1. The short version
Swiss law (Art. 45c of the Telecommunications Act) and EU law (Art. 5(3) of the ePrivacy Directive) let us store what is strictly necessary for the service you asked for; we only have to tell you about it. Anything else, here only analytics, needs your consent.
- App (app.wiiseto.com): we ask once, with two equal buttons. Change your answer in Account > Legal & privacy.
- Website (wiiseto.com): we ask once, with two equal buttons. Change your answer at the bottom of this page.
- If your browser sends "Do Not Track", both treat it as no and do not ask.
The two ask separately, because browsers keep their storage apart.
2. Necessary storage in the app
| Name | Type | What it is for | How long |
|---|---|---|---|
| wiiseto.accessToken, wiiseto.refreshToken | Local storage | Keep you signed in | Until you sign out (sign-in expires after 7 days without use) |
| wiiseto.cachedUser, wiiseto.access | Local storage | Your profile and permissions, to open the app offline | Until you sign out |
| wiiseto.company, wiiseto.activeCompanyId | Local storage | Which company you are working in | Until you sign out |
| wiiseto.lastSyncTimestamp.* | Local storage | Where the last sync stopped | Until you sign out |
| wiiseto.onboarding.* | Local storage | Resume your onboarding where you left it | Until onboarding ends or you sign out |
| wiiseto.pendingJoinRequests.* | Local storage | Requests to join a company you sent | Until answered or you sign out |
| wiiseto.notif.read | Local storage | Which notifications you have read | Until you sign out |
| wiiseto.assistantConversation | Local storage | The Wiibot conversation you had open | Until you sign out |
| wiiseto.lastSsoDomain | Local storage | Pre-fill your company's single sign-on | Until you clear it |
| wiiseto.analyticsDecided, wiiseto.analyticsOptOut | Local storage | Remember your analytics answer | Until you sign out |
| wiiseto-c<company id> | IndexedDB | The offline copy of your company's data | Until you sign out |
| wiiseto-cavatars | IndexedDB | Profile pictures, for offline use | Until you sign out |
| wiiseto-preview-v1 | Cache storage | Recently viewed files, up to 300 MB | Until you sign out |
| wiiseto-pages | Cache storage | Pages, so the app opens offline | 30 days; deleted at sign-out |
| wiiseto-assets, wiiseto-media, app precache | Cache storage | The app's own code, images and fonts (no personal data) | Until the next app version; images 60 days |
| XSRF-TOKEN | Cookie, app.wiiseto.com | Protects forms against cross-site attacks | Browser session |
| wiiseto.pendingSocialProvider, wiiseto.pendingSocialLink, wiiseto.calendarPendingProvider | Session storage | Finish a Google, Microsoft or calendar sign-in | Until the tab closes |
| wiiseto.socialNonce.*, wiiseto.socialLinkNonce.*, wiiseto.ssoNonce.* | Session storage | Security check during sign-in | Until the tab closes |
| wiiseto.share.access.* | Session storage | Remember that you unlocked a password-protected share link | Until the tab closes |
| wiiseto.analyticsPendingPush | Session storage | Send your analytics answer to the server once you are online | Until sent |
3. Preferences in the app
| Name | Type | What it is for | How long |
|---|---|---|---|
| i18nextLng | Local storage | Your language | Until you clear it |
| theme | Local storage | Light or dark mode | Until you clear it |
| sidebar_state | Cookie, app.wiiseto.com | Whether the sidebar is open | 7 days |
| wiiseto.featureFlags | Local storage | Features being rolled out to you | Until you sign out |
| wiiseto.status.* | Local storage | The last service status, and which notices you have seen | Until you clear it |
| wiiseto.calendarIntegrationPrefs | Local storage | How connected calendars are shown | Until you clear it |
| wiiseto.allowedWebsiteDomains | Local storage | Websites you chose to open without a warning | Until you clear it |
| wiiseto.paletteRecents.* | Local storage | Your recent searches in the command palette | Until you clear it |
| wiiseto.shortcuts.overrides | Local storage | Your keyboard shortcuts | Until you clear it |
| wiiseto.photo.preferOriginal | Local storage | Upload photos at full size or compressed | Until you clear it |
| wiiseto.project.lastTab, wiiseto.board.seen.*, and other view settings (collapsed panels, filters, timeline zoom, archived projects, audio autoplay) | Local storage | Reopen screens the way you left them | Until you clear them |
| storage.projectRoot.* | Local storage | The folder linked to each project in storage | Until you clear it |
4. Analytics, only if you say yes
| Name | Where | What it is for | How long |
|---|---|---|---|
| ph_<key>_posthog | Cookie on .wiiseto.com and local storage | A random id so PostHog can count your visits (app) | 365 days |
| ph_wiiseto | Cookie on .wiiseto.com and local storage | The same, for the website | 365 days |
| ph_wiiseto_window_id, ph_wiiseto_primary_window_exists, ph_wiiseto_session_registered_properties | Session storage, wiiseto.com | Group website events into one visit | Until the tab closes |
| __ph_opt_in_out_<key> | Local storage | Your answer, as PostHog stores it | 365 days |
| PostHog session keys | Session storage | Group events into one visit | Until the tab closes |
| wiiseto.analyticsConsent | Local storage, wiiseto.com | Your answer on the website | Until you clear it |
When you say no, or withdraw, every PostHog key is deleted from your browser.
On the website, before you answer and after you decline, we count page views and whether you answered the cookie question, in memory only: nothing is stored, and the random id disappears when you close the tab.
5. Storage set by others
- Stripe sets its own cookies on its payment pages (checkout.stripe.com, billing.stripe.com), under its own policy. Wiiseto does not load Stripe on its own pages.
- Google, Microsoft or your company's identity provider set their own cookies while you sign in with them.
- Fonts are served from our own domains. We load no advertising, social media or map scripts.
6. Your control
- Signing out of the app deletes your sign-in, the offline copy, cached files and pages, and your analytics answer. Preferences stay, since they say nothing about you.
- You can clear everything at any time in your browser settings.
- If we ever need a new kind of non-essential storage, we will ask you first.