Cookie Policy
Last updated 6 September 2026. Counsel signed 6 September 2026. Download signed pack (PDF)
This sits with the Privacy Policy. The controller is WiseTap Ltd (company number 15646517), whose registered office is at 163 Woodland Gardens, Isleworth, United Kingdom, TW7 6LX. It covers cookies and similar storage (including localStorage) on the WiseTap app hosts: app.wisetap.co.uk, tap.wisetap.co.uk, id.wisetap.co.uk, and any Next.js marketing host we operate. It is the PECR notice for those technologies.
The hardware shop at wisetap.co.uk is currently a Shopify storefront. Shopify sets its own cookies there. See Shopify’s cookie notice for that checkout. This page does not govern Shopify’s cookies.
1. What we mean
A cookie is a small file the browser stores. localStorage is similar, but the server does not see it unless a script sends it. PECR treats both as “storing information on your device”. Strictly necessary storage does not need consent. Anything used to remember you for insights does.
2. Strictly necessary
These run whether or not you accept insights. The product cannot sign you in, take a form or remember a gate without them.
| Name | What it does | Lasts |
|---|---|---|
authjs.session-token / __Secure-authjs.session-token | Keeps you signed in (Auth.js). In production it is scoped to .wisetap.co.uk so app and tap share the session. | Session / rolling |
authjs.csrf-token, authjs.callback-url, PKCE cookies | Stop cross-site form posts and finish Google / GitHub / magic-link sign-in | Short-lived |
wt_consent (cookie and localStorage) | Remembers Accept or Reject so the banner does not nag every page. The cookie is mirrored to localStorage. | 365 days |
wt_profile | Which of your pages is open in the editor (httpOnly) | 1 year |
wt_pending_chip | Remembers a chip you just tapped so sign-up can attach it (httpOnly) | 14 days |
wt_pw_…, wt_age_…, wt_block_… | Signed gate after you unlock a password- or age-gated page or block (httpOnly) | Up to 7 days |
wt_meta_oauth | Facebook login state when connecting Social monitor | Minutes |
wt_onboarded (localStorage) | Skips the PWA splash the next time you open the installed app | Until you clear storage |
3. Insights (optional)
Only if you tap Accept. No advertising cookies. No Google Analytics. No Meta pixel from us. Reject means we do not write these ids and we do not send /api/track from your browser. TAP / chip redirects still work; the owner just cannot count a unique visitor id.
| Name | What it does | Lasts |
|---|---|---|
wt_vid (localStorage) | First-party visitor id so the page owner can count unique views | Until you clear storage |
wt_s:… (localStorage) | Per-page session; a visit ends after 30 minutes idle. Stops double-counting reloads | 30 minutes idle |
wt_ai_session (sessionStorage) | Random tab token so the assistant can keep a conversation without knowing who you are | Until the tab closes |
The beacon may include country (from the Vercel edge) and a coarse device class. That is first-party analytics for the page owner, not a profile we sell.
4. Your choice
You have not chosen yet
This only covers first-party insights. Sign-in and security cookies stay on so the product works.
Clearing the site’s cookies and localStorage, or waiting until wt_consent expires (365 days), makes the banner ask again. You can also email privacy@wisetap.co.uk.
5. Browser controls
Every major browser lets you block or delete cookies. If you block all cookies you will not stay signed in. Safari’s Intelligent Tracking Prevention and Firefox ETP do not affect these first-party cookies in the normal case.
6. Changes
If we add a cookie that is not strictly necessary we will ask again. The list above is the live list.
7. Contact
privacy@wisetap.co.uk · hello@wisetap.co.uk · info@wisetap.co.uk (shop)
0330 043 8860
WiseTap Ltd (company number 15646517), whose registered office is at 163 Woodland Gardens, Isleworth, United Kingdom, TW7 6LX · Companies House