Cookie Policy

Last updated: 2026-07-12

Essential cookies

WhatIO sets HttpOnly authentication cookies (`wa_access_token`, `wa_refresh_token`, `wa_session_id`) and a non-HttpOnly CSRF cookie (`wa_csrf`) required for secure same-site API requests. These are necessary for the product to function and are not used for advertising.

Preference cookies

We may store UI preferences such as sidebar state or theme locally (cookie or local/session storage) so the interface remembers your choices.

Analytics & monitoring

When enabled, error monitoring (for example Sentry) may set first-party or proxied cookies/tokens to diagnose reliability issues. These are used only for product quality, not ad targeting.

Managing cookies

You can clear cookies in your browser. Signing out clears auth cookies. Blocking essential cookies will prevent login. Contact [email protected] with cookie questions.