Cookies Policy
Last updated: June 16, 2026
The short version. We use a handful of cookies. The strictly-necessary ones (security, your consent choice itself) are always on. Analytics cookies are off by default and only switch on if you click "Accept all" or opt-in via "Customize". You can change your choice any time using "Cookie preferences" in the footer.
What is a "cookie"?
A cookie is a small text file a website stores in your browser. Browsers also offer localStorage and sessionStorage, which work similarly. We use the word cookie below to cover any of these.
Cookie categories
- Strictly necessary. Required to make the site work — security, load balancing, your consent choice itself. Always on; rejecting these would break the site.
- Analytics. Help us understand which pages are useful so we can improve them. Optional, off by default.
- Marketing. We don't currently use marketing cookies. If we ever add them, they will be off by default and listed below.
The cookies we set
Strictly necessary
| Name | Set by | Purpose | Duration |
|---|---|---|---|
wallat_consent_v1(localStorage) | Wallat | Stores your cookie-banner choice (the categories you accepted) so we don't ask again on every page. | 12 months |
__cf_bm | Cloudflare | Bot management — distinguishes humans from automated traffic to protect the site. | 30 minutes |
cf_clearance | Cloudflare | Set when you complete a security challenge, so you don't have to repeat it. | 30 days |
Analytics — loaded only after consent
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes unique users. | 2 years |
_ga_G3RVYSDKYF | Google Analytics 4 | Persists session state for our specific GA4 property. | 2 years |
If you don't accept Analytics, these cookies are not set. Even with consent denied, GA4 may receive aggregated, anonymous "cookieless pings" via Google Consent Mode v2; those pings contain no identifiers and can't be used to build a profile.
Third-party cookies
When you accept Analytics, Google sets the _ga and _ga_* cookies (first-party, set by Google's JavaScript running on our site). IP addresses sent to Google Analytics are anonymised. Google's privacy policy: policies.google.com/privacy.
When you watch our embedded YouTube videos, YouTube may set cookies on the youtube.com / youtube-nocookie.com origin (we embed using youtube-nocookie.com where possible to minimise tracking). YouTube's privacy policy applies.
How to change your choice
- Click "Cookie preferences" in the footer of any page on wallat.id.
- Or clear cookies and localStorage for wallat.id in your browser — the banner will appear again on your next visit.
- Or use your browser's "Reject all" or "Do Not Track" setting; we treat these signals as denied consent.
Contact
Questions about cookies: [email protected].