Cookie Policy

Authentication tokens are stored in your browser to keep you signed in (JWT access/refresh). The cookie wm_locale remembers your language, wm_geo_agreed records your region acknowledgement, and wm_cookie_consent records this consent choice. Short-lived security logs may also record IP address and user-agent for abuse prevention.

These items are set without consent because they are strictly necessary to deliver the service you have requested. Blocking them will break sign-in or core functionality.

With your consent we store: wm_theme (light/dark theme), wm_chat_visitor (an anonymous identifier for the support chat) and wm_desktop_notify (your desktop-notification switch). These are stored on your device and are not uploaded.

Without consent these preferences are off: the site follows your system theme, a guest chat identity exists only in memory for the current page, and no notification preference is persisted. You may change your choice at any time.

On your first visit we show a banner with "Accept all", "Necessary only" and "Manage preferences". Your choice is stored in wm_cookie_consent together with a version number and timestamp for 180 days. You can change or withdraw it at any time via "Cookie settings" in the footer or by clearing cookies in your browser.

Declining optional preferences does not prevent parsing, downloading, payment or account features. See the Cookie Consent Supplement for the full terms on consent and withdrawal.

We collect first-party page-view statistics only if you turn on Analytics in the consent banner or Cookie settings. The measurement is cookieless: the server receives the page path, the referring domain and the technical request (IP address and user-agent), and immediately reduces them to a salted SHA-256 visitor hash. The raw IP address is not stored, the hash cannot be reversed, and it is used only to count unique visitors for a given day. We do not perform cross-site tracking, build advertising profiles or share these counts. If you decline, your browser sends no page-view record. We use no advertising, social-media or cross-site tracking cookies. If you choose Google sign-in, the Google Identity Services script may set cookies on Google's own domains under Google's policies (see our Privacy Policy, section 4); we neither set nor read those cookies and do not use them to track you. Email and phone sign-in continue to work if you block third-party cookies.

You can clear cookies and local storage in your browser at any time. Clearing wm_cookie_consent resets your choice, and we will ask again on your next visit. Signing in again will set new authentication tokens.