How and why Wawilee uses cookies and similar tracking technologies.
What are cookies?
Cookies are small text files placed on your device by websites you visit. They're widely used to make websites work, remember your preferences, and provide aggregate analytics that help us understand how the platform is used.
Essential cookies
These keep Wawilee working — they're strictly necessary and can't be turned off without breaking core functionality. Examples:
- Authentication cookies — keep you signed in across pages. Set by Supabase Auth.
- Session cookies — track form state and CSRF tokens during checkout, sign-in, and admin actions.
- Team-access gate — when you're using the staging or development environments, a cookie remembers that you passed the team password gate so you don't see it on every page.
Analytics cookies
On our public website, we use Plausible Analytics, a privacy-friendly analytics service that doesn't use cookies on visitors' devices and doesn't track individuals. Plausible aggregates anonymous page-view counts so we can see what's popular and what isn't. No personal data leaves your browser.
We do not use Google Analytics, Mixpanel, or any similar third-party tool that creates persistent tracking identifiers for anonymous visitors of our marketing site.
Inside the signed-in platform, we use PostHog (EU Cloud, data hosted in Frankfurt) to understand how members use the product so we can improve it — which features get used, where people get stuck in onboarding, and how the marketplace and communities are explored. PostHog stores a first-party identifier in your browser and ties events to your Wawilee account. We collect aggregate click and scroll data to produce heatmaps (no individual replay) and Web Vitals performance metrics, but session recording is not enabled. The legal basis is our legitimate interest in operating and improving a service you've actively signed up for; you can request deletion of your analytics data at any time by emailing us.
Preference cookies
When you set your notification preferences, recently viewed projects, or other settings inside the app, those preferences are stored on the server (in your account, gated by row-level security) and not in cookies. The browser stores only your authentication token.
Third-party cookies
When you complete a payment via Stripe, Stripe sets its own cookies on the checkout iframe to detect fraud and remember return visits. We don't control these cookies; their full list is on stripe.com/cookies-policy/legal.
Embedded resources from Microsoft Teams (when you click an "Open in Teams" deep link) hand you off to Microsoft's own login flow, which uses Microsoft's cookies under their privacy terms.
Your choices
Most browsers let you block or delete cookies through Settings. Note that blocking Wawilee's essential cookies will sign you out and prevent core features from working.
To manage your in-app notification preferences, head to your notification preferences.
Contact us
Questions? Email hello@wawilee.ai and we'll get back to you. For the broader privacy questions, see our Privacy Policy.