authored-by: Florian Forster <florian@zitadel.com>
Co-authored-by: Elio Bischof <elio@zitadel.com>
Co-authored-by: Silvan <silvan.reusser@gmail.com>

docs/docs/concepts/features/custom-domain.md

@@ -10,4 +10,4 @@ By configuring a custom domain within ZITADEL, organizations can replace the def
 
 This not only enhances the overall user experience but also reinforces the organization's brand presence. Additionally, custom domains can contribute to trust and credibility, as users are more likely to recognize and trust URLs associated with the organization rather than generic domains. Overall, ZITADEL's custom domain feature empowers organizations to tailor the authentication process to align with their brand identity and user expectations.
 
-Learn how to [configure a custom domain in ZITADEL Cloud](/docs/guides/manage/cloud/instances#add-custom-domain) or how to configure [custom domain when self-hosting](/docs/self-hosting/manage/custom-domain).
+Learn how to [configure a custom domain in ZITADEL Cloud](/docs/guides/manage/cloud/instances#add-custom-domain) or how to configure [custom domain when self-hosting](/docs/self-hosting/manage/custom-domain).

docs/docs/guides/integrate/login/login-users.mdx

@@ -210,7 +210,6 @@ The user experience depends mainly on the operating system and browser.
 ## Build a custom Login UI to authenticate users
 
 In certain cases, you want to build your own login UI to optimize your user experience.
-
 We have dedicated guides on [how to build your custom login UI](/docs/guides/integrate/login-ui) with ZITADEL.
 
 When building your own login UI, you will leverage the [Session API](#zitadels-session-api) to authenticate users and manage user sessions.

docs/docs/legal/policies/privacy-policy.mdx

@@ -4,7 +4,7 @@ custom_edit_url: null
 --- 
 import PiidTable from '../_piid-table.mdx';
 
-Last updated on November 15, 2023
+Last updated on March 07, 2024
 
 This privacy policy applies to CAOS Ltd., the websites it operates (including zitadel.ch, zitadel.cloud and zitadel.com) and the services and products it provides (including ZITADEL). This privacy policy describes how we process personal data for the provision of this websites and our products.
 
@@ -107,35 +107,40 @@ For payment transactions, the terms and conditions and the data protection notic
 
 We disclose personal information to law enforcement agencies, investigative authorities or in legal proceedings to the extent we are required to do so by law or when necessary to protect our rights or the rights of users.
 
-### Visitor analytics
-
-We also share data with third parties in aggregate form and/or in a form that does not allow the recipient to identify the data subject from that data third parties, for example for analytics.
-
 ## Cookies
 
 Our websites use cookies. These are small text files that make it possible to store specific information related to the user on the user's terminal device while the user is using the website. Cookies enable us, in particular, to offer a single sign-on procedure, to control the performance of our services, but also to make our offer more customer-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved when the user visits the site again.
 
 In particular, we use the following cookies to provide our services:
 
-### ZITADEL
+When you use our services, we may  collect information about your visit, including via cookies, beacons, invisible tags, and similar technologies (collectively “cookies”) in your browser and on emails sent to you.
+This information may include Personal Information, such as your IP address, web browser, device type, and the web pages that you visit just before or just after you use the services, as well as information about your interactions with the services, such as the date and time of your visit, and where you have clicked.
 
-\_\_useragent  
-\_\_csrf
+### Necessary cookies
 
-### Customer Portal
+Some cookies are strictly necessary to make our services available to you.
+We cannot provide you with our services without this type of cookies.
 
-\_\_state  
-\_\_pkce.code  
-\_\_callback-url  
+Necessary cookies provide basic functionality such as:
 
-Cookies are only used for technical purposes to enable the functionality and efficient use of our website and our offers, such as:
-
-- Session management
-- Single Sign On
+- Session Management
+- Single Sign-On
 - Rate Limiting
 - DDoS Mitigation
+- Remembering Preferences
 
-If you do not want us to use cookies during your visit, you can disable their use in your browser settings. In this case, certain parts of our website (e.g. language selection) may not function or may not function fully.
+### Analytical cookies
+
+We also use cookies for website analytics purposes in order to operate, maintain, and improve the services for you.
+We use Google Analytics 4 to collect and process certain analytics data on our behalf.
+Google Analytics helps us understand how you engage with the services and may also collect information about your use of other websites, apps, and online resources.
+We don't use google analytics on customer instances of ZITADEL, only on our public websites and customer portal.
+
+You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/ and opt out by managing your cookie consent through our services or an third-party tool of your choice.
+
+If you do not want us to use cookies during your visit, you can disable their use in your browser settings.
+In this case, certain parts of our website (e.g. language selection) may not function or may not function fully.
+Where required by applicable law, we obtain your consent to use cookies.
 
 ## Rights of data subjects