Just two cookies.

The two cookies we set

Both come from Supabase, the sign-in service we use, and both are first-party: they belong to wisdomweave.app and are sent nowhere else.

• sb-wpbwvrrtotzrktbthyyu-auth-token — keeps you signed in. Set the moment you sign in and removed when you sign out. If it grows too big for one cookie your browser holds it in numbered parts (…auth-token.0, .1). It is written with the longest expiry a browser allows (400 days) and refreshed as you use the site, so on your own device you stay signed in until you sign out. We need it.
• sb-wpbwvrrtotzrktbthyyu-auth-token-code-verifier — a one-time code set when you ask for a sign-in link, create an account or reset your password, so the link in your email can only finish signing you in from the browser that asked for it. It has no other use, and it is cleared when you sign out.

You may also see one cookie that is not ours: _vcrcs, set by Vercel, the company that hosts the site, for about an hour if its bot protection needs to check that a visit comes from a real browser. We don’t set it and we don’t read it.

What we don’t have

No Google Analytics. No Meta pixel. No Facebook Connect. No Hotjar, Mixpanel, Segment, Amplitude, FullStory or session recording of any kind. No remarketing pixels. We sell a book; we don’t need to follow you around the internet.

Visitor counting, without a cookie

We count visits to the public pages — the home page, the prompts archive, the blog, the books and gift pages, and pages like this one — with Vercel Web Analytics. It is cookieless: it sets nothing in your browser, so the list above is unchanged. What it records, in aggregate, is the page visited, where you came from, your country and the kind of device — never a name or an email. It does not record any signed-in page. Nothing about your recordings, your stories or your family is ever sent to it.

For visitors who are not signed in, we also count selected public-page button clicks, the first edit to a form, accepted form submissions and PDF link clicks. Only fixed page, placement and action labels are sent; no form answers, names, email addresses or gift notes. Starting checkout does not mean a payment was completed, and clicking a PDF does not prove it downloaded. We never record sessions or track signed-in members.

Local storage we do use

A few things live in your browser’s own storage rather than in cookies. Unlike cookies they are never sent to us with a request; they exist only so the app works well on your device.

• wisdomweave_profile_cache — a copy of your profile so the app opens straight away, even offline. Cleared when you sign out.
• ww_wellbeing_nudge_dismissed — remembers that you dismissed the wellbeing prompt for this visit. Session storage, gone when you close the tab. (An earlier version of this page called it a cookie. It never was.)
• ww-installDismissed, ww-installSnoozeUntil, ww-installClaimed and ww-installHintDismissed — whether you have dismissed, snoozed or already used the “add to your home screen” prompt, or closed its follow-up hint, so we don’t keep asking.
• ww-reminderOffered — whether we have already offered you weekly reminders, so we ask once.
• ww_gift_claim — holds a gift code while you sign in to claim it, then is removed.
• ww_after_sign_in — when you ask for an emailed sign-in link on the way to somewhere (opening a gift, say), the page to take you back to. Used once, and ignored after an hour.
• ww_tell_us_more_dismissed — remembers that you chose “Not now” on the “Tell us more” card for this visit. Session storage, gone when you close the tab.

If you’re recording offline, your audio and a sync queue live in your phone’s local storage (a small database called wisdomweave-offline) until we can sync them up. That data leaves the moment sync completes, and it is wiped when you sign out.

Your choice

Both cookies exist only to sign you in, so there is nothing to opt out of: block them and the public pages still work, you just can’t stay signed in. There is no “accept all” shortcut because we wouldn’t have made one for our own grandparents.