Since the UK has recently passed legislation that websites post information about the use of cookies, I was a bit in a quandary at first.  I’m thinking, well, Zen Cart uses sessions, not cookies to store information – thus displaying my lack of that bit of technical knowledge. Then I found this statement from Dr. Byte about cookies and sessions:

“Zen Cart requires that the visitor’s computer accept a session cookie. This session cookie contains simply the session ID number which identifies the visitor to the store, as separate from other visitors. The session cookie contains no personal identity information, and in itself is thus anonymous as a 3rd-party cannot use anything in the cookie to identify the visitor in any way.

In a traditional configuration, and by definition, this session cookie expires at the end of the visitor’s session in the browser, or at a predefined time (typically 24 minutes) after their last “click”, whichever is sooner.”

So this is the statement you can post on your website; however, there are caveats – if you have changed Zen Cart. Read more about Zen Cart sessions and cookies here.