WEBWITA · Private beta · by invitation · no payment card

Cookie Policy

WebWita · Cookie Policy

Necessary storage

The dashboard uses a secure, HTTP-only session cookie and a host-bound CSRF cookie for authentication and request protection. A session lasts up to seven days unless revoked sooner. The CSRF cookie follows the application’s configured validity. Language is selected by URL; there is no compulsory language redirect.

No optional trackers in the pilot

The initial product does not activate advertising pixels or third-party behavioural analytics. If optional tracking is introduced, it must remain disabled until an appropriate choice is obtained. Aggregate server-side feature counts do not require an advertising identifier. Cloudflare security checks can use necessary security storage when enabled.

Customer websites

Dashboard cookies are host-only and are not sent to tenant subdomains. Customers must assess cookies and notices for any authorised external service they link or later embed. A link to Booksy differs from embedding a tracking widget. Blocking necessary cookies can prevent dashboard sign-in.