Cookie and Device Storage Policy

1. What this policy covers

Cookies and similar technologies store or access information on your browser or device. The Privacy Policy identifies Wuubi Labs Ltd. and explains personal-data processing. This policy also covers local storage, mobile preferences and analytics identifiers. A first-party or hashed identifier is not automatically anonymous or exempt from permission requirements.

2. Necessary technologies

wuubi_session and wuubi_session_refresh (or configured equivalents) support secure sign-in and renewal. Their expiry follows the issued session and refresh lifetime, with server-side revocation on expiry or sign-out. They are not used for behavioural advertising. Security, anti-forgery, rate-limit and verification state may be used only to protect the requested action.

wuubi_consent stores your versioned analytics and diagnostics choices for up to 180 days. The API may keep a signed preference receipt for the same purpose and period. Mobile preference storage retains your choice until changed or reset; optional identifiers are removed on refusal or withdrawal. Preference storage does not authorise additional tracking.

reCAPTCHA may operate on protected actions where configured. It processes signals needed for abuse detection under its applicable provider information. We minimise activation to relevant interactions. Device settings can block storage, but doing so may prevent authentication or other requested functions.

3. Optional analytics

With analytics permission, wuubi_vid identifies an analytics visitor for up to 90 days and wuubi_sid identifies a session with a 30-minute idle timeout. In the mobile application wuubi.analytics.visitorId serves an equivalent optional purpose and is rotated within 90 days. Page/screen and engagement events use the 90-day personal-data retention limit. Young-person accounts and accounts with unknown age do not enable behavioural analytics.

If configured, Google Analytics may create _ga and _ga_* cookies. Wuubi limits their configured lifetime to 90 days and does not enable them before the separate analytics choice. Provider delivery may involve international processing described in the Privacy Policy. Analytics refusal does not prevent reading or core account functions.

4. Optional diagnostics

With diagnostics permission, client error monitoring may load Sentry to help diagnose failures. We minimise transmitted data, remove credentials and sensitive fields and do not enable session replay by default. Diagnostics permission is separate from analytics. Necessary server security and operational logs are described in the Privacy Policy and are not a substitute channel for optional behavioural tracking.

Separately, existing server delivery records produce daily aggregate traffic estimates without placing or reading an analytics cookie or device identifier. The counter does not keep visitor-level histories or link results to accounts, and its statistical totals include requests from people who decline optional analytics. See the aggregate website traffic statistics section of the Privacy Policy for the purpose, method, limits, retention and objection rights.

5. Make or change a choice

You can accept all optional purposes, reject them all, or choose analytics and diagnostics separately. Optional purposes start off. Use Cookie Preferences in the website footer or privacy preferences in the app to withdraw as easily as you accepted. Withdrawal stops future optional processing and removes Wuubi’s optional identifiers; it does not retroactively invalidate earlier lawful processing.

An old preference does not authorise a new purpose or a changed consent version. Clearing browser/app storage or changing device can require a fresh choice. Contact iletisim@wuubi.com for questions or if a preference does not work as described.